Use /etc/invirt-iptables/rules.d instead of /usr/share.