On Thu, 7 Feb 2019 23:42:32 +0000 "brian m. carlson" <sand...@crustytoothpaste.net> wrote: > > Moreover, this package probably needs to conflict with the new iptables > package, since it cannot usefully work in conjunction with it.
>From what I see, the iptables package provides both iptables-legacy and iptables-nft. The docker.io packages depends on iptables for iptables-legacy (but can't work with iptables-nft). So we can't add a conflict in this case, unless I miss something? However there's also the nftables packages, and if I understand you correctly we should add a conflict with nftables? And then again, that wouldn't help in your situation, as the package ufw you mention depends on iptables, not on nftables. Arnaud