On Wed, Sep 15, 2021 at 01:44:47PM +0200, Cristian Constantin wrote: > cristian: one interesting side-effect... > > after having two chains with the same hook, priority in the same table > (as above), `iptables` cmd line tool reports the respective table as > incompatible... > > # /usr/sbin/iptables -t filter -S --wait > iptables v1.8.5 (nf_tables): table `filter' is incompatible, use 'nft' tool. > > # iptables -L > iptables v1.8.5 (nf_tables): table `filter' is incompatible, use 'nft' tool. IIRC interaction between iptables-nft and nft has got better over the recent version (latest is v1.8.7), and there are also recent patches to improve it more.
