(#9082) Sort iptables --state option values internally to keep it consistent across...

(#9082) Sort iptables --state option values internally to keep it consistent across runs

Previously we were getting multiple re-runs due to the fact that iptables
returns a different order with iptables-save then what was used when creating
the rule.

This patch fixes that by sorting states with should=.

Added unit tests to ensure states are correctly sorted. Also added comments in
code to ensure people understand why