add missing config checks for the netfilter connmark target (fixes #1186)