generic-2.4: add ip6t_REJECT support