patch-o-matic-ng

If you are looking for a system to apply netfilter-related patches to the latest kernel and/or iptables sources, then patch-o-matic-ng is definitely worth considering. This comprehensive software makes it easier to apply pending patches to your kernel and modules.

To begin with, there may be some outstanding bugfixes or tweaks that are not yet in the official kernel. With patch-o-matic-ng, you can look through these pending updates by following these simple steps:

```# KERNEL_DIR=
IPTABLES_DIR=
./runme pending```

However, keep in mind that you must recompile your kernel and kernel modules after applying these patches.

If you are feeling a bit adventurous and want to try out some new extensions or features, you can use patch-o-matic-ng to apply a set of maybe-broken, maybe-cool third-party extensions. It's important to note that not all of these patches are compatible with each other.

To safely try out some of these extensions, you can use the following command:

```# KERNEL_DIR=
IPTABLES_DIR=
./runme base```

This will modify your kernel source, so make sure to back it up first. After applying these patches, you will need to recompile and rebuild your kernel and modules.

For more experienced users who know what they are doing, patch-o-matic-ng also provides a command to offer the full list of patch choices. But use this with caution as this feature does not prevent users from potentially causing harm.

Overall, patch-o-matic-ng is an excellent software for those who want to apply various patches to their kernel and modules. It's user-friendly and offers a comprehensive set of instructions to guide users through the patching process.