anchor.diff:  
     iptables -t nat -I POSTROUTING 1 -s "$NETWORK/$PREFIX" -p $proto -m $proto --dport $port -m comment --comment "$container-$proto-$port-unmasquerade" -j ACCEPT
     iptables -A FORWARD -i $admin_interface -o docker0 -m state --state NEW -p $proto  -m $proto --dport $port -m comment --comment "$container-$proto-$port-accept" -j ACCEPT
  -  service iptables save
  +  service iptables save &>/dev/null
   }
   function purge_stale_iptables_rules {
     container=$1
  
positive.code:     for chain in INPUT FORWARD; do
        while read lineno _; do
          iptables -D $chain $lineno
          service iptables save
        done < <(iptables -t filter --line-numbers -L $chain | grep "/\* ${comment} \*/")
      done
  
      #Purge rules in nat table
      for chain in POSTROUTING; do
        while read lineno _; do
          iptables -D $chain $lineno
          service iptables save
        done < <(iptables -t nat --line-numbers -L $chain | grep "/\* ${comment} \*/")
      done
    elif [[ "$method" == "savegreprestore" ]]; then
      iptables-save | grep -v $comment | iptables-restore
    fi
  }
  
  
negative.code:   case $1 in
      cobbler)   setup_dhcrelay_for_cobbler
                 ;;
      nginx)     remangle_nginx
                 ;;
      rsyslog)   remangle_syslog
                 ;;
      *)         ;;
    esac
  }
  