reorder netfilter patches, update layer7 kernel to latest version, should improve...