Comment 10 for bug 366967

Don't know why the requirements are conflicting.
I am sure no one would object that resolvconf runtime initialization should happen before first ifup run. Just that simple.

As to iptables rules loading, I usually put iptables-restore command into 'iface lo' config section.
Earlier, Debian had a kind of infrastructure for iptables rules loading/saving, but they deprecated it once with a new iptables version, and now we have to invent our own.