The release of Debian 11 (code name "Bullseye") is still about two years away, however the developers are already planning what features will appear in the future version. One of the planned changes to migrating from the old iptables tools to the newer nftables. While iptables would still be available to those who need it, nftables and firewalld would be the new default methods for managing the operating system's firewall. A post linked to from Debian's micronews service reads: "This is another step in deprecating iptables and welcoming nftables. But it does not mean that iptables won’t be available in Debian 11 Bullseye. If you need it, you will need to use aptitude install iptables to download and install it from the package repository. The second part of my proposal was to promote firewalld as the default 'wrapper' for firewaling in Debian. I think this is in line with the direction other distros are moving. It turns out firewalld integrates pretty well with the system, includes a DBus interface and many system daemons (like libvirt) already have native integration with firewalld. Also, I believe the days of creating custom-made scripts and hacks to handle the local firewall may be long gone, and firewalld should be very helpful here too."
Star Labs - Laptops built for Linux.
View our range including the Star Lite, Star LabTop and more. Available with a choice of Ubuntu, Linux Mint or Zorin OS pre-installed with many more distributions supported. Visit Star Labs for information, to buy and get support.