On 4/27/20 6:24 PM, Sam Varshavchik wrote:
The same thing, pretty much, goes with everything else. Here's another, very similar situation right now, which is rolling your local iptables rules versus firewalld.
I saw the handwriting on the wall, on that account, one several releases ago, and slogged my way through converting what I was doing with iptables into the equivalent deal with firewalld.
I still make my own iptables scripts, mostly using fwbuilder. I think it might be possible to add the dynamic rules I would like to have if I switch to firewalld, but I haven't had the time for that yet. And then there's nftables which is the new replacement for iptables.