Re: iptables support for Debian 11 PV domu's

[Bastian Blank <bblank@xxxxxxxxxx>]

On Sun, Oct 03, 2021 at 07:08:10PM -0500, Chris Myers wrote:
> Trying to do a generic iptables -V gives the generic message
> iptables/1.8.7 Failed to initialize nft: Protocol not supported

You are missing NFT support in the kernel.  So you run the kernel not
shipped in this version of Debian or in an environment that forbids
loading modules.  You could use a workaround and revert to the old
iptables interface, by using iptables-legacy (see update-alternatives
--list iptables).

Bastian

-- 
        "... freedom ... is a worship word..."
        "It is our worship word too."
                -- Cloud William and Kirk, "The Omega Glory", stardate unknown