Changes

it remains right. But if you restart your [[hardware node]], all the rules and consequently statistics are dropped.

So it is recommended to

* run some cron job that dumps statistics to some file

* add init script that creates iptables rules on [[HN]] start.