base-system build programs that use berkdb (just arpd) include support for iptables filtering