Though not yet installed by default, you may want to look into the nft and nftables systems.
nftables is a replacement for the existing kernel framework, and nft is the accompanying command-line tool.
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month, and much more.