clean up firewall on bitmask start

Can we clean up the firewall when the VPN service is turn up? So we clean dirty firewalls from previous broken executions.