+ obj-$(CONFIG_IP_NF_ARP_MANGLE) += arpt_mangle.o
+
+; fixup
+diff -NurpP --exclude '*.orig' --exclude '*.rej' linux-2.6.27.10-vs2.3.x-PS-02.0/net/ipv4/netfilter/ip_set.c linux-2.6.27.10-vs2.3.x-PS-02.1/net/ipv4/netfilter/ip_set.c
+--- linux-2.6.27.10-vs2.3.x-PS-02.0/net/ipv4/netfilter/ip_set.c 2009-01-25 02:29:31.000000000 +0100
++++ linux-2.6.27.10-vs2.3.x-PS-02.1/net/ipv4/netfilter/ip_set.c 2009-01-25 01:51:40.000000000 +0100
+@@ -24,7 +24,7 @@
+ #include <linux/errno.h>
+ #include <asm/uaccess.h>
+ #include <asm/bitops.h>
+-#include <asm/semaphore.h>
++// #include <asm/semaphore.h>
+ #include <linux/spinlock.h>
+ #include <linux/vmalloc.h>
+
+diff -NurpP --exclude '*.orig' --exclude '*.rej' linux-2.6.27.10-vs2.3.x-PS-02.0/net/ipv4/netfilter/ipt_SET.c linux-2.6.27.10-vs2.3.x-PS-02.1/net/ipv4/netfilter/ipt_SET.c
+--- linux-2.6.27.10-vs2.3.x-PS-02.0/net/ipv4/netfilter/ipt_SET.c 2009-01-25 02:29:31.000000000 +0100
++++ linux-2.6.27.10-vs2.3.x-PS-02.1/net/ipv4/netfilter/ipt_SET.c 2009-01-25 01:51:19.000000000 +0100
+@@ -25,30 +25,20 @@
+ #include <linux/netfilter_ipv4/ip_tables.h>
+ #include <linux/netfilter_ipv4/ipt_set.h>
+
+-static unsigned int
+-target(struct sk_buff **pskb,
++static unsigned int target(struct sk_buff *skb,
+ const struct net_device *in,
+ const struct net_device *out,
+ unsigned int hooknum,
+-#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,17)
+ const struct xt_target *target,
+-#endif
+-#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,19)
+- const void *targinfo,
+- void *userinfo)
+-#else
+ const void *targinfo)
+-#endif
+ {
+ const struct ipt_set_info_target *info = targinfo;
+
+ if (info->add_set.index != IP_SET_INVALID_ID)
+- ip_set_addip_kernel(info->add_set.index,
+- *pskb,
++ ip_set_addip_kernel(info->add_set.index, skb,
+ info->add_set.flags);
+ if (info->del_set.index != IP_SET_INVALID_ID)
+- ip_set_delip_kernel(info->del_set.index,
+- *pskb,
++ ip_set_delip_kernel(info->del_set.index, skb,
+ info->del_set.flags);
+
+ return IPT_CONTINUE;