writes output
write directly to iptables-restore