NetworkManager does not connect it only control interfaces using
wpa_supplicant for low-level functions. I do not need this buffer so I use
only wpa_supplicant. The main reason is that NM save password as it is.
wpa_supplicant without NM is more secure.
Iptables is that buffer between user and kernel module named Netfilter that
get user commands and rely it to netfilter rules. Just this. I do not use any
gui firewall cause I do not think there is any good soft. In Linux there are
only command line features like iptables, nmap, netstat for controlling and
monitoring network.
My iptables rules for desktop allow any outgoing traffic (`output accept`),
decline all incoming traffic except established and related connections. As I
understand only web-sites that I am requesting may send me answer to open
ports. Also ftp, I think.
Also it allows any ethernet connections (but I do not use ethernet, only
wifi).
ICMP , I'm not sure, just copied as it was in the example.