Don't break it

    Don't tinker, nor let others (few root)

    Don't do development on firewall

    Test first

    ipf/nat testing