Ok, I have a fix and a solution.
First the fix, I’ve created fix-vserver-rules-more-than-100-b11.0.1.patch, all it does is add ‘sort -n’ to the script that lists, and adds vserver rules. Works on beta11, probably will apply and work on beta12.
Now the solution for Jeff:This script does the grep, and the iptables, parses them, then shows the difference.
Lines beginning with < aren't in iptables.
Lines beginning with > aren’t in the UI.
No warranty on this, but it should work. Please check the results before trusting, as I don’t have near as complete a vserver list as you do.