---
iptables_package: >-
  {% if ansible_distribution_major_version|int <= 8 -%}
  iptables
  {%- else -%}
  iptables-nft
  {%- endif %}