iptables: restore reap functionality to recent module