Just stumbled across something inconsistent after replacing iptables with nftables (the default on debian buster 10):
A check with lynis gave me a warning about the "leftover" iptables package:
-[ Lynis 2.7.5 Results ]-
Warnings (2):
----------------------------
[...]
! iptables module(s) loaded, but no rules active [FIRE-4512]
https://cisofy.com/lynis/controls/FIRE-4512/
Is this dependency necessary?
aptitude purge iptables
The following packages will be REMOVED:
iptables{p}
0 packages upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
Need to get 0 B of archives. After unpacking 1.444 kB will be freed.
The following packages have unmet dependencies:
armbian-config : Depends: iptables but it is not going to be installed
The following actions will resolve these dependencies:
Remove the following packages:
1) armbian-config [5.90 (buster, now)]