[Unit]
Description=Packet Filtering Framework

[Service]
Type=oneshot
EnvironmentFile=/etc/conf.d/iptables
ExecStart=/usr/sbin/iptables-restore $IPTABLES_CONF
ExecStop=/usr/lib/systemd/scripts/iptables-flush
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target