Package Details: xtables-addons-dkms 3.5-1

Git Clone URL: https://aur.archlinux.org/xtables-addons-dkms.git (read-only)
Package Base: xtables-addons-dkms
Description: DKMS for additional extensions for Xtables packet filter present in the Linux kernel
Upstream URL: http://xtables-addons.sourceforge.net/
Keywords: iptables kernel-modules xtables
Licenses: GPL2
Conflicts: xtables-addons, xtables-addons-git, xtables-addons-multikernel
Replaces: xtables-addons, xtables-addons-git, xtables-addons-multikernel
Submitter: scott32
Maintainer: amish
Last Packager: amish
Votes: 13
Popularity: 0.21
First Submitted: 2013-05-20 09:10
Last Updated: 2019-09-11 04:47

Dependencies (5)

Required by (0)

Sources (2)

Latest Comments

« First ‹ Previous 1 2

amish commented on 2014-05-04 12:30

Hello,

anyone willing to have PKGBUILD to build the database which can be used by iptables geoip module here it is:

I named it xtables-geoip-db

https://aur.archlinux.org/packages/xtables-geoip-db/

Please vote up.

scott32 commented on 2014-04-25 08:15

Thanks to @unforgiven512. Patch incorporated and tested against 3.10.37-1-lts and 3.14.1-1-ARCH.

unforgiven512 commented on 2014-04-23 19:32

PKGBUILD modifications:
source=(dkms.conf
make.sh
http://download.sourceforge.net/project/xtables-addons/Xtables-addons/$pkgver/xtables-addons-$pkgver.tar.xz
linux-3.14-net_random-fix.patch)
sha512sums=('bb5e7eff3e402dc0561d917d67af540fb405b2a404dd16a3d553610c7197c4741a583007a97d0ca380b727dc45a818c29ec34996581e1e14dfe1657ee2d17d7a'
'd1e917ac3c15ea8a533686781f6989ef648786f7a6666d06739c96d37debdc44bd2449c332db6e30af0f655540d1df49d4f5b702da4731aa7d550204ac908333'
'650182a9078c2ce9b66a26cc0f6224e1a5fc09bb88a714b44c6d0be9fbb73f83a19ab98d085ac24f22ba564d8614d62507ff71d45c1f305f037734f23a842915'
'229de73f89e76d58ef970827e888e58c6b61fd910987c36f7b203cd1153b025abc970d7700d51b9eb4f636470b8ecceadaf8331485b3c6e0d4c671178db32b7e')

optdepends=('perl-text-csv-xs: required for building GeoIP database')

prepare() {
cd "${srcdir}/xtables-addons-${pkgver}"
patch -p2 -i ../linux-3.14-net_random-fix.patch
}

PATCH:
------
diff -ur old/xtables-addons-2.4/extensions/xt_CHAOS.c new/xtables-addons-2.4/extensions/xt_CHAOS.c
--- old/xtables-addons-2.4/extensions/xt_CHAOS.c 2014-01-09 04:37:52.000000000 -0500
+++ new/xtables-addons-2.4/extensions/xt_CHAOS.c 2014-04-23 15:06:34.335470933 -0400
@@ -68,7 +68,7 @@
ret = xm_tcp->match(skb, &local_par);
hotdrop = local_par.hotdrop;
}
- if (!ret || hotdrop || (unsigned int)net_random() > delude_percentage)
+ if (!ret || hotdrop || (unsigned int)prandom_u32() > delude_percentage)
return;

destiny = (info->variant == XTCHAOS_TARPIT) ? xt_tarpit : xt_delude;
@@ -98,7 +98,7 @@
const struct xt_chaos_tginfo *info = par->targinfo;
const struct iphdr *iph = ip_hdr(skb);

- if ((unsigned int)net_random() <= reject_percentage) {
+ if ((unsigned int)prandom_u32() <= reject_percentage) {
struct xt_action_param local_par;
local_par.in = par->in;
local_par.out = par->out;
diff -ur old/xtables-addons-2.4/extensions/xt_TARPIT.c new/xtables-addons-2.4/extensions/xt_TARPIT.c
--- old/xtables-addons-2.4/extensions/xt_TARPIT.c 2014-01-09 04:37:52.000000000 -0500
+++ new/xtables-addons-2.4/extensions/xt_TARPIT.c 2014-04-23 15:09:04.827092373 -0400
@@ -107,8 +107,8 @@
tcph->syn = true;
tcph->ack = true;
tcph->window = oth->window &
- ((net_random() & 0x1f) - 0xf);
- tcph->seq = htonl(net_random() & ~oth->seq);
+ ((prandom_u32() & 0x1f) - 0xf);
+ tcph->seq = htonl(prandom_u32() & ~oth->seq);
tcph->ack_seq = htonl(ntohl(oth->seq) + oth->syn);
}

@@ -117,7 +117,7 @@
tcph->syn = false;
tcph->ack = true;
tcph->window = oth->window &
- ((net_random() & 0x1f) - 0xf);
+ ((prandom_u32() & 0x1f) - 0xf);
tcph->ack_seq = payload > 100 ?
htonl(ntohl(oth->seq) + payload) :
oth->seq;

scott32 commented on 2014-01-15 16:20

Upstream version bump to 2.4. Added pkg-config as dependency.

BeepDog commented on 2014-01-15 15:15

Needs a dependency on pkg-config

scott32 commented on 2013-06-19 08:09

Upstream version bump to 2.3.

BeepDog commented on 2013-06-15 04:43

pkg-build is also needed to build xtables-addons

scott32 commented on 2013-06-03 19:18

Update to comply with /usr/sbin -> /usr/bin transition.

scott32 commented on 2013-05-20 09:13

This package replaces xtables-addons-multikernel. Tested against current (3.9.2-1-ARCH) kernel on both x86_64 and i686 architectures. NOTE: xtables-addons >= 2.0 only support kernels >= 3.7