diff --git a/config/rootfiles/common/iptables b/config/rootfiles/common/iptables
index b8bf748a5..ba1621324 100644
--- a/config/rootfiles/common/iptables
+++ b/config/rootfiles/common/iptables
@@ -13,15 +13,13 @@ lib/libipq.so.0.0.0
 #lib/libxtables.la
 lib/libxtables.so
 lib/libxtables.so.12
-lib/libxtables.so.12.4.0
+lib/libxtables.so.12.6.0
 #lib/xtables
-lib/xtables/libip6t_DNAT.so
 lib/xtables/libip6t_DNPT.so
 lib/xtables/libip6t_HL.so
 lib/xtables/libip6t_LOG.so
 lib/xtables/libip6t_MASQUERADE.so
 lib/xtables/libip6t_NETMAP.so
-lib/xtables/libip6t_REDIRECT.so
 lib/xtables/libip6t_REJECT.so
 lib/xtables/libip6t_SNAT.so
 lib/xtables/libip6t_SNPT.so
@@ -37,12 +35,10 @@ lib/xtables/libip6t_mh.so
 lib/xtables/libip6t_rt.so
 lib/xtables/libip6t_srh.so
 lib/xtables/libipt_CLUSTERIP.so
-lib/xtables/libipt_DNAT.so
 lib/xtables/libipt_ECN.so
 lib/xtables/libipt_LOG.so
 lib/xtables/libipt_MASQUERADE.so
 lib/xtables/libipt_NETMAP.so
-lib/xtables/libipt_REDIRECT.so
 lib/xtables/libipt_REJECT.so
 lib/xtables/libipt_SNAT.so
 lib/xtables/libipt_TTL.so
@@ -57,6 +53,7 @@ lib/xtables/libxt_CLASSIFY.so
 lib/xtables/libxt_CONNMARK.so
 lib/xtables/libxt_CONNSECMARK.so
 lib/xtables/libxt_CT.so
+lib/xtables/libxt_DNAT.so
 lib/xtables/libxt_DSCP.so
 lib/xtables/libxt_HMARK.so
 lib/xtables/libxt_IDLETIMER.so
@@ -66,6 +63,7 @@ lib/xtables/libxt_NFLOG.so
 lib/xtables/libxt_NFQUEUE.so
 lib/xtables/libxt_NOTRACK.so
 lib/xtables/libxt_RATEEST.so
+lib/xtables/libxt_REDIRECT.so
 lib/xtables/libxt_SECMARK.so
 lib/xtables/libxt_SET.so
 lib/xtables/libxt_SYNPROXY.so
diff --git a/lfs/iptables b/lfs/iptables
index c2f0d56c5..275559bfe 100644
--- a/lfs/iptables
+++ b/lfs/iptables
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.8.7
+VER        = 1.8.8
 
 THISAPP    = iptables-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -41,7 +41,7 @@ objects = $(DL_FILE) \
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 netfilter-layer7-v2.23.tar.gz = $(URL_IPFIRE)/netfilter-layer7-v2.23.tar.gz
 
-$(DL_FILE)_BLAKE2 = fd4dcff142eaadde2a14ce3eb5e45d41c326752553b52900c77fd2e2a20c0685d0a04b95755995e914df47658834d52216d6465c2ae9cd6abc6eb122b95cc976
+$(DL_FILE)_BLAKE2 = 0da021cc7313b86af331768904956dab3eee3de245a7b03965129f3d7f13097fc03fbb1390167dcd971eff216eabad9e59b261a9c0f54bfc48a77453aa40d164
 netfilter-layer7-v2.23.tar.gz_BLAKE2 = 5c8ab722f6fbc126f2f65ecf401de5fc40560c20e3be52f783db34410446185dcb6781b3148e4a174e8b2d2c290bec0342dea95e8cefc35c39345617fa7a8fdc
 
 install : $(TARGET)