Arch Linux

Out of date. Please also move package to AUR4.

After upgrade to kernel 4.0.1 it gives error.

sh make.sh make 4.0.1-1-ARCH.....................
Error! Build of xt_ECHO.ko failed for: 4.0.1-1-ARCH (x86_64)
Consult the make.log in the build directory

But in make.log I can not see any error.

Last lines of make.log give no hint.

for ext in ./extensions/ACCOUNT/libxt_ACCOUNT.man ./extensions/libxt_CHAOS.man ./extensions/libxt_DELUDE.man ./extensions/libxt_DHCPMAC.man ./extensions/libxt_DNETMAP.man ./extensions/libxt_ECHO.man ./extensions/libxt_IPMARK.man ./extensions/libxt_LOGMARK.man ./extensions/libxt_SYSRQ.man ./extensions/libxt_TARPIT.man; do name="${ext%.man}"; name="${name##*/libxt_}"; if [ -f "$ext" ]; then echo ".SS $name"; cat "$ext" || exit $?; continue; fi; done >targets.man;
sed -e '/@MATCHES@/ r matches.man' -e '/@TARGET@/ r targets.man' xtables-addons.8.in >xtables-addons.8;
make[3]: Leaving directory '/var/lib/dkms/xtables-addons/2.6-1/build'
make[2]: Leaving directory '/var/lib/dkms/xtables-addons/2.6-1/build'
make[1]: Leaving directory '/var/lib/dkms/xtables-addons/2.6-1/build'

Upstream version bump to 2.6

Upstream version bump to 2.5

Hello,

anyone willing to have PKGBUILD to build the database which can be used by iptables geoip module here it is:

I named it xtables-geoip-db

https://aur.archlinux.org/packages/xtables-geoip-db/

Please vote up.

Thanks to @unforgiven512. Patch incorporated and tested against 3.10.37-1-lts and 3.14.1-1-ARCH.

PKGBUILD modifications:
source=(dkms.conf
make.sh
http://download.sourceforge.net/project/xtables-addons/Xtables-addons/$pkgver/xtables-addons-$pkgver.tar.xz
linux-3.14-net_random-fix.patch)
sha512sums=('bb5e7eff3e402dc0561d917d67af540fb405b2a404dd16a3d553610c7197c4741a583007a97d0ca380b727dc45a818c29ec34996581e1e14dfe1657ee2d17d7a'
'd1e917ac3c15ea8a533686781f6989ef648786f7a6666d06739c96d37debdc44bd2449c332db6e30af0f655540d1df49d4f5b702da4731aa7d550204ac908333'
'650182a9078c2ce9b66a26cc0f6224e1a5fc09bb88a714b44c6d0be9fbb73f83a19ab98d085ac24f22ba564d8614d62507ff71d45c1f305f037734f23a842915'
'229de73f89e76d58ef970827e888e58c6b61fd910987c36f7b203cd1153b025abc970d7700d51b9eb4f636470b8ecceadaf8331485b3c6e0d4c671178db32b7e')

optdepends=('perl-text-csv-xs: required for building GeoIP database')

prepare() {
cd "${srcdir}/xtables-addons-${pkgver}"
patch -p2 -i ../linux-3.14-net_random-fix.patch
}

PATCH:
------
diff -ur old/xtables-addons-2.4/extensions/xt_CHAOS.c new/xtables-addons-2.4/extensions/xt_CHAOS.c
--- old/xtables-addons-2.4/extensions/xt_CHAOS.c 2014-01-09 04:37:52.000000000 -0500
+++ new/xtables-addons-2.4/extensions/xt_CHAOS.c 2014-04-23 15:06:34.335470933 -0400
@@ -68,7 +68,7 @@
ret = xm_tcp->match(skb, &local_par);
hotdrop = local_par.hotdrop;
}
- if (!ret || hotdrop || (unsigned int)net_random() > delude_percentage)
+ if (!ret || hotdrop || (unsigned int)prandom_u32() > delude_percentage)
return;

destiny = (info->variant == XTCHAOS_TARPIT) ? xt_tarpit : xt_delude;
@@ -98,7 +98,7 @@
const struct xt_chaos_tginfo *info = par->targinfo;
const struct iphdr *iph = ip_hdr(skb);

- if ((unsigned int)net_random() <= reject_percentage) {
+ if ((unsigned int)prandom_u32() <= reject_percentage) {
struct xt_action_param local_par;
local_par.in = par->in;
local_par.out = par->out;
diff -ur old/xtables-addons-2.4/extensions/xt_TARPIT.c new/xtables-addons-2.4/extensions/xt_TARPIT.c
--- old/xtables-addons-2.4/extensions/xt_TARPIT.c 2014-01-09 04:37:52.000000000 -0500
+++ new/xtables-addons-2.4/extensions/xt_TARPIT.c 2014-04-23 15:09:04.827092373 -0400
@@ -107,8 +107,8 @@
tcph->syn = true;
tcph->ack = true;
tcph->window = oth->window &
- ((net_random() & 0x1f) - 0xf);
- tcph->seq = htonl(net_random() & ~oth->seq);
+ ((prandom_u32() & 0x1f) - 0xf);
+ tcph->seq = htonl(prandom_u32() & ~oth->seq);
tcph->ack_seq = htonl(ntohl(oth->seq) + oth->syn);
}

@@ -117,7 +117,7 @@
tcph->syn = false;
tcph->ack = true;
tcph->window = oth->window &
- ((net_random() & 0x1f) - 0xf);
+ ((prandom_u32() & 0x1f) - 0xf);
tcph->ack_seq = payload > 100 ?
htonl(ntohl(oth->seq) + payload) :
oth->seq;

Upstream version bump to 2.4. Added pkg-config as dependency.

Needs a dependency on pkg-config

Upstream version bump to 2.3.

pkg-build is also needed to build xtables-addons

Update to comply with /usr/sbin -> /usr/bin transition.

This package replaces xtables-addons-multikernel. Tested against current (3.9.2-1-ARCH) kernel on both x86_64 and i686 architectures. NOTE: xtables-addons >= 2.0 only support kernels >= 3.7