[pve-devel] firewall : cluster.fw [rules] section ?

[Dietmar Maurer]

> BTW, I'll also rework my ipv6 patch.
> 
> I thinked about extend $ruleset, to something like
> 
> $ruleset->{iptables}->{filter}
> $ruleset->{iptables}->{nat}
> $ruleset->{ip6tables}->{filter}
> $ruleset->{ebtables}->{filter}
> 
> Like this, we can manage multi commands and filters.
> 
> What do you think about it ?

Looks good, but I think we should evaluate nftables now (instead of using all those different binaries).
I have no idea if it is already usable?