Thanks for your answer!
I use “watch cat filename” to see changes on the file my watchdog is listening to. The file was changed every time I change some fw rule.
So, I don’t think that temp files are relevant to this.
Also, I tried to listen to all the files in that directory and can’t see any...