diff --git a/pmb/config/__init__.py b/pmb/config/__init__.py
index b385b7f9..87f473ed 100644
--- a/pmb/config/__init__.py
+++ b/pmb/config/__init__.py
@@ -311,17 +311,28 @@ necessary_kconfig_options_nftables = {
     ">=3.13.0": {  # nftables support introduced here
         "all": {  # all arches
             "NETFILTER": True,
+            "NF_CONNTRACK": True,
             "NF_TABLES": True,
+            "NF_TABLES_INET": True,
             "NFT_CT": True,
             "NFT_COUNTER": True,
             "NFT_LOG": True,
             "NFT_LIMIT": True,
             "NFT_MASQ": True,
             "NFT_NAT": True,
+            "NFT_REJECT": True,
             "NF_TABLES_IPV4": True,
             "NF_REJECT_IPV4": True,
+            "IP_NF_IPTABLES": True,
+            "IP_NF_FILTER": True,
+            "IP_NF_TARGET_REJECT": True,
+            "IP_NF_NAT": True,
             "NF_TABLES_IPV6": True,
             "NF_REJECT_IPV6": True,
+            "IP6_NF_IPTABLES": True,
+            "IP6_NF_FILTER": True,
+            "IP6_NF_TARGET_REJECT": True,
+            "IP6_NF_NAT": True,
         }
     },
 }
diff --git a/test/testdata/kconfig_check/good-nftables b/test/testdata/kconfig_check/good-nftables
index d058900a..4ff44acf 100644
--- a/test/testdata/kconfig_check/good-nftables
+++ b/test/testdata/kconfig_check/good-nftables
@@ -226,6 +226,7 @@ CONFIG_NF_TPROXY_IPV4=m
 CONFIG_NF_TABLES_IPV4=y
 CONFIG_NFT_REJECT_IPV4=m
 CONFIG_NF_TABLES_ARP=y
+CONFIG_NF_TABLES_INET=y
 CONFIG_NF_LOG_IPV4=m
 CONFIG_NF_REJECT_IPV4=m
 CONFIG_NF_NAT_PPTP=m
@@ -239,6 +240,7 @@ CONFIG_IP_NF_TARGET_MASQUERADE=m
 CONFIG_IP_NF_TARGET_NETMAP=m
 CONFIG_IP_NF_TARGET_REDIRECT=m
 CONFIG_IP_NF_MANGLE=m
+CONFIG_IP_NF_NAT=m
 CONFIG_IP_NF_RAW=m
 CONFIG_IP_NF_SECURITY=m
 CONFIG_IP_NF_ARPTABLES=m
@@ -257,9 +259,9 @@ CONFIG_IP6_NF_MATCH_SRH=m
 CONFIG_IP6_NF_FILTER=m
 CONFIG_IP6_NF_TARGET_REJECT=m
 CONFIG_IP6_NF_MANGLE=m
+CONFIG_IP6_NF_NAT=m
 CONFIG_IP6_NF_RAW=m
 CONFIG_IP6_NF_TARGET_MASQUERADE=m
-
 CONFIG_NF_DEFRAG_IPV6=m
 CONFIG_NF_TABLES_BRIDGE=m
 CONFIG_L2TP=m