The Arch Linux developers have announced the switch of the iptables toolkit to the nft backend, which translates rules into nftables bytecode. The ability to use the classic toolkit is retained as an option, but by default, the iptables-nft package is now enabled, providing utilities with the same command-line syntax. The iptables-nft package has been renamed to iptables, while the package for classic iptables is now iptables-legacy.
It is noted that this change will not affect the operation of most systems, but it may disrupt functionality reliant on non-standard xtables extensions and the behaviors typical of the old iptables. To restore rules after the iptables implementation switch, users should check the files /etc/iptables/iptables.rules.pacsave and /etc/iptables/ip6tables.rules.pacsave. Users are advised to carefully evaluate the operability of their firewall rules and, if necessary, revert to the iptables-legacy package.
Source: opennet.ru
