Firewall: NOT persist ephemetal ironic-inspector rules
Firewall: NOT persist ephemetal ironic-inspector rules

When Ironic Inspector is configured to use the iptables
pxe_filter driver it uses ephemeral firewall rules. This
change ensures that these rules are not persisted.

Ironic Inspector iptables filter driver does not set
comments on it's rules. This patch use the string:
'-m comment --comment' to ensure rules created by
puppet-tripleo firewall is not accidentally removed from
the persisted firewall rules.

Change-Id: Ic90804db8dd74fce78169d9857a150d5ebf40cbb
Related-Bug: #1765700

openstack/puppet-tripleo,openstack/puppet-tripleo,openstack/puppet-tripleo