Makefile: optimize compiler flags (Uber-style)
net/netfilter/Makefile: disable unsafe math ops for netfilter due to compiler flags update