diff --git a/podman-image/build_common.sh b/podman-image/build_common.sh
index f694523..9aa7d7f 100755
--- a/podman-image/build_common.sh
+++ b/podman-image/build_common.sh
@@ -99,7 +99,6 @@ PACKAGES=(
     openssh-server
     cifs-utils
     nfs-utils-coreos
-    iptables-nft
     iproute
     dhcp-client
 
diff --git a/podman-image/podman-iptables.conf b/podman-image/podman-iptables.conf
index 372b330..ff529b2 100644
--- a/podman-image/podman-iptables.conf
+++ b/podman-image/podman-iptables.conf
@@ -4,8 +4,8 @@
 # still need it, i.e. nested docker or older podman.
 # Normally it would be up to the sys admin to configure this but given
 # podman machine os is more of "managed" OS we should just keep it to
-# avoid breaking users, https://github.com/containers/podman/issues/25153.
-# TODO (6.0): consider removing this in a major release where we can justify
-# removing legacy modules.
+# avoid breaking users:
+# - https://github.com/containers/podman/issues/25153.
+# - https://github.com/containers/podman-machine-os/pull/197#issuecomment-3558043836
 ip_tables
 ip6_tables