Build in br_netfilter, since at least one CNI barfs without it
#153
+2
−2
br_netfilter, since at least one CNI barfs without it
#153