Move the related/established rule to the top

Since the related/established rule gets hit the most by far, it makes
sense to put this rule at the top of the INPUT chain for performance
reasons.
3 jobs for master in 1 minute and 44 seconds (queued for 3 seconds)
Status Job ID Name Coverage
  Test
failed #6935
lint

00:00:36

canceled #6936
parser

00:01:44

 
  Deploy
skipped #6937
deploy
 
Name Stage Failure
failed
lint Test
Successfully installed puppet-lint-2.4.2
1 gem installed
$ ruby -v
ruby 2.7.1p83 (2020-03-31 revision a0c7c23c9c) [x86_64-linux-musl]
$ puppet-lint -v
puppet-lint 2.4.2
$ puppet-lint --fail-on-warnings .
./profile/manifests/base/firewall.pp - ERROR: two-space soft tabs not used on line 16
ERROR: Job failed: exit code 1