This three year old bug impacted me also on a fresh Debian Buster. The
patch provided by Steven Shiau <ste...@nchc.org.tw> seems to have done
the trick. This bug would have locked me out of a server if
netfilter-persistent were working as expected.
