Migrate firewall to nftables
Nftables becomes the default firewall framework in next debian (buster).
from https://wiki.debian.org/nftables#Should_I_build_a_firewall_using_a_nftables.3F:
Should I build a firewall using a nftables?
Yes. Building new firewalls on top of iptables is discouraged.
Should I replace an iptables firewall with a nftables one?
Yes, nftables is the replacement for iptables. There are some tools in place to ease in this task. Please read: https://wiki.nftables.org/wiki-nftables/index.php/Moving_from_iptables_to_nftables
Edited by Maarten de Waard