diff --git a/docs/examples/iptables/iptables.j2 b/docs/examples/iptables/iptables.j2
index 7f55e4c..6cf78f2 100644
--- a/docs/examples/iptables/iptables.j2
+++ b/docs/examples/iptables/iptables.j2
@@ -67,7 +67,10 @@ COMMIT
 -A PREROUTING -p tcp --dport domain -j DNAT --to-destination {{server}}
 {% endfor %}
 
-# Route any traffic out through the output NIC to act as gateway
+# Redirect all unmarked HTTP traffic to upstream Bluecoat
+#-A PREROUTING -p tcp --dport http -j DNAT --to 192.168.80.20:8080
+
+# Route any remaining unmarked traffic out through the output NIC to act as gateway
 -A POSTROUTING -o {{captiveportal_conf.output_nic}} -j MASQUERADE
 
 COMMIT