diff --git a/include/netfilter.mk b/include/netfilter.mk
index 5d532ce..474a48b 100644
--- a/include/netfilter.mk
+++ b/include/netfilter.mk
@@ -262,6 +262,9 @@ $(eval $(call nf_add,IPT_TPROXY,CONFIG_NETFILTER_XT_TARGET_TPROXY, $(P_XT)xt_TPR
 # led
 $(eval $(call nf_add,IPT_LED,CONFIG_NETFILTER_XT_TARGET_LED, $(P_XT)xt_LED))

+# tcpoptstrip
+$(eval $(call nf_add,IPT_TCPOPTSTRIP,CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP, $(P_XT)xt_TCPOPTSTRIP))
+
 # tee

 $(eval $(call nf_add,IPT_TEE,CONFIG_NETFILTER_XT_TARGET_TEE, $(P_XT)xt_TEE))
diff --git a/package/kernel/linux/modules/netfilter.mk b/package/kernel/linux/modules/netfilter.mk
index 51f3544..f36db6b 100644
--- a/package/kernel/linux/modules/netfilter.mk
+++ b/package/kernel/linux/modules/netfilter.mk
@@ -549,6 +549,24 @@ endef

 $(eval $(call KernelPackage,ipt-led))

+define KernelPackage/ipt-tcpoptstrip
+  TITLE:=Module to strip a TCP option
+  KCONFIG:= \
+       CONFIG_NETFILTER=y \
+       CONFIG_NETFILTER_ADVANCED=y \
+       CONFIG_IP_NF_MANGLE=y \
+       $(KCONFIG_IPT_TCPOPTSTRIP)
+  FILES:=$(foreach mod,$(IPT_TCPOPTSTRIP-m),$(LINUX_DIR)/net/$(mod).ko)
+  AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_TCPOPTSTRIP-m)))
+  $(call AddDepends/ipt)
+endef
+
+define KernelPackage/ipt-tcpoptstrip/description
+ Netfilter target to strip a TCP option.
+endef
+
+$(eval $(call KernelPackage,ipt-tcpoptstrip))
+
 define KernelPackage/ipt-tproxy
   TITLE:=Transparent proxying support
   DEPENDS+=+kmod-ipt-conntrack +IPV6:kmod-nf-conntrack6 +IPV6:kmod-ip6tables
diff --git a/package/network/utils/iptables/Makefile b/package/network/utils/iptables/Makefile
index 1d758ed..40b096d 100644
--- a/package/network/utils/iptables/Makefile
+++ b/package/network/utils/iptables/Makefile
@@ -377,6 +377,19 @@ iptables extension for triggering a LED.