Comment 16 for bug 1508155

I talked about this at the Ireland snowstorm, I mean, meeting - and now we're hitting the xlock limitations... hard...

I know both iptables and nft but... It could be hard to have the time to figure this out...