readme extended & reduced the number of iptables-save calls needed to sync