netfilter: add support for data usage limit