kalua: netfilter: user_reachable() make maxtry configurable + fix counting