
Inserting with `-I` causes the rules to placed before `ctstate` tracking, while `-A` places them alongside all other allow rules.
*** NixOS *** NixOS is a Linux distribution based on the purely functional package management system Nix. More information can be found at http://nixos.org/nixos and in the manual in doc/manual.