Phil Sutter <p...@nwl.cc> wrote: > Thanks for catching this. Seems like at some point the intention was to > have a common 'xtables' command and pass -4/-6 parameters to toggle > between iptables and ip6tables operation. Pablo, is this still relevant, > or can we just get rid of it altogether?
Evidently this is behaviour that is relied on by some, so we need to cope with this in -nft version too. > > % iptables -6 -A INPUT -p tcp -j ACCEPT > > On my testing VM this rule ends up in table ip filter, so this seems to > not even work as intended. $ iptables-legacy -6 -A INPUT -p tcp -j ACCEPT This is the IPv4 version of iptables.
