salt/base/firewall/files/ipset-save.sh

#!/bin/sh

PATH=/sbin:/usr/sbin:/bin:/usr/bin

ipset save > /etc/iptables/ipset.tmp && mv /etc/iptables/ipset.tmp /etc/iptables/ipset