netfilter: nf_tables: allow to filter from prerouting and postrouting