iptables: backport the libiptc split from r26292