diff --git a/script/check-config.sh b/script/check-config.sh
index d54055023..c71ee72f2 100755
--- a/script/check-config.sh
+++ b/script/check-config.sh
@@ -236,7 +236,7 @@ flags=(
 	KEYS
 	VETH BRIDGE BRIDGE_NETFILTER
 	IP_NF_FILTER IP_NF_TARGET_MASQUERADE
-	NETFILTER_XT_MATCH_{ADDRTYPE,CONNTRACK,IPVS}
+	NETFILTER_XT_MATCH_{ADDRTYPE,COMMENT,CONNTRACK,IPVS}
 	IP_NF_NAT NF_NAT
 
 	# required for bind-mounting /dev/mqueue into containers