iptables/ipchains and kernel 2.2.19/2.4.x...which is better for firewall?