> another interesting feature since nftables 0.2, is to be able to manage ipv4 and > ipv6 > in the same filter table My feeling is that we should use nft, else we will do all work twice. But the current iptables implementation is a good start for the first release.