From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id C1AF91FF13F for ; Thu, 12 Feb 2026 08:02:17 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 63E0B62F7; Thu, 12 Feb 2026 08:02:46 +0100 (CET) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=li8u7C57RWHgTvscsrSTQwIeRNwKijRga+x01Gm3ILemzQLem9NrpoiSxABfiKLcfYPSFZKy8QGAXoY2WgwlCytKtv1JHSs2hGSMhC0TWDR1G6q5OfiNvQTHIOtCKvsR/NYj76vHuCYaguInUY6ponG1CxOKOHRNWH3Ypo7Mh2exfj4CcG8WYctWLI/GnttjNr7AEpgZ+U+u6ZNiJCpxz+I0v0oLpelXT+CpuIGB+iqRXBsKdn+MBgyfmrdM1S9brBJPlfOiC2SOzX4us15KA12oZjXG5v3gbgjnD9gtnCoLr+cP8TJUT82LuqwXLafAB6t9co+MuI9fAtG3smMODg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=zmhNZckNI8Foe6ULREL2cR8o2QNFyaX7dVBL7ECUAY8=; b=sYfL9S+zSQNH2UjPlD9aEuqg8mmMYV9o0odb+zFPUI9y18YLBp/UAsiLBL0egZAicvFq5jDqJ4DGdCa/t8rotoMJrPVNn1yyNAO7J0nXNwCePAXdpKGKjl4rV0cq5qCZjY56I2LFmDuDiiZDU3ERtHzWAfcTykAGA1T4oAPapP8rVELJz23mGw4A5MzrDvXhoE07oExZ6yJZsn6whlkahS5RhQl7snM5kRI17zG4uBReMqoJfCFf3l9MNAKl8to3NhfY8r9seOgF3WtCFM97Br70WgXZ1ks7Mub3V82+x1luIwF2uftK4XpXpAgaqkZyGS6UpAwdzLThJIerKbnGWw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=zmhNZckNI8Foe6ULREL2cR8o2QNFyaX7dVBL7ECUAY8=; b=mR2b3h4MAxQid77+ePJO2wUu6unS/3OC+Cv7esBDx6w3Hc1kL2xx2g6/f+Y3AhnIPcASYoOQRsSo3HPC4zmOxLwIjgLo/s0s9WrOhm08wGTnpBsVrX/mBqTP0rANpPli4dVeJGPkNm0vtBGd5TrpPJD+vn76kDZXKWQRiiHdH+dM121WmkEz4t0Jgx5NaYa8ubrynTXLaIU9nnjtBfqUoOYPjWV5lKgOiQrMXtojSqZ+Vu9SlMvLUglPo7qKjsrmrQAF3BLWcjPMfYieCaiCUGv5OJK73THp6F8lSN4Ke0ctZ1mxSU1nW8L4mSuhRIa0P0AalsRKrYRZiLcOudMLCA== From: Ethan Zuo To: pve-devel@lists.proxmox.com Subject: [PATCH pve-firewall 1/2] Revert "pve-firewall.service: update-alternative ip-/eb- tables to legacy versions" Date: Thu, 12 Feb 2026 04:25:50 +0800 Message-ID: X-Mailer: git-send-email 2.51.0 In-Reply-To: References: Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: SE2P216CA0150.KORP216.PROD.OUTLOOK.COM (2603:1096:101:2c1::11) To SY0P300MB0609.AUSP300.PROD.OUTLOOK.COM (2603:10c6:10:285::21) X-Microsoft-Original-Message-ID: <20260211202551.170847-2-yuxuan.zuo@outlook.com> MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: SY0P300MB0609:EE_|MEUP300MB0329:EE_ X-MS-Office365-Filtering-Correlation-Id: b505faf5-95ca-4f51-e74f-08de69abc92c X-MS-Exchange-SLBlob-MailProps: WaIXnCbdHrPy8Gg0T1tV+ubdyTLMpos/U0yL4JFNLW8rOA2ojzx77Qg9eGWBHkEp+Ts/ComZ9u6Fplh/XAKHU+DJTY934oegnuvr6i7uC08oMQaoRYVm+KIH4TOfjD7rGre0iSw/Q7J8D9xfumoK88HJmhaMtymB6uEH86VzdzLeTyRf0c6nR4o4LWM6QSU7WnAXbuLe9uYAVD9wIGZu7cGhE5vmrC/8cWR0OZ7PNPpHK9YsJMj65PzoVNvawkzXxzQA1NdICuEcqKPclRTn55NZHhCOoealSIKKsaiblPAoSpFGJ49Q+X7RsvB6Xi9nB/SiPQnTUGoc4bXFu84GwmAEbhsDqsIcyoqbWTeMwrBKLdENoZDujhEyWSiULAuqdUZtXhoDuNjnImgLINNOTBm2z2Rxh1x1qzABxdJ/6JHVPSGuvwZ7+xkEkZ3SVvEvv5bB8mqwoj322pDT8Gbtq+3Fcj7bfYdlz/TTjMYg+gNanC1GnWLcSDlk60dtqXqUVuMasgZW/km22xxuee+CkP4zgqGYgDIVOK6JgUmGV8zgIlXdXTccvopC58Fd/12GZJ0m83Pp07LHz1wy7Plt7LNlkCt5vZrNfRUBmYpAqtHVlrDIT9Sscealbdl4/lBxhWXZRrVW0jXSA+iLBqgmTAZqalt69dGFUHl4gINU9DJIYkcnnjmcZtQmS1ehNl+w2fwZ3ujy+ovEC9IZJRZ4P7KMW+xskbYzWrmGFn8cElLdXZWYuU09xakHHzsvLQwU2y5qK1v09Xc= X-Microsoft-Antispam: BCL:0;ARA:14566002|51005399006|5072599009|8060799015|23021999003|21061999006|15080799012|461199028|19110799012|40105399003|3412199025|440099028|1710799026; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?ViCpk8mES50lmI+2f0hTXYlzkMZ8qEfsW/RR2fIFeiGtfl4K5lysO+gqfAlF?= =?us-ascii?Q?c/dI6zidAYzSy1d0cyvDKhYFxh/wHeTIJkIwWBAQfQmtYMjHWx5q8mLyLpFw?= =?us-ascii?Q?doMfXDaIBPtIVmF590DzyzJ77MxPRbvjLyFkF8hjzsnXU/Z2vCN70VJ/RZVg?= =?us-ascii?Q?mNz1onwP6GMkUr9yNaxx6KH89+A72rMovMqyxA3o1vhhsovraAZJLeuccTFu?= =?us-ascii?Q?jsYmL7EcUrkCoSYvqUr4ATVyG0cwzNzJtEyuteVK1vlgJdQmfiT9n+mq4LzB?= =?us-ascii?Q?sHKI0zxj0PzamZGrg1Phj4EAApM5qPZPWRFi3t3qnwb+Tg9tVmAZRjZAJ3RC?= =?us-ascii?Q?d35MMEtsVVirh6lhm3MD9nIL/wQY5amWJoeDGr+O1WkLLwuMP35XMVgkYik1?= =?us-ascii?Q?JOXgNghfypy2fZc3sEHCzpkVzsPX/2sGdmebuY/n3Guu8bAzk64hY1GF+R5f?= =?us-ascii?Q?tgRTt2WhQmaWFK5RnjRUIhb5OeGtjIS/IjL5mDgOl6P+u8mBCsAMOPpq/mFJ?= =?us-ascii?Q?twRbT9dKziiq3l/iC5guRaQ5UcF1DD9ZasDFKE3Ul86o+YAoYPGpWCfI5QTH?= =?us-ascii?Q?7BsM7aAKm4VuSH7CQL09tmFAsssbiBR4hdATtK2CKGhNjp3stC+T8YDKJCqo?= =?us-ascii?Q?7UWZLpKpn9h1+YTOXmsehI4ugsrVIMvJOBhS/t2mX0edPw8VOKM9yLCcZrLA?= =?us-ascii?Q?orIb1VVzPfLNzhATCaio19U0wdZD0PA2TIwm/NzrO0MhLKjd1JiiKN3tBmQ8?= =?us-ascii?Q?qxawmVOTzH8rbkkC/sE7Agy8qA6UeHmNvmEH8Ad1h9E/4SXOhUAvGhg/45Dd?= =?us-ascii?Q?aK6ZPn18rRLlzJvQNN9LtY3UvsY9r0qMOtDOi6NFPrfZ7mIbiLZ8ApreThf2?= =?us-ascii?Q?uSILbxQjw4nLefOeOxEgoAZwnav3e68zlcZ0Dvis7rLC3bHfLsUweRUG0eRy?= =?us-ascii?Q?r5CXTrEfGWr5qwJwRan+I+dvESZXmt2BsHH6ruYv6vkHiXEtlf4hxv3JMlaD?= =?us-ascii?Q?Kur8vAeyTVeYQVlKctkovdixdogVKYMTZgsr+ddPrhyVaXqVz8VAWQkLFNbv?= =?us-ascii?Q?ihGQ0X7m4KMY2p5T7d1/5m7EZIgS2mfTR8rK0maL80fYLWw5YxXtJ1oqX6mx?= =?us-ascii?Q?/AkT+krIClD8DTg4jrP+5qAxZAkN4KabAPe/JBx8HxbBA80BoAC+ALXxnVdA?= =?us-ascii?Q?T+jD+D1ESvNBcL9Q4jg/ROlUBNI9YJ4EfjED/QNbC08nLJLUbZYsrpN4IjI?= =?us-ascii?Q?=3D?= X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?gBvHIt6M8GdayfQeBFwfJ8dHFu9J2BoE5TWYLqGq8COfhE0fEKRiCG96zxCg?= =?us-ascii?Q?aiunuz/kT3IiN/zeCtz5VNZY7J6pO/OLkOWDtC7w2euIqf5gGTmeubwnFwDj?= =?us-ascii?Q?WlkEddVJO3aoeqEPJZVOtecFGnvZh8UOii/XNx50MK53febpO1NGy1GpQfZZ?= =?us-ascii?Q?W7sdzh8IdjctuS2FTgRdRYkRvGztVwaI7N121d5mSnZQDyeYESZiXFPK1EG7?= =?us-ascii?Q?hvcxyiVPfdseHwo13g9Q32WAQs3IKFChByXd3UMeer448K7nyJ7nuFSkv3ve?= =?us-ascii?Q?bEkqC2jK/00XwIvtQScTmbZBZ2FDkyAMCw0TaCDiq4WbcsICRE2aI/ta3SAA?= =?us-ascii?Q?Ka4xJqmPhTLnwFs2ipifuxoX0v0KosYOFuPl/qlInmC/ZfYDOl03mCdjInt3?= =?us-ascii?Q?yCz5LYFqqOzXP5OhMPMabk/uyrm4XgWGr97lTwewe6+MoEWdUUH+RwZ17jYf?= =?us-ascii?Q?0OzEE+N18at7i6RwsPGom+IyIeHXdWC58CQ6EYq1gdP1PBfuTe2koRbQIARp?= =?us-ascii?Q?cMR3YTiCcfOjKMaqHnj2ecqM/U4K0XUWFQfmzXd39o6ZWdLEE5tgrskL3BV3?= =?us-ascii?Q?m8vGxW0neDly4gXYwlzMvmKVkXPXO+KsKhy6uVHJBCJD2D+MLZxj7myPMfNa?= =?us-ascii?Q?xK52PfaGAKq9ONOX+cm7NS9d1M21PY7ct+BB5DS/PXctPFMeC+SIviAfRxPX?= =?us-ascii?Q?6uMcBpWHcjo6VLzMzH8byfKyiSs46AyP9Rilyo+HHD4IiD898i+l0z+T2Io4?= =?us-ascii?Q?WQlwXjIGZX2Tw8wRiqTcFfix0tVOSceBVgdh+X4dZj6+FFBOUBlg09qIfIYC?= =?us-ascii?Q?jvJjG6tkM8lZsD+vi01JvJXy/5qkB4TVOPpKV0LfehWFctbMLXR38iQjgn0E?= =?us-ascii?Q?I4SKt9Ssd/AmCeZghnLP7RiKE1WnMGPv23Xm7BpXxVCZ/Mb4N4h+puaCf58q?= =?us-ascii?Q?btKfuGN/prhBCE96c5hRQmp90Qv29vkZ68BwxEbq1cf9EFKoFW/VuMq519yb?= =?us-ascii?Q?3nUIzM6CpHK1q8B2pyIQAb4MgZrazX/dSTRGAqm3HWFxSs+NYB/kDW1N11jj?= =?us-ascii?Q?QtBz6WUO1kt0uJnenQ5G8k+XP9VOz/T+B6EEEptrCLFkIXjYt/br4fe8bEaH?= =?us-ascii?Q?7jIxBqVNud38SL101u7By2fxnOsS2zaOPsYpxKMozykSAlfjxlc6Xy9x7BEK?= =?us-ascii?Q?LaDTiEpGmJiDI/jLrNgyEejGE62pOQt9OF4kVI4+PgBnD3FY7CGdDQOd8HQ3?= =?us-ascii?Q?PiSLa0MAVHFHqGoH1Fl0ZXkXwIuA4tzGL0ioLRcz9Fk5t+dU1YUy4zRP2CGA?= =?us-ascii?Q?gifBT5FPNlOSqw4DnZmTOW+Cu1JGmUN30xxLGVak4Eq2TBYFM5PK1602C5E9?= =?us-ascii?Q?nw/WytwzLoFcd5MvWhQCsx4q6XZu?= X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: b505faf5-95ca-4f51-e74f-08de69abc92c X-MS-Exchange-CrossTenant-AuthSource: SY0P300MB0609.AUSP300.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Feb 2026 20:26:07.2809 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: MEUP300MB0329 X-SPAM-LEVEL: Spam detection results: 0 ARC_SIGNED 0.001 Message has a ARC signature ARC_VALID 0.001 Message has a valid ARC signature AWL -0.000 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain DMARC_PASS -0.1 DMARC pass policy FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider SPF_HELO_PASS -0.001 SPF: HELO matches SPF record SPF_PASS -0.001 SPF: sender matches SPF record X-MailFrom: yuxuan.zuo@outlook.com X-Mailman-Rule-Hits: nonmember-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation Message-ID-Hash: 2G2DHA7NFGXN3EPSKQCU7ZZFWALKYKNZ X-Message-ID-Hash: 2G2DHA7NFGXN3EPSKQCU7ZZFWALKYKNZ X-Mailman-Approved-At: Thu, 12 Feb 2026 08:02:48 +0100 CC: Ethan Zuo X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: This reverts commit c743e671dad7a36871b6ab8e061e4200e64a4f54. The original commit introduced a workaround forcing the use of legacy iptables and ebtables backends via `update-alternatives` in the systemd service unit. This was originally required due to critical bugs in the nftables-based variants. As these upstream issues have been fixed and the nftables backend is now stable and preferred in Debian, this workaround is no longer necessary. Signed-off-by: Ethan Zuo --- debian/pve-firewall.service | 3 --- 1 file changed, 3 deletions(-) diff --git a/debian/pve-firewall.service b/debian/pve-firewall.service index f95ce6d..63fc57f 100644 --- a/debian/pve-firewall.service +++ b/debian/pve-firewall.service @@ -8,9 +8,6 @@ Before=shutdown.target Conflicts=shutdown.target [Service] -ExecStartPre=-/usr/bin/update-alternatives --set ebtables /usr/sbin/ebtables-legacy -ExecStartPre=-/usr/bin/update-alternatives --set iptables /usr/sbin/iptables-legacy -ExecStartPre=-/usr/bin/update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy ExecStart=/usr/sbin/pve-firewall start ExecStop=/usr/sbin/pve-firewall stop ExecReload=/usr/sbin/pve-firewall restart -- 2.51.0