I have a script which is handling iptables / nftables. It detects if nft or iptables command should be used (yeah, it could run in old machines without nft). The script is saving the current status, then it cleans current rules and does some modifications while running and at the end it restores the original state. I have two different questions (the easy and the harder).