Package: nftables
Version: 0.9.1-2~bpo10+1
Severity: important
there's a question on where firewall rules are supposed to be stored
when it comes to nft on debian,
A user looking at nft's systemd service will notice that rules are
stored in /etc/nftables.conf
Nftables.conf needs to have the header "#!/usr/sbin/nft -f"
but why not make it simpler for users and instead put the nft command
outside of this file? .conf files are not supposed to store executables
at the header, that's non-intuitive and imho not a good idea.
other distributions simply keep rules only in this file without any
confusing header executable..
this also makes it non-standard , .conf files are not highly not
regarded to be treated as scripting executables...
