diff --git a/test/zdtm/static/net_lock_socket_iptables.desc b/test/zdtm/static/net_lock_socket_iptables.desc
index 936ff8702..cb622536f 100644
--- a/test/zdtm/static/net_lock_socket_iptables.desc
+++ b/test/zdtm/static/net_lock_socket_iptables.desc
@@ -1,5 +1,6 @@
 {
     'flavor': 'h',
+    'feature': 'has_ipt_legacy',
     'flags': 'suid excl reqrst',
     'dopts': '--tcp-established --network-lock iptables',
     'ropts': '--tcp-established',
diff --git a/test/zdtm/static/net_lock_socket_iptables6.desc b/test/zdtm/static/net_lock_socket_iptables6.desc
index 936ff8702..cb622536f 100644
--- a/test/zdtm/static/net_lock_socket_iptables6.desc
+++ b/test/zdtm/static/net_lock_socket_iptables6.desc
@@ -1,5 +1,6 @@
 {
     'flavor': 'h',
+    'feature': 'has_ipt_legacy',
     'flags': 'suid excl reqrst',
     'dopts': '--tcp-established --network-lock iptables',
     'ropts': '--tcp-established',
diff --git a/test/zdtm/static/netns-nf.desc b/test/zdtm/static/netns-nf.desc
index c99696d1c..58c23e8ba 100644
--- a/test/zdtm/static/netns-nf.desc
+++ b/test/zdtm/static/netns-nf.desc
@@ -3,4 +3,5 @@
                 '/lib/xtables/libxt_standard.so|/usr/lib64/xtables/libxt_standard.so|/usr/lib/iptables/libxt_standard.so|/usr/lib/powerpc64le-linux-gnu/xtables/libxt_standard.so|/usr/lib/x86_64-linux-gnu/xtables/libxt_standard.so|/usr/lib/s390x-linux-gnu/xtables/libxt_standard.so|/usr/lib/xtables/libxt_standard.so|/usr/lib/aarch64-linux-gnu/xtables/libxt_standard.so|/usr/lib/riscv64-linux-gnu/xtables/libxt_standard.so',
                 '/usr/bin/diff'],
     'flags': 'suid',
+    'feature': 'has_ipt_legacy',
     'flavor': 'ns uns'}
diff --git a/test/zdtm/static/netns_lock_iptables.desc b/test/zdtm/static/netns_lock_iptables.desc
index 69020f34e..b465706b8 100644
--- a/test/zdtm/static/netns_lock_iptables.desc
+++ b/test/zdtm/static/netns_lock_iptables.desc
@@ -1,6 +1,7 @@
 {
     'flavor': 'h',
     'flags': 'suid excl reqrst',
+    'feature': 'has_ipt_legacy',
     'opts': '--tcp-established',
     'dopts': '--network-lock iptables',
     'ropts': '--join-ns net:/var/run/netns/criu-net-lock-test'
diff --git a/test/zdtm/static/socket-tcp-closed-last-ack.desc b/test/zdtm/static/socket-tcp-closed-last-ack.desc
index 309854fa5..c77d58477 100644
--- a/test/zdtm/static/socket-tcp-closed-last-ack.desc
+++ b/test/zdtm/static/socket-tcp-closed-last-ack.desc
@@ -5,6 +5,6 @@
 	],
 	'opts': '--tcp-established',
 	'flags': 'suid nouser samens',
-	'feature' : 'tcp_half_closed',
+	'feature' : 'tcp_half_closed has_ipt_legacy',
 	'flavor': 'ns uns',
 }
diff --git a/test/zdtm/static/socket-tcp-reseted.desc b/test/zdtm/static/socket-tcp-reseted.desc
index 4aa48ad87..ff92e9f9f 100644
--- a/test/zdtm/static/socket-tcp-reseted.desc
+++ b/test/zdtm/static/socket-tcp-reseted.desc
@@ -6,5 +6,5 @@
        ],
        'opts': '--tcp-established',
        'flags': 'suid nouser samens',
-       'feature' : 'tcp_half_closed'
+       'feature' : 'tcp_half_closed has_ipt_legacy'
 }
diff --git a/test/zdtm/static/socket-tcp-syn-sent.desc b/test/zdtm/static/socket-tcp-syn-sent.desc
index 71cd26d72..52382414b 100644
--- a/test/zdtm/static/socket-tcp-syn-sent.desc
+++ b/test/zdtm/static/socket-tcp-syn-sent.desc
@@ -5,5 +5,5 @@
 	],
 	'opts': '--tcp-established',
 	'flags': 'suid nouser samens',
-	'feature' : 'tcp_half_closed'
+	'feature' : 'tcp_half_closed has_ipt_legacy'
 }