iptables: backport patch fixing bug with string module