defconfig: netfilter additions