diff --git a/iptables-1.3.7-extensions.diff b/iptables-1.3.7-extensions.diff
new file mode 100644
index 0000000..d0244eb
--- /dev/null
+++ b/iptables-1.3.7-extensions.diff
@@ -0,0 +1,13 @@
+--- extensions/Makefile
++++ extensions/Makefile
+@@ -5,8 +5,8 @@
+ # header files are present in the include/linux directory of this iptables
+ # package (HW)
+ #
+-PF_EXT_SLIB:=ah addrtype comment connlimit connmark conntrack dscp ecn esp hashlimit helper icmp iprange length limit mac mark multiport owner physdev pkttype policy realm rpc sctp standard state tcp tcpmss tos ttl udp unclean CLASSIFY CONNMARK DNAT DSCP ECN LOG MARK MASQUERADE MIRROR NETMAP NFQUEUE NOTRACK REDIRECT REJECT SAME SNAT TARPIT TCPMSS TOS TRACE TTL ULOG
+-PF6_EXT_SLIB:=connmark eui64 hl icmp6 length limit mac mark multiport owner physdev policy standard state tcp udp CONNMARK HL LOG NFQUEUE MARK TRACE
++PF_EXT_SLIB:=ah addrtype comment connbytes connlimit connmark conntrack dccp dscp ecn esp hashlimit helper icmp iprange length limit mac mark multiport owner physdev pkttype policy quota realm recent rpc sctp standard state statistic string tcp tcpmss tos ttl udp unclean CLASSIFY CLUSTERIP CONNMARK DNAT DSCP ECN LOG MARK MASQUERADE MIRROR NETMAP NFQUEUE NOTRACK REDIRECT REJECT SAME SNAT TARPIT TCPMSS TOS TRACE TTL ULOG
++PF6_EXT_SLIB:=ah connmark dst esp eui64 frag hbh hl icmp6 ipv6header length limit mac mark multiport owner physdev policy rt standard state tcp udp CONNMARK HL LOG NFQUEUE MARK REJECT TRACE
+ 
+ ifeq ($(DO_SELINUX), 1)
+ PF_EXT_SE_SLIB:=SECMARK CONNSECMARK
diff --git a/iptables.changes b/iptables.changes
index 5c8f3aa..2a6bf26 100644
--- a/iptables.changes
+++ b/iptables.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Jan  9 14:52:15 CET 2007 - prusnak@suse.cz
+
+- added experimental tools and extensions (removed by last update)
+
 -------------------------------------------------------------------
 Wed Jan  3 17:58:09 CET 2007 - prusnak@suse.cz
 
diff --git a/iptables.spec b/iptables.spec
index ecdbd7a..1fbecfb 100644
--- a/iptables.spec
+++ b/iptables.spec
@@ -16,7 +16,7 @@ License:        GNU General Public License (GPL)
 Group:          Productivity/Networking/Security
 Autoreqprov:    on
 Version:        1.3.7
-Release:        1
+Release:        4
 Summary:        IP Packet Filter Administration
 Source0:        %{name}-%{version}.tar.bz2
 Source1:        %{name}-%{version}-debian-docs.tar.bz2
@@ -24,6 +24,7 @@ Patch2:         %{name}-%{version}-makefile.diff
 Patch20:        %{name}-%{version}-batch.diff
 Patch21:        %{name}-%{version}-strict-aliasing-fix.diff
 Patch22:        %{name}-%{version}-shlibs.diff
+Patch23:        %{name}-%{version}-extensions.diff
 URL:            http://www.iptables.org
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
@@ -59,17 +60,19 @@ Authors:
 %patch20
 %patch21
 %patch22
+%patch23
 chmod +x extensions/.CLUSTERIP-test
 
 %build
 [ -z "$KERNEL_DIR" ] && KERNEL_DIR="/usr/src/linux";
 CFLAGS="$RPM_OPT_FLAGS" \
 make LD=gcc BINDIR=%{_prefix}/sbin LIBDIR=%{_libdir} MANDIR=%{_mandir} KERNEL_DIR="$KERNEL_DIR"
+CFLAGS="$RPM_OPT_FLAGS" \
+make LD=gcc BINDIR=%{_prefix}/sbin LIBDIR=%{_libdir} MANDIR=%{_mandir} KERNEL_DIR="$KERNEL_DIR" experimental
 #
 # iptables-batch
 CFLAGS="$RPM_OPT_FLAGS" \
-make LD=gcc BINDIR=%{_prefix}/sbin LIBDIR=%{_libdir} MANDIR=%{_mandir} KERNEL_DIR="$KERNEL_DIR" \
-	iptables-batch ip6tables-batch
+make LD=gcc BINDIR=%{_prefix}/sbin LIBDIR=%{_libdir} MANDIR=%{_mandir} KERNEL_DIR="$KERNEL_DIR" iptables-batch ip6tables-batch
 
 %install
 CFLAGS="$RPM_OPT_FLAGS" \
@@ -77,7 +80,7 @@ make IPT_LIBDIR=%{_libdir}/iptables \
      BINDIR=$RPM_BUILD_ROOT%{_prefix}/sbin \
      LIBDIR=$RPM_BUILD_ROOT%{_libdir} \
      INCDIR=$RPM_BUILD_ROOT%{_prefix}/include \
-     MANDIR=$RPM_BUILD_ROOT%{_mandir} install install-devel KERNEL_DIR="$KERNEL_DIR"
+     MANDIR=$RPM_BUILD_ROOT%{_mandir} install install-devel install-experimental KERNEL_DIR="$KERNEL_DIR"
 install -m755 iptables-batch ip6tables-batch %{buildroot}%{_sbindir}
 
 %clean
@@ -99,6 +102,8 @@ rm -rf $RPM_BUILD_ROOT
 %{_prefix}/include/*
 
 %changelog -n iptables
+* Tue Jan 09 2007 - prusnak@suse.cz
+- added experimental tools and extensions (removed by last update)
 * Wed Jan 03 2007 - prusnak@suse.cz
 - updated to 1.3.7
   * Add revision support for ip6tables