It’s a design choice.
In some rare cases, rules involving the any destination/source can create some unexpected behavior.
Also the iptables chains grow too much.
The new validator should help the user creating better and more focused rules.
1 Like