refactored the netfilter log handle to have separate groups for in & out