iptables: reduce binary size