On 2026-01-31, at 15:41:44 +0100, Marc Haber wrote:
On Fri, Mar 03, 2023 at 04:25:06PM +0100, Harald Dunkel wrote: > Please move legacy iptables into separate packages to support > installing just the nft versions. We will never get rid of legacy > iptables/ip6tables if it is packaged together with nft for each > release.Amen. +1. Signed. This bug report is too wise and too important to lay around without any maintainer reaction for three years. I want to be able to disable iptables-legacy to make sure that there is nothing hanging arond.
The kernel team wants to remove support for the legacy kernel API once Forky is released -- as I believe you are aware, Marc, because ISTR you replied to the thread on -devel. They are proposing that all users of the API in user space should be removed in Forky. On that basis, you may expect a future upload of iptables with -legacy removed, once we've done the due diligence to make sure the removal doesn't break stuff. J.
signature.asc
Description: PGP signature

