skip vms rules generation if rule ipversion don't match iptables version