kernel 6.17 introduced a new option [code]CONFIG_NETFILTER_XTABLES_LEGACY[/code]. When it's not enabled, it will turn off the old options for IPTABLES_LEGACY.
This is a problem because the archlinux base install includes [code]iptables[/code] (i.e. "iptables-legacy") which relies on the legacy interface from the kernel.
One way to overcome this compatibility problem is to install [code]iptables-nft[/code] instead.
Another option is to enable the new [code]CONFIG_NETFILTER_XTABLES_LEGACY[/code] in the kernel package so the legacy IPTABLES_LEGACY options remain enabled.
@graysky2, should we just keep supporting the IPTABLES_LEGACY so users don't have to switch over to iptables-nft?