xeon: more advanced netfilter features enabled.