you are viewing a single comment's thread
view the rest of the comments
[–] 9 points 3 years ago (1 child)

on the contrary, CLI is the BEST way to deal with firewall rules.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 6 points 3 years ago

    Personally, I'd take it a step further. Firewall rules should be defined as code in a git repo. So if you're building rules in a gui, you're simply doing it wrong. While a cli and/or api should be used, that should be automated and invisible to a human.

  • source
  • parent