iptables is the standard currently, but I'd suggest learning nftables. nftables is meant to replace iptables everywhere. It might take time for it to gain the

iptables is the standard currently, but I'd suggest learning nftables. nftables is meant to replace iptables everywhere. It might take time for it to gain the same usage as iptables, but it is currently a drop-in replacement for iptables on many distros. Relevant discussion here: https://news.ycombinator.com/item?id=14286016 https://news.ycombinator.com/item?id=14286016 Also: https://developers.redhat.com/blog/2016/10/28/what-comes-after-iptables-its-successor-of-course-nftables/ https://developers.redhat.com/blog/2016/10/28/what-comes-aft...