On 10/14/24 8:49 AM, Martin Rys wrote:
> Arch Linux still uses the legacy iptables backend, as opposed to the
> nft backend that every other distribution uses.

I always thought the iptables default was the result if Arch's KISS philosophy
and I really appreciate it. I use iptables, ipset and fail2ban and like being
able to put those base pieces together and tailor them for my server use
without bringing in the whole nftables pre-defined sets.

I appreciate Arch providing the basic tools by default, while also making
nftables available if you want to go that route. I wouldn't change the default.

--
David C. Rankin, J.D.,P.E.