netfilter-bridge: layout of if statements