diff --git a/debian/changelog b/debian/changelog
index 56fe28b42..4a3ea7904 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+linux (4.3~rc7-1~exp2) UNRELEASED; urgency=medium
+
+  * netfilter: Enable NFT_DUP_IPV4, NFT_DUP_IPV6 as modules (Closes: #803370)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 29 Oct 2015 21:26:52 +0000
+
 linux (4.3~rc7-1~exp1) experimental; urgency=medium
 
   * New upstream release candidate
diff --git a/debian/config/config b/debian/config/config
index 1d9d16a27..2fb4ba3f3 100644
--- a/debian/config/config
+++ b/debian/config/config
@@ -5787,6 +5787,7 @@ CONFIG_NF_CONNTRACK_IPV4=m
 CONFIG_NF_CONNTRACK_PROC_COMPAT=y
 CONFIG_NF_TABLES_IPV4=m
 CONFIG_NFT_CHAIN_ROUTE_IPV4=m
+CONFIG_NFT_DUP_IPV4=m
 CONFIG_NF_TABLES_ARP=m
 CONFIG_NF_LOG_ARP=m
 CONFIG_NF_LOG_IPV4=m
@@ -5848,6 +5849,7 @@ CONFIG_IPV6_PIMSM_V2=y
 CONFIG_NF_CONNTRACK_IPV6=m
 CONFIG_NF_TABLES_IPV6=m
 CONFIG_NFT_CHAIN_ROUTE_IPV6=m
+CONFIG_NFT_DUP_IPV6=m
 CONFIG_NF_REJECT_IPV6=m
 CONFIG_NF_LOG_IPV6=m
 CONFIG_NF_NAT_IPV6=m