Because iptables changes aren't persistent unless you write them to some file that gets loaded at bootup.