Since nftables is the strongly preferred firewall tool in Debian 10, and seems to me better suited (than iptables) to on-the-fly modification by fail2ban and similar, is that on the list for future versions of Sympl?
(it would also clear up the iptables-legacy issue mentioned in another topic)