firewall: do not check for module availability, let iptables fail if a feature is...