make the iptables package robust to kernel config changes