[Unit] Description=Firewall Rules to Block Remote Access Before=network-pre.target Wants=network-pre.target [Service] Type=oneshot ExecStart=/usr/sbin/iptables-restore /etc/iptables/rules.v4 ExecStart=/usr/sbin/ip6tables-restore /etc/iptables/rules.v6 RemainAfterExit=yes [Install] WantedBy=multi-user.target