Hi, the 5 days are due for src:iptables to migrate from unstable to testing.
However the package has not moved yet [0]: 6 days old (needed 5 days) old binaries left on amd64: libxtables11 (from 1.6.0+snapshot20161117-1) (but ignoring cruft, so nevermind) old binaries left on i386: libxtables11 (from 1.6.0+snapshot20161117-1) (but ignoring cruft, so nevermind) old binaries left on arm64: libxtables11 (from 1.6.0+snapshot20161117-1) (but ignoring cruft, so nevermind) old binaries left on armel: libxtables11 (from 1.6.0+snapshot20161117-1) (but ignoring cruft, so nevermind) old binaries left on armhf: libxtables11 (from 1.6.0+snapshot20161117-1) (but ignoring cruft, so nevermind) old binaries left on mips: libxtables11 (from 1.6.0+snapshot20161117-1) (but ignoring cruft, so nevermind) old binaries left on mips64el: libxtables11 (from 1.6.0+snapshot20161117-1) (but ignoring cruft, so nevermind) old binaries left on mipsel: libxtables11 (from 1.6.0+snapshot20161117-1) (but ignoring cruft, so nevermind) old binaries left on ppc64el: libxtables11 (from 1.6.0+snapshot20161117-1) (but ignoring cruft, so nevermind) old binaries left on s390x: libxtables11 (from 1.6.0+snapshot20161117-1) (but ignoring cruft, so nevermind) Valid candidate So, what are we going to do finally? [0] https://qa.debian.org/excuses.php?package=iptables