ENH: Add <chain> tag to iptables-ipsets.