Whenever I touch a Linux system I’m amazed that nobody’s written anything better than iptables yet.
3
1
Replying to @jogbert
@jogbert It's horrible. Yet I rarely have to touch it. ufw does fine for laptops and simple servers, and I use firehol for complex routers.

May 27, 2013 Β· 4:23 PM UTC

1
Replying to @dsilverstone
@dsilverstone Just little things, like β€œlog AND accept/drop” shouldn’t need to be two rules. :-(
1
@jogbert Mmm, OTOH it's pretty extensible/sane overall.
2
more replies