question on Iptables 1.2.8 stealth module patch