anchor.diff:  
     postInstall =
       let
  -      # Keep the legacy iptables binary for now for backwards compatibility (comment on #109332)
  -      binPath = [ iptables ebtables-compat iproute2 pmutils numad numactl bridge-utils dmidecode dnsmasq ] ++ optionals enableIscsi [ openiscsi ];
  +      binPath = [ iptables iproute2 pmutils numad numactl bridge-utils dmidecode dnsmasq ] ++ optionals enableIscsi [ openiscsi ];
       in
       ''
           substituteInPlace $out/libexec/libvirt-guests.sh \
  
positive.code:       '';
      in
      ''
        PATH=${lib.makeBinPath ([ dnsmasq ] ++ optionals stdenv.isLinux [ iproute2 iptables ebtables-compat lvm2 systemd numad ] ++ optionals enableIscsi [ openiscsi ])}:$PATH
        # the path to qemu-kvm will be stored in VM's .xml and .save files
        # do not use "''${qemu_kvm}/bin/qemu-kvm" to avoid bound VMs to particular qemu derivations
        substituteInPlace src/lxc/lxc_conf.c \
  
negative.code: , gettext
  , libtasn1
  , iptables
  , libgcrypt
  , yajl
  , pmutils
  