- adapt to building as an extra iptables sub-package