kalua: netfilter: introduce netfilter_stop_all_tables() and use it in firmware()