Normally (that is, on Debianish systems), when you have to add a firewall rule uou have to put a defenition in the iptables.d/ directory and restart iptables. I can easily write a script to do this on a few systems (for example with expect, or something like that).
On Redhat systems, they "forgot" the iptables.d/ directory, and you have to put the new rule in /etc/sysconfig/iptables. I can certainly device a sed and awk thingy that puts the rule in the file (the last rule is a reject rule, and everything beyond that is ignored, so you have to add the rule "in the middle" of the file). but these things often quickly get messy.
Question: is there a way to maintain the iptables rules of many Redhat Servers, such that you don;t need "hacking the file" with awk/sed ? I am looking for easy implementations, not something big like Satelite or JBoss-ON (RHQ).