iptables: remove layer7 leftovers (#19506)