netfilter: add a check for ip proto in netfilter_match_speedup patches (closes: ...