linux: add netfilter.cfg fragment

No match.