Nicola, iptables is complaining because it can't locate the userspace companion to your netfilter module. The userspace companion tells iptables which kernel module to load and parses command line options before they are passed to the kernel module. The module_install target takes care of the kernel module but you also need a userspace helper installed to /lib/xtables. If building standalone (as opposed to using the Xtables-addons framework) you could use a maekfile rule like: libs_install: cp -f libxt_ipaddr.so /lib/xtables Regards, Justin Kamerman On 10-08-30 10:25 AM, Nicola Padovano wrote: > -s 127.0.0.1 -p icmp -j DROP > > but i don't know how create this new target... > > I've modified the netfilter makefile e Kbuild file (in net/netfilter) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html