I often use iptables (or ip6tables, the IPv6 version of iptables) to implemented firewall rules on my linux systems.
In earlier times I used a commented bash script to setup the rules after booting, but using Gentoo nowadays there is a nice init script saving and restoring my tables. Using this I stopped commenting the firewall rules, but yesterday I found a very nice solution for this problem.
Iptables has a special "match" for comments. Continue reading