XPost: linux.debian.bugs.dist   
   From: waldi@debian.org   
      
   Control: reopen -1   
      
   On Thu, Oct 23, 2025 at 08:21:43PM +0200, Ben Hutchings wrote:   
   > There was an intentional change upstream: there is a new symbol   
   > CONFIG_NETFILTER_XTABLES_LEGACY that iptables etc. depend on, and it is   
   > off by default.  But we certainly shouldn't break libvirt, so I think we   
   > need to turn that back on for now.   
      
   And this problem is actually unrelated.  We don't actually set   
   NETFILTER_XT_TARGET_MASQUERADE in our config.  So it ends up disabled as   
   we also override the default selection with NETFILTER_ADVANCED=y.   
      
   | % git grep -E 'NETFILTER_ADVANCED|NETFILTER_XT_TARGET_MASQUERADE'   
   | debian/config/config:CONFIG_NETFILTER_ADVANCED=y   
   | %   
      
   Bastian   
      
   --   
   Mind your own business, Spock.  I'm sick of your halfbreed interference.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)