<html dir="ltr"><head></head><body style="text-align:left; direction:ltr;"><div>Hmm. Looks like iptables has not been dropped. My Fedora 29 installs:</div><div><br></div><div>nftables-0.9.0-2.fc29.x86_64</div><div>ebtables-2.0.10-28.fc29.x86_64</div><div>iptables-1.8.0-3.fc29.x86_64</div><div></div><div><br></div><div>Apparently the different tools can all be used to manipulate the netfilter subsystem in the kernel.</div><div><br></div><div>But, yes, for some loosely defined value of "using", you are correct that nftables is the replacement.</div><div><br></div><div>By the time I wrap my head of _that_ it will all be run in systemd anyway so I won't need to do anything :-}</div><div><br></div><div>On Thu, 2019-01-31 at 15:03 -0600, Preston via Ale wrote:</div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><pre>On 1/26/2019 8:17 PM, Jim Kinney via Ale wrote:</pre><pre><snipped></pre><pre><br></pre><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><pre>The firewall was overdue for replacement... This is done with several iptables entries for nat and port</pre><pre>forwarding.</pre></blockquote><pre><br></pre><pre>Wait, I thought we were supposed to be using nftables nowadays.</pre><pre><br></pre><pre>Preston</pre><pre><br></pre></blockquote><div><span><pre><pre>-- <br></pre>James P. Kinney III
Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.
- Speech 11/23/1900 Mark Twain
http://heretothereideas.blogspot.com/
</pre></span></div></body></html>