As per aclaudi:

basically because of tc, check em_ipt.c and em_ipset.c. I'll check with Davide, if iptables is phased out I think we are basically OK to exclude these two from tc config file so we can get rid of the iptables dependency.