add netfilter xt_string support