lenovo_carbon_x1: add netfilter/iptables options