pobeda: more advanced netfilter features enabled.