From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 80B9F1FF13F for ; Thu, 12 Feb 2026 08:01:57 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id C6AA65F05; Thu, 12 Feb 2026 08:02:42 +0100 (CET) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=vhNrfB62pZSTffz3/K8HyrIohFV8Aav+Rkr190E9ovt5iei4N4Tl7iAHf1DlE6HwkxQ9BLE6eTSTbmyDJ3JdJTBMSb/eGl9vgHW654zFNnqnvn1Sih5pacbfr0tWS29rXMqTqpCkBDQwSjZoysohO7pReIHKuNml34qKtd/dRolO6KfelRCl82aMKLfnaec+fLtGLVPV8fsOcL8We3OkLvtsInyCERVRTm+KKHCfiohyxmw1V3JqaFUFZeMmBHDpv8T6ytpH3FhlG7e3EJKwTtW2ReUpn8mA03ODvtkoIbHf3oTfP0HSzonn9dRVMP4Dh2HOhigONnpGL6YwL8lrkA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=W6HOo/Rtx3eFUlVU5or04GM65EoSDjt64t35x1U5B8k=; b=pCyWNQbVwTaCgWSDyWPXISYAU95YzTll/gTy64nScu7WCFoa7FWuxb3m5zTE5e9daZr3pZTQwdA6UfBvCVSlotYgUXvwP1csHvgW6TmaKU6FsE5YJMYxPri8iq8biVKSHa5jmEhYnthYzr9v3hLfczn/qNP3eELr3hBwve0qicGJGiDwyVrPBkSo+ThELXoaUgJmu92z6dA/l2UvnSY52D6M2c1tKkz84QTrowLoxVfSozvnHZulpqQXZPDG4zlc4IqXN4psyf5CvOEHXiGUpg2RaD798HpauojfA97yGbXcfCBUZetPBDMHI4LYTuQum7eCb8w5prUCN5cVoCPSDg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=W6HOo/Rtx3eFUlVU5or04GM65EoSDjt64t35x1U5B8k=; b=aITBMF4789ZoIsdvJ7w99dBajtEp9j1Y2wS8K94b0F2PEH0fe7I1dwJVI2BXYljafV54xD53vsSX0wcYaW/vAGuTAIUtFJ+LNrICMPWdywupI3qkdjUz6rxdteFvReot+5bXdYauV1R7bTVH/RHwI+weU2tNAYY9VDbUKdPPJfULSp36Td/dZ56131f5kij436WVfRgo+pECKxsW8bZ3kjobJewVdLyiT60gu+7fnxYqHNecuq272ZAkFr5kmnV7dikXVr1szFn4r8rpw7RafRonbK0EZyk7MvgVIN7yH73dRRRrxg8QWqFaPLtkZMBA/UUxmC9ZLf0xbFHnVxmG1g== From: Ethan Zuo To: pve-devel@lists.proxmox.com Subject: [PATCH pve-firewall 0/2] switch iptables/ebtables alternatives back to nft-based versions Date: Thu, 12 Feb 2026 04:16:40 +0800 Message-ID: X-Mailer: git-send-email 2.51.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: SE2P216CA0151.KORP216.PROD.OUTLOOK.COM (2603:1096:101:2c1::10) To SY0P300MB0609.AUSP300.PROD.OUTLOOK.COM (2603:10c6:10:285::21) X-Microsoft-Original-Message-ID: <20260211201642.165569-1-yuxuan.zuo@outlook.com> MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: SY0P300MB0609:EE_|SY7P300MB0526:EE_ X-MS-Office365-Filtering-Correlation-Id: f18a677d-a1e8-4020-b312-08de69aa904d X-Microsoft-Antispam: BCL:0;ARA:14566002|15080799012|19110799012|8060799015|461199028|8022599003|5072599009|23021999003|3412199025|440099028|19111999003|14041999003|1710799026; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?oqavfmVVpyfRWLATWRLHJZIBqNY4LI5Q6EocLhsOLhkT/u/nSDOqc1eueJww?= =?us-ascii?Q?dZATfcH/vH3fabQ38HYHUqmJVNwDlIpZ/PVNRj0Jsbw/0EFlRNwAIgO7uiCe?= =?us-ascii?Q?ySRAMh52em8ImjHtBL51vtIA93Ml2LPLpAcZcoaEnOreiHvHf0DPgP1wShNc?= =?us-ascii?Q?xsT/tyZwE0I2wp0KBSM+E51XxFUlFV0RtzBaNB+LPyc9o/naojHBzrzG1ZKr?= =?us-ascii?Q?QbXAtTTLlUPB3HZj60OroR634t90MGGv8di7BmEnho4bSzG9VbTqfsvzdVUL?= =?us-ascii?Q?JohzRr+0O4X1RQ5b9Sz90yS8liGkhZ4lb5ar6EY4LnMxoHxglJTxf46qeE4r?= =?us-ascii?Q?bZKs3p6zwaNSFTtgkHA9Y/8Bk2b6nlkPWPViiH79bksoh+Mr6/LvHiE8FrNZ?= =?us-ascii?Q?sPMAy2qL8cLdqZ/bzddywHgG4vRphlvsliuWq7CGFNP7HF3GOT6fHoXtrvZ+?= =?us-ascii?Q?3NEVzJrVw4/TML4WSJRC2o8hJPWUrKOIPYUfypTLGphKWA9e8zQPMLez6/EP?= =?us-ascii?Q?lYVXDh0tR078k46CqrAAgQ6KskHgtIAENuogpYIEi9NkqMQ8CAnqfKOK+SJn?= =?us-ascii?Q?qcWzE6uE0frn6kxeHA5lqqZ+UqGmL5QCP1f4F3TSSvbn7YpC7WkeXjNzpAJF?= =?us-ascii?Q?95dp5qyN5Vim0BsjZgblOvPU0qAqexI+culbePiJbCeybwFAvFUXQ8VjwFb4?= =?us-ascii?Q?UaN8nHdar6+oCZ9dvqWp9d6VoFZ+zwAv69oksQZURqIPX5FGAUczUCK0yM0A?= =?us-ascii?Q?QaWp4HiJ93HTpZfAI308TppfpTBi86GQ1vq+VhmS4wRfUTRwLvyHBpl1yWxJ?= =?us-ascii?Q?9tIFF/689zLB4z1QHF33ocwNrczB6Jzo5YGyNpfPGam3lj9+0dHbl6PWXwhl?= =?us-ascii?Q?ir1h6rByriADObw8+XKKMxG0EhQlOcMfPAmZonnCp+eHG8sVrz5pdJ2ZazeJ?= =?us-ascii?Q?4DoP4fEruXJtU3zdT7eoHeJHWQIlbK6xfI5gEHcYkfmcILpReWZILqde4sE2?= =?us-ascii?Q?hnN+pisd2bquh+0WeApiQKN1hTpO5m+YH5ui/MmTf3oTghz9dmXqFjgYNt0j?= =?us-ascii?Q?Mef5Rx+RajUjiGE8XPxXpLdGmk8hEdFPL8bxwG2mBVOCGgipS4+5tjd5wNKU?= =?us-ascii?Q?Ne7DLeAxZYR6JQIl7j1uc36EndrHq70zE7i/p5vLwSu7pbts39dQgf6NWCaP?= =?us-ascii?Q?+N4FYh/qF0PCyddsmgg3ZNAjdSOBmD0gdHT67uwg8IwXCOej/YsD9g0d/mw?= =?us-ascii?Q?=3D?= X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?XF7Fmix4vFIvJqPXhRMxGNM5FHm7s/6aRJNMFrMfGEu7Cq1k89J4lNmi2biE?= =?us-ascii?Q?ChOn6HtkpzZdbgbfGvkE2g3UoQwSXHccDcXPeEMRxHIEARGEGxSRJcc/D778?= =?us-ascii?Q?T39xBlUiXwKR0Cr3mEkF+avQr8+RG+ukjrcUg/0OIdA8Z32nNdX3Rnq1grv6?= =?us-ascii?Q?/WhR7lebJbBmiv2bMqSO/rWzekdER/4LdH6BoOcrca6vpVoQ/y9ioti5Cx8r?= =?us-ascii?Q?lwmL56sP9Q0uXv4C6ek6LOZ4FCIb/OTqvSWjDpT/mnpVUyt8wzpD/9aEpRyG?= =?us-ascii?Q?kt0UX2SL+9ZDax5qbnTIn/G4US3zEHhz9zGOEjIiqhnssH0Ly3Eh/8xfPK3B?= =?us-ascii?Q?OuyB69yddADzIHoM3Fcqisb9pOmLhgwCgmkZhJFtefhw7XkrPe90ZfuG9j7O?= =?us-ascii?Q?VJ811PFEjy9CFo4go9tNc3LAVbpUesdtMlPleJXWK4trMMC24Tj2rStl5bIy?= =?us-ascii?Q?z95I5sReQXZOQa2c0Jo/63PJP97QbfMH3s7J/ZUfhGWE17M/18ym9Cfbb2NK?= =?us-ascii?Q?iT8Ko0TL/l3WpAuqqbFNKlRJdil3esfIR07S1avWla43MXH4I/JzscUnPrWY?= =?us-ascii?Q?ECMpkYlrQFawfZeRee6HfhDhf0UDYUFGKqM/DOo6MxOFb8VeNrIZImEMmKqD?= =?us-ascii?Q?pWItt6QsnopQCFZl6YmDxgbeQvYXtbrLhmisDVWS8e2Ifv58ze/wksS6S5uA?= =?us-ascii?Q?hXjefhGht7JdbEQ3rj/ZDcG/LF/QaNg1y6HsMmiotZW39nCVgJnRz0TkoKVX?= =?us-ascii?Q?05dOMdlETPWESqBxB0zWRsSRxmfLiTs3L+9mfB58b7fB8j8KhQaErjAh1F6P?= =?us-ascii?Q?91KvfguglUNGkBZhDSFaT1XFe0fbKS0jLxx4hqiWQA3ymdR8FeeAQvTMBUTW?= =?us-ascii?Q?DZ6OZ2oehqzrPR+PMyTj12j4336TZRKGzTvfiEWRG23Sju0ZSwHVjYyizHi/?= =?us-ascii?Q?RMB5hxH25UsxGoAGOFSBazii1jp89KmvkWgWMd+9QTiy/sJAs1CcwvcQv+5X?= =?us-ascii?Q?wArWXfMk50VjrTjBsX6OpI+FuLJECDL1E6d3su5+OjBbfI4CJeD53RvCZEcL?= =?us-ascii?Q?lh41x2285m7eeMpPW8ygP+NyMZPLHbF8VbY5HTJW0+GwfaDFg3PmKVmCc5sy?= =?us-ascii?Q?Wr3GBSsjhOVerZrrfFoL3fvlLVNMVcDFLDwk08s1/rGu2/CPi70/AMiBYnL4?= =?us-ascii?Q?mBS6QNhJcoo7ACfCXMDUJD8j9QgMAmS6HalZhQPZWy/1YduuVh438NmPhTSE?= =?us-ascii?Q?86Nl2eONFt9zApSBOVDo4jJ64rMPBOmEfEzBJknjph4+iDEh/f29aJFA86Ws?= =?us-ascii?Q?EGo9NRMS1r7WbS5nj/1LmK0qp26UkfMaAefy+Gv2DjTdl/d+S7lkPm1+tpM6?= =?us-ascii?Q?SAfQFXnuZ6LfEn1NQMZ0ykvnSFeb?= X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: f18a677d-a1e8-4020-b312-08de69aa904d X-MS-Exchange-CrossTenant-AuthSource: SY0P300MB0609.AUSP300.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Feb 2026 20:17:26.0133 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SY7P300MB0526 X-SPAM-LEVEL: Spam detection results: 0 ARC_SIGNED 0.001 Message has a ARC signature ARC_VALID 0.001 Message has a valid ARC signature BAYES_00 -1.9 Bayes spam probability is 0 to 1% DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain DMARC_PASS -0.1 DMARC pass policy FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider SPF_HELO_PASS -0.001 SPF: HELO matches SPF record SPF_PASS -0.001 SPF: sender matches SPF record X-MailFrom: yuxuan.zuo@outlook.com X-Mailman-Rule-Hits: nonmember-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation Message-ID-Hash: ZXKNFFZLCTUMDBLMM2TZ42D6XKH4MLUC X-Message-ID-Hash: ZXKNFFZLCTUMDBLMM2TZ42D6XKH4MLUC X-Mailman-Approved-At: Thu, 12 Feb 2026 08:02:48 +0100 CC: Ethan Zuo X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: The issues with nft-based iptables/ebtables were fixed years ago, so switching back to them shouldn't have problems. Ethan Zuo (2): Revert "pve-firewall.service: update-alternative ip-/eb- tables to legacy versions" d/postinst: reset iptables/ebtables alternatives to auto debian/postinst | 4 ++++ debian/pve-firewall.service | 3 --- 2 files changed, 4 insertions(+), 3 deletions(-) -- 2.51.0