Package Details: xtables-addons-dkms 2.8-1

Git Clone URL: https://aur.archlinux.org/xtables-addons-dkms.git (read-only)
Package Base: xtables-addons-dkms
Description: Successor to patch-o-matic(-ng). Contains extensions that were not accepted in the main Xtables. DKMS flavor for kernels >= 3.7.
Upstream URL: http://xtables-addons.sourceforge.net/
Keywords: iptables kernel-modules xtables
Licenses: GPL2
Conflicts: xtables-addons, xtables-addons-git, xtables-addons-multikernel
Replaces: xtables-addons, xtables-addons-git, xtables-addons-multikernel
Submitter: scott32
Maintainer: jamesan (unforgiven512)
Last Packager: unforgiven512
Votes: 8
Popularity: 0.527947
First Submitted: 2013-05-20 09:10
Last Updated: 2015-10-02 19:05

Latest Comments

isiachi commented on 2016-07-28 11:13

Can you please update or disown?

amish commented on 2015-12-13 13:19

2.10 is current version and package is flagged from more than a month!

isiachi commented on 2015-09-09 14:28

2.8 is out

amish commented on 2015-08-13 11:45

Script in this package depends on gzip / unzip and wget.

So they should possibly added in dependencies.

unforgiven512 commented on 2015-07-26 09:37

It's alive!!

Did some changes to get this building again -- namely, updating to 2.7, and disabling the build of xt_ECHO.

Glad to have it back (as it reduces the logspam on my server ;) -- and I'm sure does the same for many others)

amish commented on 2015-05-02 03:16

After upgrade to kernel 4.0.1 it gives error.

sh make.sh make 4.0.1-1-ARCH.....................
Error! Build of xt_ECHO.ko failed for: 4.0.1-1-ARCH (x86_64)
Consult the make.log in the build directory

But in make.log I can not see any error.

Last lines of make.log give no hint.

for ext in ./extensions/ACCOUNT/libxt_ACCOUNT.man ./extensions/libxt_CHAOS.man ./extensions/libxt_DELUDE.man ./extensions/libxt_DHCPMAC.man ./extensions/libxt_DNETMAP.man ./extensions/libxt_ECHO.man ./extensions/libxt_IPMARK.man ./extensions/libxt_LOGMARK.man ./extensions/libxt_SYSRQ.man ./extensions/libxt_TARPIT.man; do name="${ext%.man}"; name="${name##*/libxt_}"; if [ -f "$ext" ]; then echo ".SS $name"; cat "$ext" || exit $?; continue; fi; done >targets.man;
sed -e '/@MATCHES@/ r matches.man' -e '/@TARGET@/ r targets.man' xtables-addons.8.in >xtables-addons.8;
make[3]: Leaving directory '/var/lib/dkms/xtables-addons/2.6-1/build'
make[2]: Leaving directory '/var/lib/dkms/xtables-addons/2.6-1/build'
make[1]: Leaving directory '/var/lib/dkms/xtables-addons/2.6-1/build'

scott32 commented on 2014-10-06 19:49

Upstream version bump to 2.6

scott32 commented on 2014-06-19 06:36

Upstream version bump to 2.5

amish commented on 2014-06-19 04:15

version 2.5 with support for kernel 3.15 is now available

http://sourceforge.net/p/xtables-addons/xtables-addons/ci/431062c6ec54f0931d8a322ed6272e98897bc73c/

amish commented on 2014-06-19 04:13

This is no more compiling for kernel 3.15.1-1

Logs from: /var/lib/dkms/xtables-addons/2.4-2/build/make.log

/var/lib/dkms/xtables-addons/2.4-2/build/extensions/pknock/xt_pknock.c: In function ‘msg_to_userspace_nl’:
/var/lib/dkms/xtables-addons/2.4-2/build/extensions/pknock/xt_pknock.c:704:2: error: too few arguments to function ‘cn_netlink_send’
cn_netlink_send(m, multicast_group, GFP_ATOMIC);
^
In file included from /var/lib/dkms/xtables-addons/2.4-2/build/extensions/pknock/xt_pknock.c:29:0:
include/linux/connector.h:74:5: note: declared here
int cn_netlink_send(struct cn_msg *msg, u32 portid, u32 group, gfp_t gfp_mask);
^
scripts/Makefile.build:324: recipe for target '/var/lib/dkms/xtables-addons/2.4-2/build/extensions/pknock/xt_pknock.o' failed

amish commented on 2014-05-04 13:34

Sorry flagged out-of-date by mistake. Cannot undo it.

amish commented on 2014-05-04 12:30

Hello,

anyone willing to have PKGBUILD to build the database which can be used by iptables geoip module here it is:

I named it xtables-geoip-db

https://aur.archlinux.org/packages/xtables-geoip-db/

Please vote up.

scott32 commented on 2014-04-25 08:15

Thanks to @unforgiven512. Patch incorporated and tested against 3.10.37-1-lts and 3.14.1-1-ARCH.

unforgiven512 commented on 2014-04-23 19:32

PKGBUILD modifications:
source=(dkms.conf
make.sh
http://download.sourceforge.net/project/xtables-addons/Xtables-addons/$pkgver/xtables-addons-$pkgver.tar.xz
linux-3.14-net_random-fix.patch)
sha512sums=('bb5e7eff3e402dc0561d917d67af540fb405b2a404dd16a3d553610c7197c4741a583007a97d0ca380b727dc45a818c29ec34996581e1e14dfe1657ee2d17d7a'
'd1e917ac3c15ea8a533686781f6989ef648786f7a6666d06739c96d37debdc44bd2449c332db6e30af0f655540d1df49d4f5b702da4731aa7d550204ac908333'
'650182a9078c2ce9b66a26cc0f6224e1a5fc09bb88a714b44c6d0be9fbb73f83a19ab98d085ac24f22ba564d8614d62507ff71d45c1f305f037734f23a842915'
'229de73f89e76d58ef970827e888e58c6b61fd910987c36f7b203cd1153b025abc970d7700d51b9eb4f636470b8ecceadaf8331485b3c6e0d4c671178db32b7e')

optdepends=('perl-text-csv-xs: required for building GeoIP database')

prepare() {
cd "${srcdir}/xtables-addons-${pkgver}"
patch -p2 -i ../linux-3.14-net_random-fix.patch
}

PATCH:
------
diff -ur old/xtables-addons-2.4/extensions/xt_CHAOS.c new/xtables-addons-2.4/extensions/xt_CHAOS.c
--- old/xtables-addons-2.4/extensions/xt_CHAOS.c 2014-01-09 04:37:52.000000000 -0500
+++ new/xtables-addons-2.4/extensions/xt_CHAOS.c 2014-04-23 15:06:34.335470933 -0400
@@ -68,7 +68,7 @@
ret = xm_tcp->match(skb, &local_par);
hotdrop = local_par.hotdrop;
}
- if (!ret || hotdrop || (unsigned int)net_random() > delude_percentage)
+ if (!ret || hotdrop || (unsigned int)prandom_u32() > delude_percentage)
return;

destiny = (info->variant == XTCHAOS_TARPIT) ? xt_tarpit : xt_delude;
@@ -98,7 +98,7 @@
const struct xt_chaos_tginfo *info = par->targinfo;
const struct iphdr *iph = ip_hdr(skb);

- if ((unsigned int)net_random() <= reject_percentage) {
+ if ((unsigned int)prandom_u32() <= reject_percentage) {
struct xt_action_param local_par;
local_par.in = par->in;
local_par.out = par->out;
diff -ur old/xtables-addons-2.4/extensions/xt_TARPIT.c new/xtables-addons-2.4/extensions/xt_TARPIT.c
--- old/xtables-addons-2.4/extensions/xt_TARPIT.c 2014-01-09 04:37:52.000000000 -0500
+++ new/xtables-addons-2.4/extensions/xt_TARPIT.c 2014-04-23 15:09:04.827092373 -0400
@@ -107,8 +107,8 @@
tcph->syn = true;
tcph->ack = true;
tcph->window = oth->window &
- ((net_random() & 0x1f) - 0xf);
- tcph->seq = htonl(net_random() & ~oth->seq);
+ ((prandom_u32() & 0x1f) - 0xf);
+ tcph->seq = htonl(prandom_u32() & ~oth->seq);
tcph->ack_seq = htonl(ntohl(oth->seq) + oth->syn);
}

@@ -117,7 +117,7 @@
tcph->syn = false;
tcph->ack = true;
tcph->window = oth->window &
- ((net_random() & 0x1f) - 0xf);
+ ((prandom_u32() & 0x1f) - 0xf);
tcph->ack_seq = payload > 100 ?
htonl(ntohl(oth->seq) + payload) :
oth->seq;

scott32 commented on 2014-01-15 16:20

Upstream version bump to 2.4. Added pkg-config as dependency.

BeepDog commented on 2014-01-15 15:15

Needs a dependency on pkg-config

scott32 commented on 2013-06-19 08:09

Upstream version bump to 2.3.

BeepDog commented on 2013-06-15 04:43

pkg-build is also needed to build xtables-addons

scott32 commented on 2013-06-03 19:18

Update to comply with /usr/sbin -> /usr/bin transition.

scott32 commented on 2013-05-20 09:13

This package replaces xtables-addons-multikernel. Tested against current (3.9.2-1-ARCH) kernel on both x86_64 and i686 architectures. NOTE: xtables-addons >= 2.0 only support kernels >= 3.7