Emulatorman wrote:

I need upgrade systemd-knock from 217-8 to 221-1 to solve it, but there aren't new knock patches since December and the patches available from knock website are deprecated to use in our latest packages, except the kernel because it works well in the latest kernels version yet, but i don't know if it could work in the next version (4.1-gnu).
Since some time ago (February), i sent emails to Julian Kirsch to request update for the knock patches and he told me have got his full attention on it and will take care of all of them at once, but maybe i should send another email to know about the progress.

I created knock patches for latest version of systemd [0] and openssh [1] and now works well.

[0]:https://repo.parabola.nu/other/knock/patches/systemd/0001-adds-TCP-Stealth-support-to-systemd-221.patch
[1]:https://repo.parabola.nu/other/knock/patches/openssh/openssh-6.9p1-linux-knock-patch.diff