The later one is present only in latest iptables version - especially debian does not have it. But we need to handle "Device or resources busy" problem somehow.