update some netfilter stuff