Florian Westphal <fw@xxxxxxxxx> wrote: > This adds a clear distinction between old iptables (formerly > xtables-multi, now xtables-legacy-multi) and new iptables > (formerly xtables-compat-multi, now xtables-nft-multi). > > Users will get the ip/ip6tables names via symbolic links, having > a distinct name postfix for the legacy/nft variants helps to > make a clear distinction, as iptables-nft will always use > nf_tables and iptables-legacy always uses get/setsockopt wheres > "iptables" could be symlinked to either -nft or -legacy. I've pushed this plus patches that add initial test cases (also for save/restore). I included fixes for the problems sported by Jan. In case anyone else sees issues, please let me know. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html