# Sargo's 4.9 kernel provides the legacy netfilter backend.
[main]
firewall-backend=iptables