New comment by ailiop-git on void-packages repository https://github.com/void-linux/void-packages/pull/31145#issuecomment-849553123 Comment: > Also, why not just `cat /etc/iptables/iptables.rules /etc/iptables.d/*.rules | iptables-restore` so that the entire aggregated ruleset will be loaded in one-go rather than invoking iptables-restore repeatedly? This would simplify and avoid the need to add the --noflush flag and the counter/exit code issue altogether. Actually ``--noflush`` will still be required (otherwise iptables-restore will flush any tables are provided multiple times within the same aggregated ruleset even within a single invocation).