Subject: Re: [ANNOUNCE]: First release of nftables

From: Patrick McHardy <[email-masked]>
Date: Wed, 18 Mar 2009 11:04:58 +0100

Andi Kleen wrote:
> Patrick McHardy <[email-masked]> writes:
>   
>> The userspace frontend is probably even more different to iptables than
>> the kernel.
>>     
>
> Are there plans to implement the existing iptables/ipchains/ipfw user
> interfaces on top of nftables?
>   

I've thought about a "skin" in userspace to parse the iptables syntax
and convert it to the new syntax. But the kernel won't have a compatibility
interface and I'm not sure yet whether userspace will also be able to output
iptables syntax. ipchains etc. definitely not.