iptables: initial support for /var/lib/ebtables