anchor.diff:      for chain in INPUT FORWARD; do
         while read lineno _; do
           iptables -D $chain $lineno
  -        service iptables save
  -      done < <(iptables -t filter --line-numbers -L $chain | grep "/\* ${comment} \*/")
  +        service iptables save &>/dev/null
  +      done < <(iptables -t filter --line-numbers -L $chain | grep -- "/\* ${comment} \*/")
       done
   
       #Purge rules in nat table
       for chain in POSTROUTING; do
         while read lineno _; do
           iptables -D $chain $lineno
  -        service iptables save
  -      done < <(iptables -t nat --line-numbers -L $chain | grep "/\* ${comment} \*/")
  +        service iptables save &>/dev/null
  +      done < <(iptables -t nat --line-numbers -L $chain | grep -- "/\* ${comment} \*/")
       done
     elif [[ "$method" == "savegreprestore" ]]; then
  -    iptables-save | grep -v $comment | iptables-restore
  +    iptables-save | grep -v -- "$comment" | iptables-restore
  +    service iptables save &>/dev/null
     fi
   }
   
  
positive.code:   case $1 in
      cobbler)   setup_dhcrelay_for_cobbler
                 ;;
      *)         ;;
    esac
  }
  
negative.code: 
    iptables -t nat -I POSTROUTING 1 -s "$NETWORK/$PREFIX" -p $proto -m $proto --dport $port -m comment --comment "$container-$proto-$port-unmasquerade" -j ACCEPT
    iptables -A FORWARD -i $admin_interface -o docker0 -m state --state NEW -p $proto  -m $proto --dport $port -m comment --comment "$container-$proto-$port-accept" -j ACCEPT
    service iptables save &>/dev/null
  }
  function purge_stale_iptables_rules {
    container=$1
  