This will ensure that /rw/config/rc.local is called after applying default iptables rules, so it can safely modify it without the risk to be overridden later by default ones.