Bug#1118653: linux-image-6.17.2-amd64: Please restore CONFIG_NETFILTER_XT_TARGET_MASQUERADE

[Dmytro Nezhevenko <dion@dion.org.ua>]

On Thu, Oct 23, 2025 at 11:37:49PM +0200, Bastian Blank wrote:
> My bad.  This is one package with two different implementations.  So
> please verify you use the -nft version.  Something like:
> 
> update-alternatives --list /usr/bin/iptables
> 
> However some tools might iverride this, so moving the legacy binary
> (iptables-legacy) away can find stuff as well.

I think you asked about this:

%sudo update-alternatives --list iptables                                                                         
/usr/sbin/iptables-legacy
/usr/sbin/iptables-nft

% sudo update-alternatives --display iptables               
iptables - auto mode
  link best version is /usr/sbin/iptables-nft
  link currently points to /usr/sbin/iptables-nft
  link iptables is /usr/sbin/iptables
  slave iptables-restore is /usr/sbin/iptables-restore
  slave iptables-save is /usr/sbin/iptables-save
/usr/sbin/iptables-legacy - priority 10
  slave iptables-restore: /usr/sbin/iptables-legacy-restore
  slave iptables-save: /usr/sbin/iptables-legacy-save
/usr/sbin/iptables-nft - priority 20
  slave iptables-restore: /usr/sbin/iptables-nft-restore
  slave iptables-save: /usr/sbin/iptables-nft-save

-- 
WBR, Dmitry