firewall: for now always default firewall-backend to "itables"

ntables backend is not yet well tested. Don't flip the default yet
but for now always use iptables.

Once nftables is shown to work well, revert this patch.
This commit is contained in:
Thomas Haller 2021-05-14 11:46:54 +02:00
parent 6f04f5bc2f
commit 0609f1f31c
No known key found for this signature in database
GPG key ID: 29C2366E4DFC5728

View file

@ -738,12 +738,9 @@ nm_firewall_config_apply(NMFirewallConfig *self, gboolean shared)
static NMFirewallBackend
_firewall_backend_detect(void)
{
if (g_file_test(NFT_PATH, G_FILE_TEST_IS_EXECUTABLE))
return NM_FIREWALL_BACKEND_NFTABLES;
if (g_file_test(IPTABLES_PATH, G_FILE_TEST_IS_EXECUTABLE))
return NM_FIREWALL_BACKEND_IPTABLES;
return NM_FIREWALL_BACKEND_NFTABLES;
/* For the moment, we still default to iptables. This should
* change once nftables is proven to work well. */
return NM_FIREWALL_BACKEND_IPTABLES;
}
NMFirewallBackend