Previously we only REJECTed on OUTPUT which works for packets from the
node but not for packets from pods on the node.