GitLab

skip expansion in the variable fragment to avoid clearing variable declarations

deterministic processing order within modules
global classmap for dynamic module discovery

drop awall prefix when accessing submodules from the main module
remove module-level function/module shortcuts when used only once

private class for reading current configuration

verification requires root privileges

context objects converted to explicit Config objects

(except for the DNS resolution cache)
context, IPTables, and IPSet objects introduced

module for ipset tool-related functionality

output saved as rules[6]-save
corrected a couple of syntax errors in output
disabled the default rule in nat module