Xtables-addons provides extra modules for iptables not present in the kernel, and is the successor of patch-o-matic. It contains matches and targets such as TARPIT, CHAOS, TEE, geoip, IPMARK, DELUDE and condition.

The dkms package will automatically compile and install the kernel modules for your current kernel version.