What should be the default `iptables` command backend? The existence of package "iptables-backend-nft" and its description imply that by default it should use the legacy iptables backend ("xtables-legacy-multi" binary). But from what I can see, even without having iptables-backend-nft installed, here's what I have:
alts -l iptables Binary: iptables Alternatives: 2 Priority: 1 Target: /usr/sbin/xtables-legacy-multi Group: ip6tables, ip6tables-restore, ip6tables-save, iptables, iptables-restore, iptables-save Priority: 2* Target: /usr/sbin/xtables-nft-multi Group: ip6tables, ip6tables-restore, ip6tables-save, iptables, iptables-restore, iptables-save /usr/sbin/iptables -V iptables v1.8.7 (nf_tables)
I think that means it uses nftables. Is it intentional, or an error in transition to libalternatives?