iptables: Fix is_fallthrough() check