netfilter: fix build