qubes-misc-post provides /rw/home, required by NetworkManager, so do not try start it after network.target
This will ensure that /rw/config/rc.local is called after applying default iptables rules, so it can safely modify it without the risk to be overridden later by default ones.