netfilter: xt_recent: fix false match