Package Details: xtables-addons-dkms 3.0-1

Git Clone URL: (read-only)
Package Base: xtables-addons-dkms
Description: Successor to patch-o-matic(-ng). Contains extensions that were not accepted in the main Xtables. DKMS flavor for kernels >= 4.15.
Upstream URL:
Keywords: iptables kernel-modules xtables
Licenses: GPL2
Conflicts: xtables-addons, xtables-addons-git, xtables-addons-multikernel
Replaces: xtables-addons, xtables-addons-git, xtables-addons-multikernel
Submitter: scott32
Maintainer: amish
Last Packager: amish
Votes: 11
Popularity: 0.067575
First Submitted: 2013-05-20 09:10
Last Updated: 2018-03-05 11:59

Dependencies (3)

Required by (1)

Sources (2)

Pinned Comments

amish commented on 2018-03-05 12:09

Package updated to version 3.0. Please note that upstream dropped support for kernel versions <= 4.14 which means that even latest LTS kernel will not work with this update. Use version 2.14 if you want support for LTS kernel. (which supports both LTS as well as normal/current kernel)

Latest Comments

amish commented on 2018-03-05 12:09

Package updated to version 3.0. Please note that upstream dropped support for kernel versions <= 4.14 which means that even latest LTS kernel will not work with this update. Use version 2.14 if you want support for LTS kernel. (which supports both LTS as well as normal/current kernel)

IdleGandalf commented on 2018-03-05 09:25

@amish sure, you can't have both installed at the same time, for that to work you would have to split the command tools into a separate package as well. Obviously that's a little much.

The easiest way to maintain backwards compatibility is to revert the patch(es) that removed build support for older kernels and create a patch for 3.0, but that would mean you have to maintain these build cases, since upstream won't do it. Do you really think that's the best approach?

amish commented on 2018-03-05 09:18

@IdleGandalf - its not so easy as it looks. Package has two parts. 1) Binary package - common for both; normal linux and LTS linux 2) Source package - which is used by dkms to build modules for each kernel

So I can not create separate lts AUR package as version 3.0 and 2.14 can not co-exist. (without lots of hacks) as common binaries for both will no more remain common and conflict with each other.

Since I use both lts as well as normal kernel I am looking to create a patch which will allow version 3.0 to work for both. I will try to create one this week and if I fail to do that I will update the package anyway by dropping support for lts.

IdleGandalf commented on 2018-03-05 08:31

@amish Well, everyone can go back to a previous version of this package via git, I see no reason not to update. Another solution would be a separate package for 2.14 which provides lts support, something like xtables-addons-lts-dkms.

amish commented on 2018-03-05 08:22

Package is out of date but problem is that; new version 3.0 no more supports current LTS kernel. i.e. 4.14 and earlier. So dkms module compiles only for normal kernel. I will wait for a week to find proper solution otherwise I will update it i.e. scrapping support for lts.

IdleGandalf commented on 2018-02-07 13:04

This doesn't build with linux-4.15. I generated a patch from HEAD if you are interested in applying it until a new release.

Besides that the .install is not needed anymore since pacman comes with all hooks needed for dkms packages to work.

amish commented on 2018-01-24 09:37

I have taken over the package but I am currently occupied with few things.. So will update it within a week. Thanks.

amish commented on 2017-07-04 02:54

source =

may be changed to use ${pkgver} instead of 2.13

So that it does not require changes in future.

amish commented on 2017-02-17 03:57

Above PKGBUILD gives package with referece to srcdir

==> WARNING: Package contains reference to $srcdir

Dont know where is the issue but need to be corrected.

Lenny commented on 2017-02-16 10:44

Version bump

isiachi commented on 2016-07-28 11:13

Can you please update or disown?

amish commented on 2015-12-13 13:19

2.10 is current version and package is flagged from more than a month!

isiachi commented on 2015-09-09 14:28

2.8 is out

amish commented on 2015-08-13 11:45

Script in this package depends on gzip / unzip and wget.

So they should possibly added in dependencies.

unforgiven512 commented on 2015-07-26 09:37

It's alive!!

Did some changes to get this building again -- namely, updating to 2.7, and disabling the build of xt_ECHO.

Glad to have it back (as it reduces the logspam on my server ;) -- and I'm sure does the same for many others)

amish commented on 2015-05-02 03:16

After upgrade to kernel 4.0.1 it gives error.

sh make 4.0.1-1-ARCH.....................
Error! Build of xt_ECHO.ko failed for: 4.0.1-1-ARCH (x86_64)
Consult the make.log in the build directory

But in make.log I can not see any error.

Last lines of make.log give no hint.

for ext in ./extensions/ACCOUNT/ ./extensions/ ./extensions/ ./extensions/ ./extensions/ ./extensions/ ./extensions/ ./extensions/ ./extensions/ ./extensions/; do name="${}"; name="${name##*/libxt_}"; if [ -f "$ext" ]; then echo ".SS $name"; cat "$ext" || exit $?; continue; fi; done >;
sed -e '/@MATCHES@/ r' -e '/@TARGET@/ r' >xtables-addons.8;
make[3]: Leaving directory '/var/lib/dkms/xtables-addons/2.6-1/build'
make[2]: Leaving directory '/var/lib/dkms/xtables-addons/2.6-1/build'
make[1]: Leaving directory '/var/lib/dkms/xtables-addons/2.6-1/build'

scott32 commented on 2014-10-06 19:49

Upstream version bump to 2.6

scott32 commented on 2014-06-19 06:36

Upstream version bump to 2.5

amish commented on 2014-06-19 04:15

version 2.5 with support for kernel 3.15 is now available

amish commented on 2014-06-19 04:13

This is no more compiling for kernel 3.15.1-1

Logs from: /var/lib/dkms/xtables-addons/2.4-2/build/make.log

/var/lib/dkms/xtables-addons/2.4-2/build/extensions/pknock/xt_pknock.c: In function ‘msg_to_userspace_nl’:
/var/lib/dkms/xtables-addons/2.4-2/build/extensions/pknock/xt_pknock.c:704:2: error: too few arguments to function ‘cn_netlink_send’
cn_netlink_send(m, multicast_group, GFP_ATOMIC);
In file included from /var/lib/dkms/xtables-addons/2.4-2/build/extensions/pknock/xt_pknock.c:29:0:
include/linux/connector.h:74:5: note: declared here
int cn_netlink_send(struct cn_msg *msg, u32 portid, u32 group, gfp_t gfp_mask);
scripts/ recipe for target '/var/lib/dkms/xtables-addons/2.4-2/build/extensions/pknock/xt_pknock.o' failed

amish commented on 2014-05-04 13:34

Sorry flagged out-of-date by mistake. Cannot undo it.

amish commented on 2014-05-04 12:30


anyone willing to have PKGBUILD to build the database which can be used by iptables geoip module here it is:

I named it xtables-geoip-db

Please vote up.

scott32 commented on 2014-04-25 08:15

Thanks to @unforgiven512. Patch incorporated and tested against 3.10.37-1-lts and 3.14.1-1-ARCH.

unforgiven512 commented on 2014-04-23 19:32

PKGBUILD modifications:

optdepends=('perl-text-csv-xs: required for building GeoIP database')

prepare() {
cd "${srcdir}/xtables-addons-${pkgver}"
patch -p2 -i ../linux-3.14-net_random-fix.patch

diff -ur old/xtables-addons-2.4/extensions/xt_CHAOS.c new/xtables-addons-2.4/extensions/xt_CHAOS.c
--- old/xtables-addons-2.4/extensions/xt_CHAOS.c 2014-01-09 04:37:52.000000000 -0500
+++ new/xtables-addons-2.4/extensions/xt_CHAOS.c 2014-04-23 15:06:34.335470933 -0400
@@ -68,7 +68,7 @@
ret = xm_tcp->match(skb, &local_par);
hotdrop = local_par.hotdrop;
- if (!ret || hotdrop || (unsigned int)net_random() > delude_percentage)
+ if (!ret || hotdrop || (unsigned int)prandom_u32() > delude_percentage)

destiny = (info->variant == XTCHAOS_TARPIT) ? xt_tarpit : xt_delude;
@@ -98,7 +98,7 @@
const struct xt_chaos_tginfo *info = par->targinfo;
const struct iphdr *iph = ip_hdr(skb);

- if ((unsigned int)net_random() <= reject_percentage) {
+ if ((unsigned int)prandom_u32() <= reject_percentage) {
struct xt_action_param local_par; = par->in;
local_par.out = par->out;
diff -ur old/xtables-addons-2.4/extensions/xt_TARPIT.c new/xtables-addons-2.4/extensions/xt_TARPIT.c
--- old/xtables-addons-2.4/extensions/xt_TARPIT.c 2014-01-09 04:37:52.000000000 -0500
+++ new/xtables-addons-2.4/extensions/xt_TARPIT.c 2014-04-23 15:09:04.827092373 -0400
@@ -107,8 +107,8 @@
tcph->syn = true;
tcph->ack = true;
tcph->window = oth->window &
- ((net_random() & 0x1f) - 0xf);
- tcph->seq = htonl(net_random() & ~oth->seq);
+ ((prandom_u32() & 0x1f) - 0xf);
+ tcph->seq = htonl(prandom_u32() & ~oth->seq);
tcph->ack_seq = htonl(ntohl(oth->seq) + oth->syn);

@@ -117,7 +117,7 @@
tcph->syn = false;
tcph->ack = true;
tcph->window = oth->window &
- ((net_random() & 0x1f) - 0xf);
+ ((prandom_u32() & 0x1f) - 0xf);
tcph->ack_seq = payload > 100 ?
htonl(ntohl(oth->seq) + payload) :

scott32 commented on 2014-01-15 16:20

Upstream version bump to 2.4. Added pkg-config as dependency.

BeepDog commented on 2014-01-15 15:15

Needs a dependency on pkg-config

scott32 commented on 2013-06-19 08:09

Upstream version bump to 2.3.

BeepDog commented on 2013-06-15 04:43

pkg-build is also needed to build xtables-addons

scott32 commented on 2013-06-03 19:18

Update to comply with /usr/sbin -> /usr/bin transition.

scott32 commented on 2013-05-20 09:13

This package replaces xtables-addons-multikernel. Tested against current (3.9.2-1-ARCH) kernel on both x86_64 and i686 architectures. NOTE: xtables-addons >= 2.0 only support kernels >= 3.7