compile with more netfilter options