~/iptables# cat apply.sh
#!/bin/sh

echo "Loading iptables"

set -e
cd "$(dirname "$0")"
for f in rules.v[46]; do
  cat base.rules "$f" > "/etc/iptables/$f"
done
[ -f ipsets ] && cp ipsets /etc/iptables
systemctl restart netfilter-persistent.service

# Save a version without DNS names
iptables-save -f /etc/iptables/rules.v4
ip6tables-save -f /etc/iptables/rules.v6
ipset save -file /etc/iptables/ipsets