Nftables pulled for 3.13
For those who have been following nftables,
the replacement firewall subsystem for the kernel: this code has just been
pulled into the net-next tree. That means that, barring some sort of
trouble, it will be merged in the 3.13 development cycle. This code is not
ready to replace iptables yet, but the pace of the work should increase
once this subsystem is in the mainline. Anybody wanting to try out
nftables can see the quick
howto page for instructions.