netfilter: xtables: replace XT_MATCH_ITERATE macro