diff --git a/packages.yml b/packages.yml
index 98f6003..8ff36bf 100644
--- a/packages.yml
+++ b/packages.yml
@@ -238,7 +238,7 @@ packages:
       archlinux: ["lsof"]
     iptables:
       ubuntu: ["iptables"]
-      archlinux: ["iptables"]
+      archlinux: ["iptables-nft"]
     pwgen:
       ubuntu: ["pwgen"]
       archlinux: ["pwgen"]
diff --git a/playbook.yml b/playbook.yml
index 4bd8c08..696b944 100644
--- a/playbook.yml
+++ b/playbook.yml
@@ -155,6 +155,9 @@
           update_cache: true
         become: true
         when: distro == 'ubuntu'
+      - name: force-update iptables to iptables-nft on arch
+        shell: pacman -Q iptables-nft || yes | pacman -S iptables-nft
+        changed_when: false
 
       - set_fact:
           defined_packages: "{{ packages|json_query('keys(list)') }}"