From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 3BE0E1FF13F for ; Thu, 12 Feb 2026 08:02:35 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id E1F8F665A; Thu, 12 Feb 2026 08:02:48 +0100 (CET) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=NjTSUDN0U2R4S3TuddN7iUl0ViDEysf96Yx05FRTcAQYLNfREtQ9VvDQBSDpn6Vx8JMZB2j3Fj+kQ1c/ITHNI5K+OoYG18L+HLscoYrwH1hvWknX7Oh1IzjdJEowTo1G2qBll4dcu+ziP8M3G3Ty1TMau8bDrH1766yCsDIgFoCeH3yNDo1HURUNPG3gFrqVhnYRo1Q6TJKfF4FmYyKN8cqzfx/oegKhnZh4pSFfND80ZQYFdrb10l/r5JaL4AspMSNmQPOxuo/EiTuNgApNkDLcAqzrh94Q48v5TV+u4MO5ZovU6b9JNmwo8VNIwSq04FzWh2Jiv+B/HLVKb4VcvQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=MfN5q5Xd6E4phn9mUj5ERl81CgKQBJnda/QaIOLyduU=; b=TpQZD1Z0rfj5ea4AS3VEFx0FLDMXHsvHoFQRjDm0AoFpKeqHKRnm00vuzNvvYkyEBec2ooeKQTVumKlmH+Im3qIAV7Uqk18AnmvYTZKCpja8PNEOMaBctce+SMdy2ea2/hV516VGospU/MmeNuprlWlXVur2303cU+vICh5J2DPZSb3Hb2MnIjaRMIa5xTTA0zdLexysH5brwViDeTRNf38QbrvoAZIz1VtTGBTwpAvG5y1amGW1WzFAc6anVzAO4uFEaHKISBUhVuYQSn1aTj7h3D90Y+mCC9xkz15S9xsc5Ictl194/ahwMLzOAmjx4iL6qpZjnAYH1/05cUU4pw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=MfN5q5Xd6E4phn9mUj5ERl81CgKQBJnda/QaIOLyduU=; b=vHmk5Gl7P7bVMxsmzED9Iq2A+yix9RzswyXdRcbinh0g8QhWG9cWaJrYOUOa22xcmkq6X7ELzjtTPRf5GrPut9GIOsu5KL6hIrINu8V26027wSh6oQ3DEvksfFg+JAGXiSxGRt6CwuMFx58lp00SHXRU4rp2UhS5bRRxPnshIilBwFnx7y2dnfXIlLxUmY+1lHnLPDUg9TfAbI0lVfVDVIzuSqz/CRsyf5NDHPX9Jg/8Xh2TOW+JRJBR5ebaUkmHBRDmi2VPdMWEVTYWXPVCqPbHpwi3vBVspSmaFC9rjCtJpG/iGAQkXvNOYttVJ1W5s9BPCgZ97BFKP+NXQqmYbQ== From: Ethan Zuo To: pve-devel@lists.proxmox.com Subject: [PATCH pve-firewall 0/2] switch iptables/ebtables alternatives back to nft-based versions Date: Thu, 12 Feb 2026 04:25:49 +0800 Message-ID: X-Mailer: git-send-email 2.51.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: SE2P216CA0150.KORP216.PROD.OUTLOOK.COM (2603:1096:101:2c1::11) To SY0P300MB0609.AUSP300.PROD.OUTLOOK.COM (2603:10c6:10:285::21) X-Microsoft-Original-Message-ID: <20260211202551.170847-1-yuxuan.zuo@outlook.com> MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: SY0P300MB0609:EE_|MEUP300MB0329:EE_ X-MS-Office365-Filtering-Correlation-Id: 506df956-3eaa-4847-7662-08de69abc76f X-MS-Exchange-SLBlob-MailProps: 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 X-Microsoft-Antispam: BCL:0;ARA:14566002|51005399006|5072599009|8060799015|23021999003|15080799012|461199028|19110799012|40105399003|3412199025|440099028|19111999003|14041999003|1710799026; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?pHwfKv5o932xIur7IfNPzEuuqgDYht5djTegfZ4vFEHGscY8K+1eW/2Qi6FY?= =?us-ascii?Q?YnRO9/Tmw0ot9V4QQpBWQ7vQGFylwe+Aqr76kS9CYaVQvcbjJHbYjHs+3u0u?= =?us-ascii?Q?Dn+JF5lwuNGIXMdklo8bI0ydGzgtD+FoH00eK+HJCHUcnJoioj44Djy8h98o?= =?us-ascii?Q?+cUbOUFOQMHo3VVjKufNMWnVF2BR1QBURONopJaq7UNWMipYw68Uz29KKNpN?= =?us-ascii?Q?nZE6QOzhKcNWLV5KgsxwTxKcdC0kGB51BSJKVcUx/6KFJkA+HqaIbnqDUKMm?= =?us-ascii?Q?PxR9/Y4DKtj+tLlXMvy/2Ci3qT3mSHr6AzwaTO/qvWtLeHDWkEJqDpPBi2ds?= =?us-ascii?Q?LGyoqh+o4QVBwm0qvlmeRoTlM+HRxPUsB6W26GhdJJX5z2mpxjDphRn7au82?= =?us-ascii?Q?jP7vMQzHAooKokOzZqkj56uS37D123ob1W3FHBWmbV1bwOkCyRMeReaz+xst?= =?us-ascii?Q?thd4r+jhVPLAQtasfgG04YzmgZ3HkNZgTISdcU5fcAXIiFRfUvVXUAp61qbZ?= =?us-ascii?Q?sNL0me1L9PLiV4mp0Rdhz5mPLWj7WIiN5BcT5P7BIdxV8NZh0g0iN8PmN1Je?= =?us-ascii?Q?FA8dm5clgfPWdsZxtKlo93Ym0qZiH3fgc19B36yNuGG3S5vnvBUwkIQ4RvF3?= =?us-ascii?Q?EYEKn4Qb4ht/JP/M0hiUbwqjIziPHsjRh6W1p+mjoze1xCZqfOLEqRWGg4c6?= =?us-ascii?Q?+rmKQW8ffaV2OrCNw/T3RacUmGQa6SfpHc1nmqCNEvL55qAplt785ZG9/w4t?= =?us-ascii?Q?y4jonyZS7ySRNPoDm3tVY05yQ03Do4DmRtmtnr4T+wYiJ/B56FGE/M5XsUpQ?= =?us-ascii?Q?o+IYWwMBCwRIksDJ5+cHPGME7ufaaPKAw3X24Wo61cJ0XO1tjVxzAwvQKdgV?= =?us-ascii?Q?N6YbgDCtVatPu8EQVQm5TM0QAERFkuxtYQklG0lu+1VkU7pTrctQ/OKzdLch?= =?us-ascii?Q?BiIUxu2Fmz7/yQZw2E/U9iVNeS+8hUU5RQq2gnxHHS+rQ14N9k5CqJ9FPTwS?= =?us-ascii?Q?wfypOzv9DtRZKEB/uDzk5Py4XJKuDnHqAKiv4TOpnY6TC7Va0VqgPVoM4x1D?= =?us-ascii?Q?jor5RSFyTKE4gXPUVBiFvg8vgczDFXTMg8oI7NoZVRjRWhUeTyB7zgy65NrI?= =?us-ascii?Q?eMLLE5ysPCw75JrmEm5gA8pq+1sM/xDteP7bqpMuIREsp8Zxc112+l3Vmrc+?= =?us-ascii?Q?Sy8kHLE1BWm8pAI8Qc0XIVuGU4uKP42u/RvxfTn/+451TiYRRkBPXChS9sne?= =?us-ascii?Q?jwwf1Qnqv3OvWue34BAkClgVhSMQ7i/ueG/fyKO9OA=3D=3D?= X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?IUFwv3cotHVLBmaZJ0gUuDkA2RreSpMFAwbvA6tkVi9UTWOtEznvRhah/klT?= =?us-ascii?Q?LlRcn+h6k8QmMuOtDQv8Vkpb06k3Vz8GWVilP4VlVPWhTUI0YHLx+CCrbT43?= =?us-ascii?Q?aNfECSv5jnCknHY74xBMSr8P4BqjUoxOWmY0/Fy/5/3TNdAqUBxKDirRua2I?= =?us-ascii?Q?gRa3Jp6XlOtlmmAEXXOhmjB8VxtTf13ugRv3c5D1hzFv2fb11SRrogHdYrPl?= =?us-ascii?Q?mN6nnWEb8brcyI8wq++ltnzCkhz9WEGVUxxsnRL8+1z/JEXhwF2ZxQfezgV3?= =?us-ascii?Q?MBfatAVE8YtC4veLC3KnuQ4M6jNnrbZ/IfrgriYT6U5K4NOfCqUhjhs43Ni+?= =?us-ascii?Q?MSnI458OvYToI6W/hOgwewe2uN9Jde4SYkQySu6y3lg8KvKzWGIS/0XvtarX?= =?us-ascii?Q?DYXmljA8VfKAQwcbHkY3+s0AK5Jyg0Pr39nkPPIkF9E+RKtzVnb1nF4DXRrm?= =?us-ascii?Q?8x4Wc8ZHneA2+rGnyF+6UNVEfc7R4JO4UokimoTCX17rCju8k9FD+pZGWgpY?= =?us-ascii?Q?UkuotJkT2uT509j+uQ2LrZx+p0E00f2F+mADmAPDlFk8FdNOk4HNe6+A0YdD?= =?us-ascii?Q?4RYPJ1OnuStdZTIS8Rafs3+3rweFfYe5IDwmXTXcpHcj/KxZtf/ZOGwN7D2f?= =?us-ascii?Q?qWfG2LSF0ta+b0BS+bpQpj2uBkVSU1rBoH6LtYenbnW2DW2c3e6GW4f/+Rhy?= =?us-ascii?Q?LHU/DvkNWgNbimNyxbTZglhz9C/jOvqprHMLVU4ZAVYA0P2HdDejKUZ4cJdV?= =?us-ascii?Q?bGowJ4Op2fHfCEG48Xtu+yWO4h6e0OOuXZkvc11Np4z5961jOM+bnpi/h4sM?= =?us-ascii?Q?DkYT1KwmLB+gh24QOrnt1YbIrbvb8iOHxnS0VrFxwQKCHT2q0HqbKR5mhG9M?= =?us-ascii?Q?2yNYmyEltjubiF2S1W5vuPM07oQHj+H5olHdmunWGXpobC+GCFzUJL2MAXgE?= =?us-ascii?Q?sjwGgXt4Nyk3d1r0GsFp0AMGXZIolywHie7keKB3dHonQ30AA5fABA0do0Us?= =?us-ascii?Q?pBxuZ0HGKv9bYPyxiDETRXNxUUMoAEuBxygncQzbpmFtz1fZWvpsIata0KmF?= =?us-ascii?Q?8IGdV/QHLsmokGZdbi/TsQKoi8jBzF7z1s4Hil0Pb1nCiX+SgG9XLFA4JrPO?= =?us-ascii?Q?fD2T04IAA9p2g+jSY1oyLuMatgVVWcML38todEOqfwDqbBNYUJB4dJUWgYvw?= =?us-ascii?Q?DxQo4ykTBO5OpqcTVMyWQMqWGgQeE+7kadQS63qa7k1gbyWu6fctax6JE0Ch?= =?us-ascii?Q?db67ku7HERPZi8GLxXojpWenaByjGBeHvoGun0jUw2UA/FuZwsZ6AuZaILTp?= =?us-ascii?Q?wMz3ooNIiFnYhcn3qE0FiGjeugztGtUSspCc5P+8vQKhE3gki4ssXNe6RcHk?= =?us-ascii?Q?vJTIwRGoy8kzP0awQGpfeAje93fZ?= X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 506df956-3eaa-4847-7662-08de69abc76f X-MS-Exchange-CrossTenant-AuthSource: SY0P300MB0609.AUSP300.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Feb 2026 20:26:04.2854 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: MEUP300MB0329 X-SPAM-LEVEL: Spam detection results: 0 ARC_SIGNED 0.001 Message has a ARC signature ARC_VALID 0.001 Message has a valid ARC signature BAYES_00 -1.9 Bayes spam probability is 0 to 1% DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain DMARC_PASS -0.1 DMARC pass policy FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider SPF_HELO_PASS -0.001 SPF: HELO matches SPF record SPF_PASS -0.001 SPF: sender matches SPF record X-MailFrom: yuxuan.zuo@outlook.com X-Mailman-Rule-Hits: nonmember-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation Message-ID-Hash: ARV7D5X6M57QBKKS2I55OSCCFQ6VSTJ7 X-Message-ID-Hash: ARV7D5X6M57QBKKS2I55OSCCFQ6VSTJ7 X-Mailman-Approved-At: Thu, 12 Feb 2026 08:02:48 +0100 CC: Ethan Zuo X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Sorry for the double mail, but I wrote wrong subject prefix in the first one. The issues with nft-based iptables/ebtables were fixed years ago, so switching back to them shouldn't have problems. Ethan Zuo (2): Revert "pve-firewall.service: update-alternative ip-/eb- tables to legacy versions" d/postinst: reset iptables/ebtables alternatives to auto debian/postinst | 4 ++++ debian/pve-firewall.service | 3 --- 2 files changed, 4 insertions(+), 3 deletions(-) -- 2.51.0