Sorry for the mess with paste in previous post.
The failing use case is the following:
~# update-alternatives --auto ebtables
update-alternatives: using /usr/sbin/ebtables-nft to provide
/usr/sbin/ebtables (ebtables) in auto mode
~# ebtables -N TEST
~# ebtables -P TEST DROP
Policy DROP not allowed
Hello,
I found that packet nftables recommended by iptables breaks ebtables
rules in auto mode as /usr/sbin/ebtables points now to
xtables-nft-multi
The one upgrading from ascii can lose control over remote system, as
the syntax is different. For example:
~# update-alternatives --auto ebtables
u