add iptables-sample.md