document iptables line