The one thing I'd like to see ported over is ufw, as that's one thing about Ubuntu to envy. firewall-cmd is downright annoying and bizarrely designed.
The one thing I'd like to see ported over is ufw, as that's one thing about Ubuntu to envy. firewall-cmd is downright annoying and bizarrely designed.
Note here that if everyone just spent the 5 minutes it takes to learn the few basic iptables commands, we wouldn't have ufw and firewalld and firehol and vuurmuur and Crazy Bob's Super Simple VBA-to-XML iptables rule generator. Every attempt at making iptables "easy", I consider harmful, as it's a basic systems administration skill that people continually hurt themselves by not learning. iptables is not hard, but all of these wrappers make it hard by introducing their own dumb syntax while adding complexity and quashing any hope of a standard interface between distros to control networking rules, which iptables already was before they tried to "fix" it.
I've realised that when I noticed that the comments I wrote for others on my iptable configs were comparable in length and content to firehol (but not verifiable or executable). Unlike ufw, firehol actually saved me significant time and effort even though I know (and use) iptables directly.
At least Ansible provides a tidy wrapper for it.
git has a reputation for being annoyingly quirky, but firewalld is leaps ahead in terms of marching to the beat of its own drum.