Phil Sutter <phil@xxxxxx> wrote: > If nft can't translate a compat expression, dump it in a format that can > be restored later without losing data, thereby keeping the ruleset > intact. Why? :-( This cements nft_compat.c forever. If we're goping to do it lets at least dump it properly, i.e. nft ... add rule compat "-m conntrack --ctstate NEW". At this time I'd rather like a time machine to prevent nft_compat.c from getting merged :-(
