[22.03] Translate extra/raw firewall rules

Taking hours-days instead of 1-2 minutes is the issue.

(and correction - the entries are about 100K - it took 1 MB in memory from the old iptables)

and this is an x86_64 taking that long