I'm in the middle of writing a bash script to do a diff between the loaded active iptables rules and those stores in a files as i could find an existing tool to do this. Does anyone know of one? Jeff.