diff --git a/tasks/pre_checks_packages.yml b/tasks/pre_checks_packages.yml
index bd31dc7..006a510 100644
--- a/tasks/pre_checks_packages.yml
+++ b/tasks/pre_checks_packages.yml
@@ -21,6 +21,6 @@
   when:
     - check_k3s_required_package.rc is defined
     - (package.until is not defined
-       or (k3s_release_version | replace('v', '')) is version_compare(package.until, '>='))
+       or (k3s_release_version | replace('v', '')) is version_compare(package.until, '<'))
     - (package.from is not defined
        or (k3s_release_version | replace('v', '')) is version_compare(package.from, '>='))
diff --git a/vars/main.yml b/vars/main.yml
index 7577cd7..fd7a21b 100644
--- a/vars/main.yml
+++ b/vars/main.yml
@@ -112,7 +112,7 @@ k3s_check_packages:
   debian-11:
     - name: iptables-legacy
       from: 1.19.2
-      # until: 1.22.2
+      until: 1.22.3
       documentation: https://rancher.com/docs/k3s/latest/en/advanced/#enabling-legacy-iptables-on-raspbian-buster
 # - name: dummy
 #   from: 1.19.2