Add netfilter sample
fix exec