{ config, lib, ... }: ''
  # Helper command to manipulate both the IPv4 and IPv6 tables.
  ip46tables() {
    iptables -w "$@"
    ${
      lib.optionalString config.networking.enableIPv6 ''
        ip6tables -w "$@"
      ''
    }
  }
''