diff --git a/tasks/base.yml b/tasks/base.yml
index 6853975bcc..c003b6be69 100644
--- a/tasks/base.yml
+++ b/tasks/base.yml
@@ -66,7 +66,7 @@
 
 
 - name: iptables
-  action: template src=$item dest=/etc/sysconfig/iptables mode=600
+  action: template src=$item dest=/etc/sysconfig/iptables mode=600 backup=yes
   with_first_found:
     - $iptables
     - $files/iptables/iptables.${ansible_fqdn}
diff --git a/tasks/iptables.yml b/tasks/iptables.yml
index af8bba24e3..887d1177b4 100644
--- a/tasks/iptables.yml
+++ b/tasks/iptables.yml
@@ -22,7 +22,7 @@
   - service
 
 - name: iptables
-  action: template src=$item dest=/etc/sysconfig/iptables mode=600
+  action: template src=$item dest=/etc/sysconfig/iptables mode=600 backup=yes
   with_first_found:
     - $iptables
     - $files/iptables/iptables.${ansible_fqdn}