Nftables: a new packet filtering engine

iptables had many more drawbacks and I ended up sticking with ipchains for as long as I could. One of the worst was the way it broke logging. Many other issues like the way forwarding was broken making common rules (for both the router as well as the routees) more difficult.

I for one, am eagerly awaiting nftables!