separete iptables conntrack/nat as modul, separate loop and nbd support