move the fail2ban rules under the dsa-f2b chain