NET_CLS_ACT can no longer be built as module in newer kernels, force it to =y