netfilter: support /proc conntrack flushing of specific ip addresses