* Lennart Poettering:
> So offer something with equivalent functionality (and config
file
> syntax compatibility), with a nice modern clean API and then systemd
> and others can be moved over to that 1 by 1, and once we've no more
> users left we can kill of the old beast ?
Nope. In systemd we already support one subsystem for filtering just
fine, it's called a firewall.
Does this subsystem support DNS-based rules?