[Discuss] firewalld rant

[dsr at randomstring.org (Dan Ritter)]

Matthew Gillen wrote: 
> Maybe I'm getting cranky in my old age, but after giving up on my
> manually maintained iptables scripts that were 20 years old and trying
> to build everything in firewalld (and running mostly successfully for a
> couple years), I'm considering going back.  I'm writing this to
> hopefully keep you from hurting your head from banging it on the wall if
> you're trying to do advanced things.

Don't bang your head. Write a shell script to hold your iptables
or nftables commands and make things easier for you.

-dsr-