[Unit] Description=Firewall After=syslog.target network.target [Service] Type=oneshot ExecStart=/etc/firewall.bash ExecStop=/sbin/iptables -F RemainAfterExit=yes [Install] WantedBy=multi-user.target