iptables: add comment match to the core package