remove build time iptables dependency; patch from gentoo