diff --git a/Pkgfile b/Pkgfile
index b04663c0..2c1e6415 100644
--- a/Pkgfile
+++ b/Pkgfile
@@ -3,7 +3,7 @@
 format: v1alpha2
 
 vars:
-  TOOLS_IMAGE: ghcr.io/siderolabs/tools:v1.3.0-alpha.0-14-g5df6589
+  TOOLS_IMAGE: ghcr.io/siderolabs/tools:v1.3.0-alpha.0-17-ga264809
 
   # renovate: datasource=github-releases depName=containernetworking/plugins
   cni_version: v1.1.1
diff --git a/iptables/pkg.yaml b/iptables/pkg.yaml
index a0a8f8e1..81a18aae 100644
--- a/iptables/pkg.yaml
+++ b/iptables/pkg.yaml
@@ -5,7 +5,7 @@ dependencies:
   - stage: base
 steps:
   - sources:
-      - url: https://www.netfilter.org/pub/iptables/iptables-{{ .iptables_version }}.tar.bz2
+      - url: https://deb.debian.org/debian/pool/main/i/iptables/iptables_{{ .iptables_version }}.orig.tar.bz2
         destination: iptables.tar.bz2
         sha256: "{{ .iptables_sha256 }}"
         sha512: "{{ .iptables_sha512 }}"