This patch replaces the conntrack/nat protocol-lists with an array.

The patch depends on the conntrack_nonat.patch.
