05.md: add iptables u32 commands; refine