Hi On debian 11 for example it's highly recommended to use iptables nft. https://wiki.debian.org/iptables There is also a bug currently in csf leaving an inconsistent state after the install: update-alternatives --get-selections | grep tables arptables auto /usr/sbin/arptables-nft <--- ebtables auto...