samples/iptables: spelled out some smaller options