When a process is killed it is unable to clean up firewall rules on exit. We also do not record enough information in the rule comments to be able to identify rules relating the specific queue we're handling in order to remove them on startup. We should record the queue number with the iptables rule comment, and on first startup should remove any rules relating to this particular queue. That removes the need for external manual cleanup of iptables rules.