Firewall UI for policy rules

It’s not just a question about “fake NethServer”. yes, we have to improve it with many features by web interface but I don’t like exploding NethServer with zillions of confusing settings, we’d rather have sensible out-of-box defaults that work for 90% of users and can be tweaked. But in some cases the needs are so divergent that a new setting must be added. This should be a method of last resort in my opinion. Don’t you think?
We have discussed it in many topics, for example:

How about we move forward there?