How to override iptables rules outside of firewall module?

do you have an /etc/iptables/rules.v4 file?
its possible that iptables-persistent is whats getting you.

Also, what sorcery are you doing on your pbx that needs custom iptables rules?