def get_iptables_rules():
    rules = check_output([b"iptables-save"])
    return [
        rule
        for rule in rules.splitlines()
        if (
            # Comments don't matter.  They always differ because they
            # include timestamps.
            not rule.startswith("#") and
            # Chain data could matter but doesn't.  The implementation
            # doesn't mess with this stuff.  It typically differs in
            # uninteresting ways - such as matched packet counters.
            not rule.startswith(":")
        )
    ]
Return a list of :command:`iptables-save`-formatted rule strings with
dataset/ETHPy150Open ClusterHQ/flocker/flocker/route/functional/iptables.py/get_iptables_rules