is it ok to use direct iptable rules via root, instead of through the standard interface?
Because I am trying to make use of port knocking to give extra protection to the ssh port, but from what I can see this is not possible via the standard vyos tools.