iptables.sh: added sample rules seen when running NAT e.g. between docker and external world; netns.sh: added rules to test VRF commands