
Inserting with `-I` causes the rules to placed before `ctstate` tracking, while `-A` places them alongside all other allow rules.
Inserting with `-I` causes the rules to placed before `ctstate` tracking, while `-A` places them alongside all other allow rules.