implement locking
use input parameter to feed iptables-restore