After 20 years of using on and only dabbling in iptables when I absolutely had to in , nftables looks like an unreadable, incomprehensible shitshow; A crayon scrawl by a toddler of weird nat and mangle chains that make no sense.

The Linux developers would have been much better off porting pf to Linux.

0

If you have a fediverse account, you can quote this note from your own instance. Search https://mastodon.bsd.cafe/users/pertho/statuses/114664235515254523 on your instance and quote it. (Note that quoting is not supported in Mastodon.)