: Netfilter fixes

Hi Dave,

these are Martin's fixes for fallout from the recent patches and an additional patch to add support for inversion to ipt_multiport.

You can pull all changes from bk://212.42.230.204/nf-2.6

Regards
Patrick

Martin Josefsson:
o [NETFILTER]: Fix compile with NAT but without modules
o [NETFILTER]: Fix compile errors without NAT
o [NETFILTER]: Fix SNAT/DNAT target size checks

Phil Oester:
o [NETFILTER]: Add inversion to multiport match

All pulled, thanks Patrick.