linux: remove nf_conntrack
iptables: build static. dont install iptables-xml