Basically, I'm trying to get iptables to block per country: 

https://daenney.github.io/2017/01/07/geoip-filtering-iptables.html

 

I got most of things work until getting problem on installing xtables-addons-dmks

 

# apt-get install --reinstall xtables-addons-dkms

------------------------------

Deleting module version: 2.12

completely from the DKMS tree.

------------------------------

Done.

Unpacking xtables-addons-dkms (2.12-0.1) over (2.12-0.1) ...

Setting up xtables-addons-dkms (2.12-0.1) ...

Loading new xtables-addons-2.12 DKMS files...

Building for 4.4.174-rk3399

Building initial module for 4.4.174-rk3399

Error! Build of xt_ACCOUNT.ko failed for: 4.4.174-rk3399 (aarch64)

Consult the make.log in the build directory

/var/lib/dkms/xtables-addons/2.12/build/ for more information.

 

# cat /var/lib/dkms/xtables-addons/2.12/build/make.log

DKMS make.log for xtables-addons-2.12 for kernel 4.4.174-rk3399 (aarch64)

Mon Mar 25 18:58:27 PDT 2019

make: Entering directory '/usr/src/linux-headers-4.4.174-rk3399'

Makefile:667: arch//Makefile: No such file or directory

make: *** No rule to make target 'arch//Makefile'. Stop.

make: Leaving directory '/usr/src/linux-headers-4.4.174-rk3399'

I have both kernel headers and source installed from armbian-config.

 

Any pointer to get correct commands to solve this problem would be appreciated. 

 

Thanks,

 

From the logs it looks like that architecture definition is missing. Why and where this is pulled out ... no idea is this a problem of DKMS, kernel sources or elsewhere. Very unlikely that has anything to do with our work but there is another solution to this problem. Use build tools and recompile kernel with options you need and send changes upstream, to our kernel config, that you will not lost changes and next upgrade.

Thanks Igor.  Got a workaround solution with fail2ban with geoiplookup for what I need. Another day to do as what you suggested. ;-)