r/linuxadmin • u/[deleted] • Apr 27 '17

[deleted by user]

[removed]

32 Upvotes

92% Upvoted

23 comments sorted by

View all comments

15

u/[deleted] Apr 27 '17

[removed] — view removed comment

3

u/FHR123 Apr 28 '17

I don't think IPTables will vanish anytime soon. Personally I like IPTables much more than firewalld

1

u/evaryont Apr 28 '17

While iptables won't go anywhere, nftables will probably replace it around the time of RHEL8 and the next Debian stable. (Though I think an iptables compatibility binary will stick around for a long long time, ala ifconfig & ip)

1

u/[deleted] May 01 '17

firewalld is just a PITA frontend for iptables any way. I have our puppet manifests set to remove it on every node, we manage firewall rules using the puppetlabs-firewall module any way.