[NETFILTER]: annotate {arp,ip,ip6,x}tables with const