manusfreedom:

I confirm, I am unable to compile with IPTABLES_NFTABLES, linked to commit 98e43b1.
And now rules with "-m state --state NEW" does not work.

Edit: Sorry "-m state --state NEW" is now "-m conntrack --ctstate NEW"

jow-:

"-m state --state NEW" must be replaced with "-m conntrack --ctstate NEW"

manusfreedom:

Yes like I added in my edit.
But the initial problem persist, we are unable to compile with IPTABLES_NFTABLES.

Xorkle:

Hi!

Exact same issue here. :(

davidkongri:

Hi, I happen exactly the same, even reversing the commit 5e2d15b fails to compile.

flipreverse:

Hi Folks,

I've been able to fix that issue. At least for my scenario.
Due to some reasons, the LEDE iptables maintainer decided to turn various auxiliary libraries, e.g., libext, into shared libraries (instead of a static one). To do so, they've written a patch to modify the appropriate makefile.am file. Those changes can be found in ./package/network/utils/iptables/patches/600-shared-libext.patch.
However, the iptables maintainter more or less recently added another target called xtables_compat_multi. Guess what, that target relies on static libraries instead of shared libraries as the origin iptables project used to do.
To overcome that issue, I've added the following lines to the aforementioned patch file:

nftables compatibility layer

if ENABLE_NFTABLES
BUILT_SOURCES += xtables-config-parser.h
xtables_compat_multi_SOURCES = xtables-compat-multi.c iptables-xml.c
xtables_compat_multi_CFLAGS = ${AM_CFLAGS}
-xtables_compat_multi_LDADD = ../extensions/libext.a ../extensions/libext_ebt.a
+xtables_compat_multi_LDADD =
+xtables_compat_multi_LDFLAGS = -L../extensions/ -liptext -liptext_ebt

Et voilá, the issue is fixed.
Can one of the maintainers please confirm my fix?

Regards,
Alex

davidkongri:

Hi Alex, I have modified the patch 600-shared-libext.patch with your modifications, but I still have the same compilation error. Could you upload your 600-shared-libext.patch file with your modifications?

davidkongri:

In my case the error that throws me when compiling is the following one: " *** No rule to make target '../extensions/libext.a', needed by 'xtables-compat-multi'. "

blmink:

Hi, All.

Please see attached patch. It helps in my case.