iptables.8: --policy is either ACCEPT or DROP

its enforced by both by libiptc and kernel.

Signed-off-by: Florian Westphal <fw@strlen.de>