mpa:

====Affected package====
''libxtables_1.6.2-2_${arch}.ipk''

====Affected architectures, maybe not exclusive:====

aarch64_cortex-a53
arc_arc700
arm_arm1176jzf-s_vfp
arm_arm926ej-s
arm_cortex-a5_neon-vfpv4
arm_cortex-a5_vfpv4
arm_cortex-a7_neon-vfpv4
armeb_xscale
mips_24kc
mipsel_mips32
powerpc_8540

''mipsel_mips32'' was used for testing this issue.

====Issue description====
The ''iptables'' command as shipped in ''*.ipk'' packages does not support the ''FLOWOFFLOAD'' target.
This target should be contained in the ''libiptext.so'' library, but is not there.
I can only reproduce this issue with the provided ''ipk'''s, not by building them myself.
Complete firmware images are not affected either.

====Steps to reproduce (alternatives)====

• use existing firmware image
  • install trunk firmware image
  • reinstall the ''libxtables'' package from an ''ipk''
  • ''iptables -A FORWARD -j FLOWOFFLOAD''
  • error output: ''iptables v1.6.2: Couldn't load target `FLOWOFFLOAD':No such file or directory''
• imagebuilder
  • use the imagebuilder to create a firmware image
  • install it
  • ''iptables -A FORWARD -j FLOWOFFLOAD''
  • error output as above
• binary inspection
  • download [[https://downloads.openwrt.org/snapshots/packages/mipsel_mips32/base/libxtables_1.6.2-2_mipsel_mips32.ipk|libxtables_1.6.2-2_mipsel_mips32.ipk]]
  • extract files: ''tar xzf libxtables_1.6.2-2_mipsel_mips32.ipk ./data.tar.gz -O | tar xzv''
  • ''strings usr/lib/libiptext.so | grep FLOWOFFLOAD''
  • error case: no output
  • good output would be:
libxt_FLOWOFFLOAD_init
FLOWOFFLOAD
FLOWOFFLOAD target options:
FLOWOFFLOAD

====Previous attempts to fix the issue====
I submitted a [[https://patchwork.ozlabs.org/patch/928899/|patch]] to increment the ''iptables'' package version, which was accepted into master as commit ''c84ef1f''. As a result, the buildbots rebuilt the packages with the new version, but still containing the same ''libiptext.so'' binary without ''FLOWOFFLOAD'' support.