config-for-desktop: enabling some netfilter functions.