http://y5wnzw4e6i7srm2gqadlow5anhlaj5avdkzbwzbmrxwkygxdp7ffieqd.onion/blog/firehol-considered-useful.html
Firehol's config, firehol.conf is actually a bash script that firehol compiles into a ton of iptables commands which would do what you expect. Like iptables, first match wins going from top to bottom. Interface wg0 is my wireguard device, it accepts all connections coming in (server) and allows all connections going out (client), but wireguard does rely on a physical NIC (eth0, wlan0, whatever) which means that interface, whatever it is, needs to accept incoming wireguard connections on...