Separate names with a comma.
Interesting article on why Kernel community is intending to replace iptables with BPF (bpfilter)...