config-nftables-anbox: fix rule to allow matching on future iface (2274) (MR 2274)

The old rule would result in nftables failing to load if the iface
doesn't exist. Using `iifname` will match on any future ifaces if they
don't exist when the firewall starts.