nftables is making it's way into 3.13+ kernels: https://home.regit.org/2014/01/why-you-will-love-nftables/ http://netfilter.org/projects/nftables/ Please support using nft directly and not the iptables compatibility layer.