Patch iptables for use with HA kernel patch (XFRM hooks)