diff --git a/debian/ngcp-rtpengine-iptables.dirs b/debian/ngcp-rtpengine-iptables.dirs
new file mode 100644
index 000000000..1fef17ed8
--- /dev/null
+++ b/debian/ngcp-rtpengine-iptables.dirs
@@ -0,0 +1 @@
+${env:XTABLES_DIR}
diff --git a/debian/ngcp-rtpengine-iptables.install b/debian/ngcp-rtpengine-iptables.install
new file mode 100644
index 000000000..3475985fd
--- /dev/null
+++ b/debian/ngcp-rtpengine-iptables.install
@@ -0,0 +1 @@
+iptables-extension/libxt_RTPENGINE.so ${env:XTABLES_DIR}
diff --git a/debian/rules b/debian/rules
index 99c4cfae2..5e25b7503 100755
--- a/debian/rules
+++ b/debian/rules
@@ -15,7 +15,7 @@ sname:=ngcp-rtpengine
 sversion:=$(DEB_VERSION_UPSTREAM)
 ## end of kernel package specific stuff
 
-XTABLES_DIR:=$(shell pkg-config xtables --variable=xtlibdir || echo /lib/xtables)
+export XTABLES_DIR := $(shell pkg-config xtables --variable=xtlibdir || echo /lib/xtables)
 
 ifneq (,$(filter $(DEB_BUILD_PROFILES),pkg.ngcp-rtpengine.no-transcoding))
 export with_transcoding = no
@@ -44,9 +44,5 @@ execute_before_dh_auto_install-indep:
 	markdown README.md | gzip -9 > debian/README.html.gz
 	gzip -9 < README.md > debian/README.md.gz
 
-execute_after_dh_install:
-	dh_installdirs -pngcp-rtpengine-iptables $(XTABLES_DIR)
-	install -m 0644 iptables-extension/libxt_RTPENGINE.so debian/ngcp-rtpengine-iptables/$(XTABLES_DIR)
-
 execute_after_dh_installsystemd:
 	dh_installsystemd -pngcp-rtpengine-recording-daemon --name=ngcp-rtpengine-recording-nfs-mount