fwtool: generate rules in primary input/output chain