add some additional iptables comments
fix bug in sorting rule pointers
add another test