[NETFILTER]: Check policy length in policy match strict mode