diff --git a/iptables.spec b/iptables.spec
index 588fd6e48b5c25f24d87bfa36be9ead159456262..df423d5c3c9ebd626eb768fa165bbea968569245 100644
--- a/iptables.spec
+++ b/iptables.spec
@@ -2,7 +2,7 @@
 %global legacy_actions %{_libexecdir}/initscripts/legacy-actions
 Name:		  iptables
 Version:	  1.8.9
-Release:	  8
+Release:	  9
 Summary:	  IP packet filter administration utilities
 License:	  GPL-2.0-only and Artistic-2.0
 URL:		  https://www.netfilter.org/
@@ -198,7 +198,7 @@ fi
 pfx=%{_sbindir}/iptables
 pfx6=%{_sbindir}/ip6tables
 %{_sbindir}/update-alternatives --install \
-	$pfx iptables $pfx-nft 10 \
+	$pfx iptables $pfx-nft 20 \
 	--slave $pfx6 ip6tables $pfx6-nft \
 	--slave $pfx-restore iptables-restore $pfx-nft-restore \
 	--slave $pfx-save iptables-save $pfx-nft-save \
@@ -216,7 +216,7 @@ if [ "$(readlink -e $manpfx.8.gz)" == $manpfx.8.gz ]; then
 	rm -f $manpfx.8.gz
 fi
 %{_sbindir}/update-alternatives --install \
-	$pfx ebtables $pfx-nft 10 \
+	$pfx ebtables $pfx-nft 20 \
 	--slave $pfx-save ebtables-save $pfx-nft-save \
 	--slave $pfx-restore ebtables-restore $pfx-nft-restore \
 	--slave $manpfx.8.gz ebtables-man $manpfx-nft.8.gz
@@ -233,7 +233,7 @@ for sfx in "" "-restore" "-save"; do
 	fi
 done
 %{_sbindir}/update-alternatives --install \
-	$pfx arptables $pfx-nft 10 \
+	$pfx arptables $pfx-nft 20 \
 	--slave $pfx-save arptables-save $pfx-nft-save \
 	--slave $pfx-restore arptables-restore $pfx-nft-restore \
 	--slave $manpfx.8.gz arptables-man $manpfx-nft.8.gz \
@@ -342,6 +342,12 @@ fi
 %{_datadir}/xtables/iptables.xslt
 
 %changelog
+* Tue Dec 3 2024 sunsuwan <sunsuwan3@huawei.com> - 1.8.9-9
+- Type:bugfix
+- CVE:NA
+- SUG:NA
+- DESC:use xtables-nft when iptables-nft install
+
 * Thu Nov 21 2024 yanglu <yanglu72@h-partners.com> - 1.8.9-8
 - Type:bugfix
 - CVE:NA