ipv4 netfilter workaround for wswitch