diff --git a/netflow/iptables.sh b/netflow/iptables.sh
index 8b01983..74721d4 100644
--- a/netflow/iptables.sh
+++ b/netflow/iptables.sh
@@ -5,6 +5,8 @@ if [[ -d "/host/proc/1/" ]]; then source /apps/gitrce/hook/singleton.sh "$0"; fi
 
 __main() {
 	:
+	# 切换到系统默认的legacy
+	update-alternatives --set iptables /usr/sbin/iptables-legacy
 
 	_owner_id=50000
 	_chain_name="output_netflow_owner_${_owner_id}"