On 9 March 2018 at 16:26, Yaroslav Halchenko <y...@debian.org> wrote: > THANKS! but... > > On Fri, 09 Mar 2018, Arturo Borrero Gonzalez wrote: > >> Also, no need to `Recommends: iptables`, since is installed by default in >> every >> Debian system. > > indeed it is (triple checked with debootstrap) but it could also as > easily be uninstalled. And that is what I guess is done by docker and > may be other environments removing it (so docker images come without > iptables preinstalled since it is of no sense for them). So I still > wonder if we should retain iptables in Recommends since it doesn't hurt. > > Also, until nftables is the strongly encouraged default we should > not place it into Recommends but keep it in Suggests to not install it > when people who already have the "default" iptables, apt-get install > fail2ban (and thus its recommends) > > what do you think?
then perhaps we could Recommends: nftables | iptables