netfilter: xtables: limit xt_mac to ethernet devices