Am I using the TTL match incorrectly? iptables -A PREROUTING -m ttl --ttl <value> -j TTL-in gets me a core dump. using test10 everything else seems fine