Minipot: redirects should be ordered after user rules

Currently we insert redirect (NAT) rules basically at the beginning of chain. That mean that we overrule any existing rule. We should rather append it.