some cases of xt-seg, only ot/ok remaining. helper inv-stp2-bind-top works