On that note, I'm currently on Debian Stretch which has a Linux 4.2 kernel and consequently great support for nftables (iptables replacement). I never truly gr

On that note, I'm currently on Debian Stretch which has a Linux 4.2 kernel and consequently great support for nftables (iptables replacement). I never truly grokked iptables but configuring nftables reminded me of putting up a pf firewall on OSX. In fact, I'd say it was even easier. The docs could be a tad bit better, but the actual format itself is intuitive and easy to understand. I'd highly recommend it over iptables if one has the chance.