iptables: remove layer7 support