If you're manually editing iptables rules in production in current year you're doing it wrong anyway, you should have some form of config management like ansibl

If you're manually editing iptables rules in production in current year you're doing it wrong anyway, you should have some form of config management like ansible/salt/puppet etc that make it dead simple to add rules or at the very least just use firewalld or something