Oh, well. I was thinking it might be related to firewall states needing a few ticks to properly reload or the like.

Re: logs: I like to ensure my scripts log their actions for potential/future cases of troubleshooting. A separate item makes logwalking w/ logread -e a touch easier. YMMV.