merge up to iptables 1.3.8 with a basic set of extensions