This might be an obvious thing to old Linux-heads out there, but it sure caught me off-guard, so there might be some use in spelling it out:
iptables-save
and iptables-restore
do not actually save/load the
iptables rules to/from an external file. You are responsible for
redirecting the output ...