The update often needs to deinstall some older versions before it can start.
When all of these steps are finished, you can deinstall the currently installed ipchains and iptables packages.