NFTables 0.4 Released As Eventual IPTables Successor

Work is still underway in a steadfast manner for NFTables as an eventual replacement to IPTables for packet filtering on Linux. Released today was NFTables v0.4 with functionality offered as of the Linux 3.18 kernel.

Today's NFTables 0.4 release adds many bug fixes to the user-space component while supporting features that are present in the kernel up through Linux 3.18 and some features coming in Linux 3.19.

The nft program in nftables 0.4 supports global ruleset operations, full logging support for all the families, automatic selection of the optimal set implementation, complete reject support, masquerading support, redirect support, support for NAT flags, and various other changes.

More details on the NFTables 0.4 release can be found via its mailing list announcement. Those unfamiliar with NFTables and its benefits over IPTables can checkout the official project site.