Package Details: xtables-addons 3.26-1

Git Clone URL: (read-only, click to copy)
Package Base: xtables-addons
Description: Set of additional extensions for the Xtables packet filter that is present in the Linux kernel
Upstream URL:
Keywords: iptablex xtables
Licenses: GPL2
Conflicts: xtables-addons-dkms
Replaces: xtables-addons-dkms
Submitter: None
Maintainer: k0ste
Last Packager: k0ste
Votes: 30
Popularity: 0.000000
First Submitted: 2009-04-20 09:21 (UTC)
Last Updated: 2024-03-29 19:35 (UTC)

Latest Comments

1 2 3 4 5 6 7 Next › Last »

k0ste commented on 2020-12-08 06:57 (UTC)

@punkrockguy318, seems project change home page couple a weeks ago. I updated pkgbuild, should builds fine on kernel 5.9 and 5.10. Thanks!

prg commented on 2020-12-07 21:16 (UTC)

Not currently able to compile this; getting the same error kenubi was getting in 2018

error: initialization of ‘int ()(struct sock , int, sockptr_t, unsigned int)’ from incompatible pointer type ‘int ()(struct sock , int, void *, unsigned int)’ [-Werror=incompatible-pointer-types]

amish commented on 2019-08-22 11:20 (UTC)

@jimbo You may want to have a look at:

jimbo commented on 2019-08-22 08:43 (UTC) (edited on 2019-08-22 08:45 (UTC) by jimbo)

I had to execute:
cd /usr/share/xt_geoip
sudo cp /usr/lib/xtables-addons/xt_geoip .
sudo ./xt_geoip_dl
sudo ./xt_geoip_build -S GeoLite2-Country-CSV_
-D /usr/share/xt_geoip *.csv

kenubi commented on 2019-07-26 09:59 (UTC)

[kernel 5.2.2-arch1-1 , x64, xtables-addons snapshot 2019-03-14 02:27 / 20190726] CC [M] /alt/packages/xtables-addons-3.3-1/xtables-addons/src/xtables-addons-3.3/extensions/pknock/xt_pknock.o /alt/packages/xtables-addons-3.3-1/xtables-addons/src/xtables-addons-3.3/extensions/pknock/xt_pknock.c: In function ‘xt_pknock_mt_init’: /alt/packages/xtables-addons-3.3-1/xtables-addons/src/xtables-addons-3.3/extensions/pknock/xt_pknock.c:1128:13: error: ‘struct shash_desc’ has no member named ‘flags’ 1128 | crypto.desc.flags = 0; | ^

nmset commented on 2019-03-18 13:37 (UTC) (edited on 2020-05-31 14:04 (UTC) by nmset)

I am having a strange problem on IPV6 with module geoip.

These two ip6tables don't work as expected :

ip6tables -A INPUT -p tcp -i eth0 -m multiport --dports 22,2222 -m geoip --src-cc FR -j ACCEPT

ip6tables -A INPUT -p tcp -i eth0 -m multiport --dports 22,2222 -j DROP

I can't connect via IPV6 to my SSH server, while I should be able, my ISP being in France.

If I remove line #2, I can connect successfully.

However, I can connect with :

ip6tables -A INPUT -p tcp -i eth0 -m multiport --dports 22,2222 -m geoip ! --src-cc FR -j ACCEPT

ip6tables -A INPUT -p tcp -i eth0 -m multiport --dports 22,2222 -j DROP

while reversing the criteria.

Can someone confirm that reverse logic ? It's working as expected with IPV4.


UPDATE : This reverse logic is found fixed in 3.9-1.

wooparadog commented on 2018-12-04 01:11 (UTC) (edited on 2018-12-04 01:12 (UTC) by wooparadog)

I found that this aur will install libxt_*.so in /usr/lib/iptables, but iptables is no longer reading so libs from there. The new location is /usr/lib/xtables.

If you ever encountered problems when executing

iptables -A OUTPUT -m geoip --dst-cc CN -j DROP or something similar, and having

Couldn't load match 'geoip':No such file or directory problem.

the temporary fix is:

ln -s /usr/lib/iptables/ /usr/lib/xtables/

Or you can just edit the pkgbuild before build/install..