Add netfilter skeleton module

Drop every nth packet. Simpler than iptables' statistic module. Start
from SO2 lab on netfilter.