From: Stephen Clark <sclark46@xxxxxxxxxxxxx> Date: Thu, 15 Nov 2012 15:39:38 -0500 > On 11/15/2012 02:37 PM, David Miller wrote: >> From: Stephen Clark<sclark46@xxxxxxxxxxxxx> >> Date: Thu, 15 Nov 2012 14:30:21 -0500 >> >>> Is anyone here aware that fedora is planning on replacing iptables >>> with something called firewalld? >> It's an abstraction layer built on top of iptables and ebtables, >> not a replacement. >> >> A simple read of the project web site would have told you this, >> and I encourage you to do some research in the future instead >> of spreading misinformation. >> >> Thanks. >> > This is not what it says in the feature page at > https://fedoraproject.org/wiki/Features/firewalld-default#Detailed_Description The "service" as in the user level scripts, not the kernel level components. Read the project page, for real: https://fedoraproject.org/wiki/FirewallD Where it explicitly says: ==================== Adding an abstraction layer on top of ip*tables and ebtables firewall rules makes adding rules simple and more intuitive. The abstraction layer needs to be powerful, but also simple, which makes this not an easy task. A firewall language has to gen invented for this. Firewall rules have a fixed position and querying generic information about access state, access policies for ports and other firewall features is possible. ==================== Please stop wasting everyone's time. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html