How to configure "complicated firewall" on iptables?

Question

linux

All my life I wrote iptables rules with my hands, and that was enough for me.
And now I want a more convenient configuration system:
* with a readable, but not limiting syntax
* with the generation of a config suitable for iptables-restore on the output
* with variables for designating hosts, networks, ports, interfaces, etc.
* with the generation of several configs for a bunch of servers
* with reusable templates/macros/includes * without ideas about the firewall
structure imposed by the authors (well, maybe through templates)
* without any
GUIs
fiaif, filtergen, ipkungfu, sanewall, shorewall, uif, ufw.
Can you tell me which one is appropriate?

Answer 1

At one time I used shorewall, quite a good thing