add tips for iptables rules