[Unit]
Description=Packet Filtering Framework (IPv6)
Wants=network.target
After=network.target
ConditionPathIsDirectory=/var/lib/ip6tables
ConditionFileIsExecutable=/sbin/ip6tables-save
ConditionFileIsExecutable=/sbin/ip6tables-restore

[Service]
Type=oneshot
RemainAfterExit=yes
Environment=RULES_FILE=/var/lib/ip6tables/rules-save
Environment=EXTRA_ARGS=-c
ExecStartPre=/usr/bin/touch ${RULES_FILE}
ExecStart=/bin/sh -c "/sbin/ip6tables-restore $EXTRA_ARGS < ${RULES_FILE}"
ExecReload=/bin/sh -c "/sbin/ip6tables-restore $EXTRA_ARGS < ${RULES_FILE}"
ExecStop=/bin/sh -c "/sbin/ip6tables-save $EXTRA_ARGS > ${RULES_FILE}"

[Install]
WantedBy=multi-user.target