Xtables-addons

$ gcc-config -l
 [1] x86_64-pc-linux-gnu-4.5.3 *

CONFIG_NETFILTER_XTABLES=m
#
# Xtables combined modules
#
CONFIG_NETFILTER_XT_MARK=m
CONFIG_NETFILTER_XT_CONNMARK=m
CONFIG_NETFILTER_XT_SET=m
#
# Xtables targets
#
CONFIG_NETFILTER_XT_TARGET_AUDIT=m
CONFIG_NETFILTER_XT_TARGET_CHECKSUM=m
CONFIG_NETFILTER_XT_TARGET_CLASSIFY=m
CONFIG_NETFILTER_XT_TARGET_CONNMARK=m
CONFIG_NETFILTER_XT_TARGET_CONNSECMARK=m
CONFIG_NETFILTER_XT_TARGET_CT=m
CONFIG_NETFILTER_XT_TARGET_DSCP=m
CONFIG_NETFILTER_XT_TARGET_HL=m
CONFIG_NETFILTER_XT_TARGET_IDLETIMER=m
CONFIG_NETFILTER_XT_TARGET_LED=m
CONFIG_NETFILTER_XT_TARGET_MARK=m
CONFIG_NETFILTER_XT_TARGET_NFLOG=m
CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m
CONFIG_NETFILTER_XT_TARGET_NOTRACK=m
CONFIG_NETFILTER_XT_TARGET_RATEEST=m
CONFIG_NETFILTER_XT_TARGET_TEE=m
CONFIG_NETFILTER_XT_TARGET_TPROXY=m
CONFIG_NETFILTER_XT_TARGET_TRACE=m
CONFIG_NETFILTER_XT_TARGET_SECMARK=m
CONFIG_NETFILTER_XT_TARGET_TCPMSS=m
CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m
#
# Xtables matches
#
CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m
CONFIG_NETFILTER_XT_MATCH_CLUSTER=m
CONFIG_NETFILTER_XT_MATCH_COMMENT=m
CONFIG_NETFILTER_XT_MATCH_CONNBYTES=m
CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=m
CONFIG_NETFILTER_XT_MATCH_CONNMARK=m
CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m
CONFIG_NETFILTER_XT_MATCH_CPU=m
CONFIG_NETFILTER_XT_MATCH_DCCP=m
CONFIG_NETFILTER_XT_MATCH_DEVGROUP=m
CONFIG_NETFILTER_XT_MATCH_DSCP=m
CONFIG_NETFILTER_XT_MATCH_ESP=m
CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=m
CONFIG_NETFILTER_XT_MATCH_HELPER=m
CONFIG_NETFILTER_XT_MATCH_HL=m
CONFIG_NETFILTER_XT_MATCH_IPRANGE=m
CONFIG_NETFILTER_XT_MATCH_IPVS=m
CONFIG_NETFILTER_XT_MATCH_LENGTH=m
CONFIG_NETFILTER_XT_MATCH_LIMIT=m
CONFIG_NETFILTER_XT_MATCH_MAC=m
CONFIG_NETFILTER_XT_MATCH_MARK=m
CONFIG_NETFILTER_XT_MATCH_MULTIPORT=m
CONFIG_NETFILTER_XT_MATCH_OSF=m
CONFIG_NETFILTER_XT_MATCH_OWNER=m
CONFIG_NETFILTER_XT_MATCH_POLICY=m
CONFIG_NETFILTER_XT_MATCH_PHYSDEV=m
CONFIG_NETFILTER_XT_MATCH_PKTTYPE=m
CONFIG_NETFILTER_XT_MATCH_QUOTA=m
CONFIG_NETFILTER_XT_MATCH_RATEEST=m
CONFIG_NETFILTER_XT_MATCH_REALM=m
CONFIG_NETFILTER_XT_MATCH_RECENT=m
CONFIG_NETFILTER_XT_MATCH_SCTP=m
CONFIG_NETFILTER_XT_MATCH_SOCKET=m
CONFIG_NETFILTER_XT_MATCH_STATE=m
CONFIG_NETFILTER_XT_MATCH_STATISTIC=m
CONFIG_NETFILTER_XT_MATCH_STRING=m
CONFIG_NETFILTER_XT_MATCH_TCPMSS=m
CONFIG_NETFILTER_XT_MATCH_TIME=m
CONFIG_NETFILTER_XT_MATCH_U32=m

/var/tmp/portage/net-firewall/xtables-addons-1.39/work/xtables-addons-1.39/extensions/compat_xtables.c:403:1: предупреждение: data definition has no type or storage class
/var/tmp/portage/net-firewall/xtables-addons-1.39/work/xtables-addons-1.39/extensions/compat_xtables.c:403:1: предупреждение: type defaults to ‘int’ in declaration of ‘EXPORT_SYMBOL_GPL’
/var/tmp/portage/net-firewall/xtables-addons-1.39/work/xtables-addons-1.39/extensions/compat_xtables.c:403:1: предупреждение: в декларации функции указаны имена параметров без типов
/var/tmp/portage/net-firewall/xtables-addons-1.39/work/xtables-addons-1.39/extensions/compat_xtables.c:420:1: предупреждение: data definition has no type or storage class
/var/tmp/portage/net-firewall/xtables-addons-1.39/work/xtables-addons-1.39/extensions/compat_xtables.c:420:1: предупреждение: type defaults to ‘int’ in declaration of ‘EXPORT_SYMBOL_GPL’
/var/tmp/portage/net-firewall/xtables-addons-1.39/work/xtables-addons-1.39/extensions/compat_xtables.c:420:1: предупреждение: в декларации функции указаны имена параметров без типов
/var/tmp/portage/net-firewall/xtables-addons-1.39/work/xtables-addons-1.39/extensions/compat_xtables.c:427:1: предупреждение: data definition has no type or storage class

$ USE="-modules" emerge -av xtables-addons

[D] sys-kernel/gentoo-sources
     Available versions:  
    (2.6.32-r29)    2.6.32-r29!b!s
    (2.6.32-r39)    ~2.6.32-r39!b!s
    (2.6.32-r40)    ~2.6.32-r40!b!s
    (2.6.32-r41)    ~2.6.32-r41!b!s
    (3.0.17-r2)    3.0.17-r2!b!s
    (3.0.20)    ~3.0.20!b!s
    (3.0.22)    ~3.0.22!b!s
    (3.1.10-r1)    3.1.10-r1!b!s{tbz2}
    (3.2.1-r2)    [m]3.2.1-r2!b!s{tbz2}
    (3.2.2)    [m]~3.2.2!b!s
    (3.2.5)    [m]~3.2.5!b!s
    (3.2.6)    [m]~3.2.6!b!s
    (3.2.9)    [m]~3.2.9!b!s{tbz2}
    {build deblob symlink}
     Installed versions:  3.1.10-r1(3.1.10-r1)!b!s{tbz2}(08:14:34 03.03.2012)(-build -deblob -symlink) 3.2.9(3.2.9)!b!s{tbz2}(21:21:48 02.03.2012)(-build -deblob -symlink)
     Homepage:            http://dev.gentoo.org/~mpagano/genpatches
     Description:         Full sources including the Gentoo patchset for the 3.2 kernel tree

ipables -I INPUT 1 -i eth0 -m psd -j REJECT

$ nmap 192.168.0.2
Starting Nmap 5.21 ( http://nmap.org ) at 2012-03-03 17:45 MSK
Nmap scan report for 192.168.0.2
Host is up (0.00019s latency).
Not shown: 999 filtered ports
PORT   STATE SERVICE
80/tcp open  http
Nmap done: 1 IP address (1 host up) scanned in 5.98 seconds

$ nmap 192.168.0.2
Starting Nmap 5.21 ( http://nmap.org ) at 2012-03-03 17:46 MSK
Stats: 0:05:06 elapsed; 0 hosts completed (1 up), 1 undergoing Connect Scan
Connect Scan Timing: About 17.17% done; ETC: 18:16 (0:24:31 remaining)