iptables: a COMMIT line is not a rule