Kernel/iptables conflict