Well... using the new “nftables” packet filter, this will be the "normal" way of packet filtering. So, yes, please! ☺ http://netfilter.org/projects/nftables/ h

Well... using the new “nftables” packet filter, this will be the "normal" way of packet filtering. So, yes, please! ☺ http://netfilter.org/projects/nftables/ http://netfilter.org/projects/nftables/ ❝Pseudo-state machine in kernel-space: the userspace utility nftables interprets the rule-set provided by the user (using a new syntax), it compiles it into the pseudo-state machine bytecode and then it transfers it to the kernel via the nftables Netlink's API. Roughly, the idea behind nftables is similar to the Berkeley Packet Filters (BPF).❞