>> 5. You can't script iptables-restore! > > Well, actually you can script iptables-restore.
For those who are interested: net-firewall/firewall-mv from the mv overlay (available over layman) now provides a separate firewall-scripted.sh which can be conveniently used for such scripting.

