On Tue, 2014-08-12 at 09:59 -0500, Valeri Galtsev wrote: > Long ago I learned a rule > (what users will expect from a good sysadmin): do not make any changes > unless they are absolutely necessary. The English (non-American) version is "If it ain't broke, don't fix it." So, to use in C7's firewalld (some of, because it is doubtful all exists) the functionality of IP Tables, one must first convert one's adequately expressed IP Tables wishes into a pseudo language which then changes the longer and more convoluted firewalld 'instruction' back into normal IP Tables syntax ? Some may innocently believe this is wonderful for Red Hat's eventual Lindoze Linux but how is this making life easier for computer-knowledgeable people ? Is it genuinely sensible ? -- Regards, Paul. England, EU. Centos, Exim, Apache, Libre Office. Linux is the future. Micro$oft is the past.