Firewall rules for the current 1.4/1.5 rolling release

[Apachez]

Along with this embryo of a template to do “zone-based firewalling” again:

Latest rolling image many open ports by default

Im just a happy community member myself and have nothing to do with whatever decisions the VyOS maintainers make. For me I prefer the new syntax but thats probably since I have been using iptables since around year 2000. Nowadays nft (nftables) is the userland tool to be used to program the firewall in the Linux kernel. With that being said I wouldnt be surprised if the zone-based approach would return (but based on the new syntax) in future. Im currently doing my own template for that where …

Also note the disclaimers in above post.