Suitably new version of netfilter (both in kernel as well as the user space tools), containing the recent match extension. TODO: what versions?