XPost: linux.debian.bugs.dist 
 From: ben@decadent.org.uk 
  
 On Thu, 2025-10-23 at 16:26 +0200, Dmytro Nezhevenko wrote: 
 > Package: src:linux 
 > Version: 6.17.2-1~exp1 
 > Severity: normal 
 > X-Debbugs-Cc: debian-amd64@lists.debian.org 
 > User: debian-amd64@lists.debian.org 
 > Usertags: amd64 
 > 
 > Dear Maintainer, 
 > 
 > It looks like kernel 6.17.2 from experimental has no support for 
 > CONFIG_NETFILTER_XT_TARGET_MASQUERADE 
 > 
 > This prevents libvirt from bringing up virtual bridge networking with 
 > it's default configuration (that uses iptables) 
 > 
 > Current sid kernel (6.16) is OK. 
 > 
 > PS. Sorry if it's intentional change for transition from iptables 
 [...] 
  
 There was an intentional change upstream: there is a new symbol 
 CONFIG_NETFILTER_XTABLES_LEGACY that iptables etc. depend on, and it is 
 off by default.  But we certainly shouldn't break libvirt, so I think we 
 need to turn that back on for now. 
  
 Ben. 
  
 -- 
 Ben Hutchings 
 Never put off till tomorrow what you can avoid all together. 
  
 -----BEGIN PGP SIGNATURE----- 
  
 iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAmj6cjgACgkQ57/I7JWG 
 EQkvkQ/+Jo3h/Iqtu2ws2P2MtL1563ymm3j7f49MwKlqkvBMo7iyV09N6w6SMlYl 
 tfNilTfpNbUbVqdlo6IjlJyMmNk+Z8QVSWxT+YWTb/nVqNs21TmkADzIwU76V6Yn 
 EENPSF+8INzuFgNHx+hkNboIbYteKnB1oddjEpaDx87EFglCQ5Rh3btZzOmKjek8 
 IxHpAxeQDm4eSdFA4C7SE3qnMgLGan8FW7iopyoHm0rTdY6JdKyMd4RNKiwBTlxb 
 mMM19/9gNCyg+NXvm9a2tiU5StgFAQjekdTT1q1uq3KHAvEjYn++XDXscabuHnID 
 tTDvuqd+nTuTW+NsAaCQ83lGEPsTwnBjCV4Rli2IT8PAaBGllwDmkZl2H839FipL 
 uuvNBko1ZtM35TDGBGqX21lwMvzoI7SwITlHAzEs2NQo+9aF9UYiLBCW6zz4tisv 
 f3Jo8dhYla9LQZZZZgQ3ixkGkjaIRlXwUWUkEXHxCe931o6Md4Q5n+/6g0WHLwP0 
 mlbbvs4YLILN5zgO7gL6UDxE+UXmAXQcFqegKQL3cfZicQyYG1LEyvcqtreLyUHz 
 snjltPuTKu7gi2ijYu3u5cLJAIOlc6WFY40BYiZMibYItekJSigeGmMgec4lxZxA 
 0zkHgj4x34HMMLYIQUdbdbGqyyE/VFKnUeGKEc1PxJo3N4gHahE= 
 =QXhc 
 -----END PGP SIGNATURE----- 
  
 --- SoupGate-Win32 v1.05 
  * Origin: you cannot sedate... all the things you hate (1:229/2)