Also cleanup stale vifs using "xm network-detach ... -f" Fix iptables rules to support not only first vif of VM