New Firewall for the Linux Kernel via OSNews. I've never heard of nftables before. Sounds interesting, creting a distinction between userspace and kernel space. Even more detail here.