iptables problems after kernel 1871