diff --git a/iptables.spec b/iptables.spec
index e4a701c..ce7bce2 100644
--- a/iptables.spec
+++ b/iptables.spec
@@ -16,7 +16,7 @@ Name: iptables
 Summary: Tools for managing Linux kernel packet filtering capabilities
 URL: https://www.netfilter.org/projects/iptables
 Version: 1.8.7
-Release: 19%{?dist}
+Release: 20%{?dist}
 Source: %{url}/files/%{name}-%{version}.tar.bz2
 Source1: iptables.init
 Source2: iptables-config
@@ -158,6 +158,7 @@ Provides: ebtables-services
 Obsoletes: iptables-services <= 1.8.4
 Obsoletes: iptables-arptables <= 1.8.4
 Obsoletes: iptables-ebtables <= 1.8.4
+Obsoletes: iptables-nft-compat <= 1.8.7-19
 %{?systemd_ordering}
 
 %description nft-services
@@ -459,6 +460,9 @@ fi
 %ghost %{_mandir}/man8/ebtables.8.gz
 
 %changelog
+* Fri Jul 30 2021 Phil Sutter <psutter@redhat.com> - 1.8.7-20
+- Make nft-services obsolete nft-compat to fix upgrade path
+
 * Thu Jul 29 2021 Phil Sutter <psutter@redhat.com> - 1.8.7-19
 - Build iptables-services on C9S only
 - Use systemd_ordering in nft-services, too