Re: fedora plans to replace iptables with firewalld

[David Miller <davem@davemloft.net>]

From: Stephen Clark <sclark46@earthlink.net>
Date: Thu, 15 Nov 2012 15:39:38 -0500

> On 11/15/2012 02:37 PM, David Miller wrote:
>> From: Stephen Clark<sclark46@earthlink.net>
>> Date: Thu, 15 Nov 2012 14:30:21 -0500
>>
>>> Is anyone here aware that fedora is planning on replacing iptables
>>> with something called firewalld?
>> It's an abstraction layer built on top of iptables and ebtables,
>> not a replacement.
>>
>> A simple read of the project web site would have told you this,
>> and I encourage you to do some research in the future instead
>> of spreading misinformation.
>>
>> Thanks.
>>
> This is not what it says in the feature page at
> https://fedoraproject.org/wiki/Features/firewalld-default#Detailed_Description

The "service" as in the user level scripts, not the kernel level
components.

Read the project page, for real:

https://fedoraproject.org/wiki/FirewallD

Where it explicitly says:

====================
Adding an abstraction layer on top of ip*tables and ebtables firewall
rules makes adding rules simple and more intuitive. The abstraction
layer needs to be powerful, but also simple, which makes this not an
easy task. A firewall language has to gen invented for this. Firewall
rules have a fixed position and querying generic information about
access state, access policies for ports and other firewall features is
possible.
====================

Please stop wasting everyone's time.