iptables: don't ship paths served by update-alternatives

These paths are managed by update-alternatives, no need to ship them in the
package.

Closes: #911899
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

debian/rules

@@ -12,3 +12,19 @@ LIB_DIR := /usr/lib/$(DEB_HOST_MULTIARCH)
 override_dh_auto_configure:
 	dh_auto_configure -- --disable-libipq --enable-devel \
 			--libdir=$(LIB_DIR) --with-xtlibdir=$(LIB_DIR)/xtables
+
+override_dh_auto_install:
+	dh_auto_install
+	# leave room for paths links managed by update-alternatives
+	rm debian/tmp/usr/sbin/iptables
+	rm debian/tmp/usr/sbin/ip6tables
+	rm debian/tmp/usr/sbin/arptables
+	rm debian/tmp/usr/sbin/ebtables
+	rm debian/tmp/usr/sbin/iptables-save
+	rm debian/tmp/usr/sbin/iptables-restore
+	rm debian/tmp/usr/sbin/ip6tables-save
+	rm debian/tmp/usr/sbin/ip6tables-restore
+	rm debian/tmp/usr/sbin/arptables-save
+	rm debian/tmp/usr/sbin/arptables-restore
+	rm debian/tmp/usr/sbin/ebtables-save
+	rm debian/tmp/usr/sbin/ebtables-restore