[Unit]
Description=Firewall
After=network.target

[Service]
RemainAfterExit=yes
ExecStart=/usr/local/bin/firewall start
ExecReload=/usr/local/bin/firewall force-reload
ExecStop=/usr/local/bin/firewall stop
User=root

[Install]
WantedBy=multi-user.target