Adding comment option to iptables rule

Change-Id: I9d93052cfc197a364b42240448344d5543e8805f

README.rst

@@ -88,6 +88,7 @@ Allow access from local network
                   destination_port: 22
                   source_network: 192.168.1.0/24
                   jump: ACCEPT
+                  comment: Blah
 
 IPv6 is supported as well
 

iptables/_rule.sls

@@ -20,6 +20,9 @@ iptables_{{ chain_name }}_{{ rule_name }}:
   {%- if rule.match is defined %}
   - match: {{ rule.match }}
   {%- endif %}
+  {%- if rule.comment is defined %}
+  - comment: {{ rule.comment }}
+  {%- endif %}
   {%- if rule.connection_state is defined %}
   - connstate: {{ rule.connection_state }}
   {%- endif %}

tests/pillar/iptables_server.sls

@@ -10,4 +10,4 @@ iptables:
             destination_port: 8088
             source_network: 127.0.0.1
             jump: ACCEPT
-
+            comment: Blah