diff --git a/luci-app-passwall/Makefile b/luci-app-passwall/Makefile
index a2d0feec7..ee0e254ce 100644
--- a/luci-app-passwall/Makefile
+++ b/luci-app-passwall/Makefile
@@ -67,7 +67,6 @@ config PACKAGE_$(PKG_NAME)_Transparent_Proxy
 	select PACKAGE_ipset
 	select PACKAGE_ipt2socks
 	select PACKAGE_iptables
-	select PACKAGE_iptables-legacy
 	select PACKAGE_iptables-mod-conntrack-extra
 	select PACKAGE_iptables-mod-iprange
 	select PACKAGE_iptables-mod-socket
@@ -75,6 +74,9 @@ config PACKAGE_$(PKG_NAME)_Transparent_Proxy
 	select PACKAGE_kmod-ipt-nat
 	default y
 
+	select PACKAGE_iptables-nft
+	default y if PACKAGE_firewall4
+
 config PACKAGE_$(PKG_NAME)_INCLUDE_Brook
 	bool "Include Brook"
 	default n