there is a patch in iptables-1.2.9 for layer7 addon, but the ebuild doesn't chmod +x extensions/.IMQ-test* chmod +x extensions/.childlevel-test* chmod +x extensions/.layer7-test* so at compilation time, the addon is not compiled. The iptables-1.2.9-r1 ebuild doesn't suffer from this bug Reproducible: Always Steps to Reproduce: 1. 2. 3.
The way patches are added to iptables earlier versions gets patches with patches added to newer revisions. layer7 support was added to -r1 and is currently in a masked testing phase.