The xt_string match is broken with ! negation. This resolves a portion of netfilter bugzilla #497. Phil Signed-off-by: Phil Oester