[NETFILTER]: Change {ip,ip6,arp}_tables to use centralized error checking