On 12/06/2016 01:07 AM, Daniel Reurich wrote:
> ...
> There is a processing cost to iptables and to be honest whilst
> iptables is fantastic at border gateway for filtering out malicious
> traffic, it may not be either necessary or desirable on hosts inside
> the network.
> ...

I agree. Though for many reasons, real or perceived, especially those
you pointed out, we'll need to have the official guide mention
"firewalls".

Regards
Lars