More Debian BTS clean-up: http://bugs.debian.org/118117
"libiptc currently opens a RAW socket to access the system tables. This unnecessarily forces the application to have the CAP_NET_RAW capability, when all it needs is the CAP_NET_ADMIN capability. A simple non-raw IP socket would suffice." Please reply to JP Sugarbroad <taralATtaral.net> and CC 118117-forwardedATbugs.debian.org.