diff --git a/package/network/utils/iptables/Makefile b/package/network/utils/iptables/Makefile
index dbb40f36..5b75ddd9 100755
--- a/package/network/utils/iptables/Makefile
+++ b/package/network/utils/iptables/Makefile
@@ -473,7 +473,7 @@ PFX_EXT+=length limit standard conntrack tcp udp NFQUEUE dscp DSCP mac physdev m
 endif
 endif
 ifeq ("$(CONFIG_ZYXEL_HOME_CYBER_SECURITY)", "y")
-PFX_EXT+= CT connmark CONNMARK tos TOS 
+PFX_EXT+= CT connmark CONNMARK tos TOS
 endif
 PF4_EXT+=LOG DNAT MASQUERADE REDIRECT REJECT SNAT TRIGGER
 
@@ -551,7 +551,7 @@ MAKE_FLAGS := \
 	COPT_FLAGS="$(TARGET_CFLAGS)" \
 	KERNEL_DIR="$(LINUX_DIR)/user_headers/" PREFIX=/usr \
 	KBUILD_OUTPUT="$(LINUX_DIR)" \
-	BUILTIN_MODULES="$(patsubst ipt_%,%,$(patsubst xt_%,%,$(IPT_BUILTIN) $(IPT_CONNTRACK-m) $(IPT_NAT-m)))" 
+	BUILTIN_MODULES="$(patsubst ipt_%,%,$(patsubst xt_%,%,$(IPT_BUILTIN) $(IPT_CONNTRACK-m) $(IPT_NAT-m)))"
 endif
 
 ifeq ("$(CONFIG_KERNEL_ZYXEL_EXT_MARK)", "y")
@@ -559,8 +559,6 @@ define Build/Prepare
 	# netfilter module for zoned firewall - bpan
 	$(call Build/Prepare/Default)
 	$(CP) ./src-$(PKG_VERSION)/libxt_zextmark.c $(PKG_BUILD_DIR)/extensions/
-	$(CP) ./src-$(PKG_VERSION)/libxt_ZEXTMARK.c $(PKG_BUILD_DIR)/extensions/
-	$(CP) ./src-$(PKG_VERSION)/libxt_CONNZEXTMARK.c $(PKG_BUILD_DIR)/extensions/
 	$(CP) ./src-$(PKG_VERSION)/libxt_connzextmark.c $(PKG_BUILD_DIR)/extensions/
 endef
 endif
@@ -614,7 +612,7 @@ define Package/iptables/install
 	$(LN) iptables $(1)/usr/sbin/iptables-save
 	$(LN) iptables $(1)/usr/sbin/iptables-restore
 	$(INSTALL_DIR) $(1)/usr/lib/iptables
-	
+
 	$(INSTALL_DIR) $(1)/etc/init.d
 	$(INSTALL_DIR) $(1)/etc/rc3.d
 #In ECONET platform, kernel modules are built-in
@@ -675,7 +673,7 @@ ifeq ("$(strip ${ZCFG_PLATFORM})","QUALCOMM")
 	$(CP) $(PKG_INSTALL_DIR)/usr/lib/libxtables.so* $(1)/usr/lib/
 	$(CP) $(PKG_BUILD_DIR)/extensions/libiptext.so $(1)/usr/lib/
 endif
-	
+
 #	$(CP) $(PKG_INSTALL_DIR)/usr/lib/libxtables.a $(1)/usr/lib/
 #	$(CP) $(PKG_INSTALL_DIR)/usr/lib/libxtables.so $(1)/usr/lib/
 endef