backport iptables extension split introduced by changeset:2412 (fix ticket:40),