gluon-next-node: add ebtables to filter IP packets with the next-node address