iptables-edit.sh

#!/usr/bin/env bash

set -euo pipefail

OLD_FILE="$(mktemp iptables-save-old.XXXXXXXXXX)"
NEW_FILE="$(mktemp iptables-edit-new.XXXXXXXXXX)"

cleanup() {
    for file in "${OLD_FILE}" "${NEW_FILE}"
    do
        if [[ -e "${file}" ]]
        then
            rm -v "${file}"
        fi
    done
}

# trap cleanup EXIT

iptables-save -f "${OLD_FILE}"
cp -v "${OLD_FILE}" "${NEW_FILE}"
"${EDITOR:-vim}" "${NEW_FILE}"
if ! diff -u "${OLD_FILE}" "${NEW_FILE}"
then
    iptables-apply "${NEW_FILE}"
else
    1>&2 echo "No changes made."
fi