3 ms·

Watching iptables get replaced was a really depressing example of that, after the developers swore that "this time we got it right" when replacing ipchains.....

• gvurrdon 10y ago
  Thanks - clearly I wasn't paying attention as I had not noticed NFtables. Another exciting task to look forward too, then.
• dspillett 10y ago
  In fairness IPTables has been around and considered stable for, what, more than a decade and a half now? I'm sure there are great many things that I consider "right" now that will be wrong in 15 years time either due to changes in the environment in which they work or me otherwise learning new information or developing new techniques over time.
• jlgaddis 10y ago
  ... and ipchains (in 2.2) replaced ipfwadm.
• kbenson 10y ago
  I haven't had reason to use nftables yet (beyond the default config in a distro), but if it's in any way closer to PF, then it's vastly superior to iptables in my eyes. I spent a while configuring OpenBSD firewall/VPN gateway boxes about a decade ago, and the all around superiority of PF was astounding.