Given the many bugs of the default -nft alternative, maybe the best option for buster would be to revert to using the -legacy version. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://alioth-lists.debian.net/pipermail/pkg-netfilter-team/attachments/20200816/64e40247/attachment-0001.html>