iptables: using external kernel tree should not alter patch behaviour.