Package: fail2ban Version: 0.10.2-2.1 Severity: wishlist In the iptables description:
The iptables/xtables framework has been replaced by nftables. You should consider migrating now. but fail2ban still seems to prefer iptables: * In the Recommends: "iptables | nftables" and not the reverse. * In the default rules. * In README.Debian, only iptables is mentioned. -- System Information: Debian Release: bullseye/sid APT prefers unstable-debug APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 5.3.0-2-amd64 (SMP w/8 CPU cores) Locale: LANG=POSIX, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=POSIX (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages fail2ban depends on: ii lsb-base 11.1.0 ii python3 3.7.5-3 Versions of packages fail2ban recommends: ii iptables 1.8.4-1 ii nftables 0.9.3-1 ii python 2.7.17-2 ii python3-pyinotify 0.9.6-1.2 ii python3-systemd 234-3+b1 ii whois 5.5.3 Versions of packages fail2ban suggests: ii bsd-mailx [mailx] 8.1.2-0.20180807cvs-1+b1 ii mailutils [mailx] 1:3.7-2 ii monit 1:5.26.0-2 ii rsyslog [system-log-daemon] 8.1911.0-1 ii sqlite3 3.30.1-1 -- no debconf information -- Vincent Lefèvre <[email protected]> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

