[Unit] Description=iptables firewall service After=network.target [Service] Type=oneshot ExecStart=/etc/iptables/service.sh start RemainAfterExit=true ExecStop=/etc/iptables/service.sh stop StandardOutput=journal [Install] WantedBy=multi-user.target