[iptables] comments support