Why is the kernel community replacing iptables? | Hacker News Reader