<html>
    <head>
      <base href="https://bugzilla.netfilter.org/" />
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Usability improvements, enabling creation of complex firewalls"
   href="https://bugzilla.netfilter.org/show_bug.cgi?id=1434">1434</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>Usability improvements, enabling creation of complex firewalls
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>nftables
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>unspecified
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>x86_64
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>enhancement
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>P5
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>nft
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>pablo@netfilter.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>bugzillanetfilterorg@vespian.net
          </td>
        </tr></table>
      <p>
        <div>
        <pre>There is a community around iptables abstraction layer `Ferm`:
<a href="https://github.com/MaxKellermann/ferm">https://github.com/MaxKellermann/ferm</a>

This tool is great when creating complex firewalls, and for e.g. integrating
firewall configuration with automation tools like Ansible. We would like to
switch to using nftables as this is the future, but there is still some
functionality gaps that prevent us from doing so.

In the following discussion: <a href="https://github.com/MaxKellermann/ferm/issues/35">https://github.com/MaxKellermann/ferm/issues/35</a>
there are quite a few good points made by the Ferm users, namely:
* from user horazont:
<a href="https://github.com/MaxKellermann/ferm/issues/35#issuecomment-486644235">https://github.com/MaxKellermann/ferm/issues/35#issuecomment-486644235</a>
* from user nurupo:
<a href="https://github.com/MaxKellermann/ferm/issues/35#issuecomment-644691310">https://github.com/MaxKellermann/ferm/issues/35#issuecomment-644691310</a>

I would like to bring this discussion to your attention and see if they could
be addressed. Thank you in advance for having a look and voicing your opinions. 

pr</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are watching all bug changes.</li>
      </ul>
    </body>
</html>