iptables: support -i, -o, -s and -d in option extra