From b37cbcf50abcbba082a3badf9983a18a4289530a Mon Sep 17 00:00:00 2001 From: Eric Fahlgren Date: Mon, 16 Mar 2026 08:26:03 -0700 Subject: [PATCH] iptables: prefer nft variants over zz-legacy Set the default variant on "iptables-nft" and "ip6tables-nft" to make them the preferred package when "iptables" is installed as a dependency. Link: https://github.com/openwrt/packages/issues/28815 Signed-off-by: Eric Fahlgren Link: https://github.com/openwrt/openwrt/pull/22448 Signed-off-by: Hauke Mehrtens --- package/network/utils/iptables/Makefile | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/package/network/utils/iptables/Makefile b/package/network/utils/iptables/Makefile index 289ad8db07..4b00f3bbe0 100644 --- a/package/network/utils/iptables/Makefile +++ b/package/network/utils/iptables/Makefile @@ -10,7 +10,7 @@ include $(INCLUDE_DIR)/kernel.mk PKG_NAME:=iptables PKG_VERSION:=1.8.10 -PKG_RELEASE:=2 +PKG_RELEASE:=3 PKG_SOURCE_URL:=https://netfilter.org/projects/iptables/files PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz @@ -144,6 +144,7 @@ $(call Package/iptables/Default) TITLE:=IP firewall administration tool nft DEPENDS:=+kmod-ipt-core +xtables-nft PROVIDES:=iptables + DEFAULT_VARIANT:=1 ALTERNATIVES:=\ 300:/usr/sbin/iptables:xtables-nft-multi \ 300:/usr/sbin/iptables-restore:xtables-nft-multi \ @@ -489,6 +490,7 @@ $(call Package/iptables/Default) DEPENDS:=@IPV6 +kmod-ip6tables +xtables-nft TITLE:=IP firewall administration tool nft PROVIDES:=ip6tables + DEFAULT_VARIANT:=1 ALTERNATIVES:=\ 300:/usr/sbin/ip6tables:xtables-nft-multi \ 300:/usr/sbin/ip6tables-restore:xtables-nft-multi \