New proposal types for firewall configuration

[Lorimer]

Cross-posting, as this may be useful context for any future readers of this thread.

Firewall rule changes on the IC

position isn’t just where the rule is stored in the vector – it represents the rule’s actual priority. These are translated into nftables (or iptables) using the same order, and Linux firewalls use the first match (such that later rules are not evaluated). In any case, even if there weren’t priority attached to position (though there is ) it would still be the case that updates at a specific position would overwrite whatever is already there (so it’s important to verify…