Replaced output file handles for iptables-generation with a single output redirection file descriptor for each of $FILEfilter, $FILEnat and $FILEmangle.
Pay attention to change the code in e.g. 'localhost' as well or you might run into race conditions.