use NF_DROP instead of NF_STOLEN when we tell the kernel to not worry