Post #3957169

A friend of mine, Dave Kempe, has kicked off the shorewall-nft project, to continue the legacy of the brilliant iptables frontend (really an API/spec) that Tom Eastep started over 25+ years ago. https://github.com/sol1/shorewall-nft There's no better way to do Linux firewalling, and I'll be migrating all of my projects to this. Yes there's even an #mgmtconfig shorewall module: https://github.com/purpleidea/mgmt/tree/master/modules/shorewall