Control script for nftables with a systemd service file