Their firewall is iptables wrapped in a really nice GUI. The criticism on their firewall might as well be a criticism on iptables (which IMO is completely vali

Their firewall is iptables wrapped in a really nice GUI. The criticism on their firewall might as well be a criticism on iptables (which IMO is completely valid, even after years I still have doubts about what a certain rules structure is going to do). iptables itself is extremely unintuitive (although extremely powerful and flexible), but their GUI makes it more manageable.