diff --git a/iptables.spec b/iptables.spec
index d10b82c..d34d043 100644
--- a/iptables.spec
+++ b/iptables.spec
@@ -10,13 +10,11 @@
 # build legacy sub-packages only on non-rhel distributions
 %bcond legacy %[ ! 0%{?rhel} ]
 
-%define _unpackaged_files_terminate_build 0
-
 Name: iptables
 Summary: Tools for managing Linux kernel packet filtering capabilities
 URL: https://www.netfilter.org/projects/iptables
 Version: 1.8.11
-Release: 6%{?dist}
+Release: 7%{?dist}
 Source: %{url}/files/%{name}-%{version}.tar.xz
 Source1: iptables.init
 Source2: iptables-config
@@ -309,6 +307,18 @@ done
 ln -sf --relative %{buildroot}%{_sbindir}/xtables-legacy-multi \
 		%{buildroot}%{_bindir}/iptables-xml
 
+%if ! %{with legacy}
+rm %{buildroot}%{_bindir}/iptables-xml
+rm -r %{buildroot}%{_includedir}/libiptc
+rm %{buildroot}%{_libdir}/libip{4,6}tc.so*
+rm %{buildroot}%{_libdir}/pkgconfig/libip{4,6,}tc.pc
+rm %{buildroot}%{_sbindir}/ip{,6}tables-legacy*
+rm %{buildroot}%{_sbindir}/xtables-legacy-multi
+rm %{buildroot}%{_mandir}/man1/iptables-xml.1*
+rm %{buildroot}%{_mandir}/man8/xtables-legacy.8*
+rm %{buildroot}%{_datadir}/xtables/iptables.xslt
+%endif
+
 %ldconfig_scriptlets
 
 %if %{with legacy}
@@ -508,6 +518,9 @@ fi
 %ghost %{_mandir}/man8/ebtables.8.gz
 
 %changelog
+* Sat Dec 14 2024 Phil Sutter <psutter@redhat.com> [1.8.11-7.el10]
+- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]
+
 * Tue Nov 19 2024 Phil Sutter <psutter@redhat.com> [1.8.11-6.el10]
 - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
 - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]