add comments to make iptables.check work