[Unit] Description=Enables forwarding in the linux kernel after the firewall is fully loaded After=nftables.service Requires=nftables.service [Service] RemainAfterExit=yes Type=oneshot ExecStart=/usr/local/bin/netforwarding start ExecStop=/usr/local/bin/netforwarding stop [Install] WantedBy=multi-user.target