Use /etc/iptables.d for rules.