diff --git a/debian/changelog b/debian/changelog
index f0c8fd321..aea7fcf47 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -17,6 +17,7 @@ linux (4.2.6-2) UNRELEASED; urgency=medium
   * ppp, slip: Validate VJ compression slot parameters completely
     (CVE-2015-7799)
   * Btrfs: fix truncation of compressed and inlined extents (CVE-2015-8374)
+  * netfilter: Enable NFT_DUP_IPV4, NFT_DUP_IPV6 as modules (Closes: #803370)
 
  -- Salvatore Bonaccorso <carnil@debian.org>  Tue, 10 Nov 2015 22:05:58 +0100
 
diff --git a/debian/config/config b/debian/config/config
index 0da26b18d..868556e71 100644
--- a/debian/config/config
+++ b/debian/config/config
@@ -5803,6 +5803,7 @@ CONFIG_NF_CONNTRACK_IPV4=m
 CONFIG_NF_CONNTRACK_PROC_COMPAT=y
 CONFIG_NF_TABLES_IPV4=m
 CONFIG_NFT_CHAIN_ROUTE_IPV4=m
+CONFIG_NFT_DUP_IPV4=m
 CONFIG_NF_TABLES_ARP=m
 CONFIG_NF_LOG_ARP=m
 CONFIG_NF_LOG_IPV4=m
@@ -5864,6 +5865,7 @@ CONFIG_IPV6_PIMSM_V2=y
 CONFIG_NF_CONNTRACK_IPV6=m
 CONFIG_NF_TABLES_IPV6=m
 CONFIG_NFT_CHAIN_ROUTE_IPV6=m
+CONFIG_NFT_DUP_IPV6=m
 CONFIG_NF_REJECT_IPV6=m
 CONFIG_NF_LOG_IPV6=m
 CONFIG_NF_NAT_IPV6=m