[Unit] Description=IPv4 Packet Filtering Framework Before=network-pre.target Wants=network-pre.target [Service] Type=oneshot ExecStart=/sbin/iptables-restore /usr/share/iptables/iptables.rules ExecReload=/sbin/iptables-restore /usr/share/iptables/iptables.rules ExecStop=/bin/bash /usr/share/iptables/iptables-flush.sh RemainAfterExit=yes [Install] WantedBy=multi-user.target