[hombre_fatal]

You always have the option to do your own custom thing like use nix config to manage /etc/iptables.rules.

NixOS does you one thing better by giving you the option to configure things without caring about the underlying implementation, like whether the firewall uses iptables or nftables or something else.