Allow nat to leverage the firewall unit if available

[wkennington]

No description provided.

[aristidb]

If you merge them a minute after creating them, there's little point in
creating PRs. Nobody looks at closed PRs.
Am 16.09.2014 06:33 schrieb "William A. Kennington III" <
notifications@github.com>:

Merged #4111 #4111.

—
Reply to this email directly or view it on GitHub
#4111 (comment).

[wmertens]

No, PRs are nice even when you immediately pull them. I saw the email and came here.

Post-merge 👍 😀

One thing though - I notice that this completely flushes the nat table, instead of using its own chain like the regular firewall does. This is what it did before, but it would be nice if the rules were in their own chain so e.g. Docker and friends don't get their firewall rules deleted by this.

[lucabrunox]

@wmertens I can agree with things like packages, but not with system stuff if overlooked breaks nixos deployments. Let other people take time to review this critical stuff.

[wkennington]

@wmertens #4121 Should implement that behavior.