Package: fail2ban Version: 1.0.2-2 Severity: important Fail2ban does not work out of the box when nftables is installed.
Problem: - Fail2ban can work with either iptables or nftables. - On a system where nftables is installed by default, iptables is not present. - However, Fail2ban does not function properly with nftables unless the configuration is manually adjusted. - As a result, the default installation of Fail2ban fails silently or does not apply any firewall rules. Expected behavior: - Either Fail2ban should depend on iptables, - Or it should be properly configured to work with nftables by default. Steps to reproduce: 1. Install Debian 12.10 "Bookworm" 2. Install fail2ban (without manually installing iptables) 3. Observe that fail2ban starts, but no IPs are banned and no rules are applied Workaround: - Manually configure Fail2ban to use the `nftables` action - Or manually install iptables System info: - Debian version: 12.10 - Kernel: Linux 6.1.0-13-amd64 -- Clemarz
