1[Unit] 2Description=Arp filtering arptables 3After=network.target 4Requires=network.target 5 6[Service] 7Type=oneshot 8ExecStartPre=/bin/sh -c "mkdir -p /etc/sysconfig; if [ ! -f /etc/sysconfig/arptables ]; then /usr/sbin/arptables-save > /etc/sysconfig/arptables; fi" 9ExecStart=/bin/sh -c "/usr/sbin/arptables-restore < /etc/sysconfig/arptables" 10ExecStartPost=/bin/sh -c "touch /var/lock/subsys/arptables" 11RemainAfterExit=yes 12ExecStop=/bin/sh -c "/usr/sbin/arptables-restore < /dev/null" 13ExecStopPost=/bin/sh -c "rm -f /var/lock/subsys/arptables" 14 15[Install] 16WantedBy=multi-user.target 17