add extra netfilter xt stuff to config-template