[iptables] comments
bump