Jan Engelhardt wrote: > - iptables-static will be a multi binary. I doubt you want split > binaries on embedded anyway (diskspace constraints). Agreed. > - A new binary, iptables-mtss is built (semi-static, with glibc but > without plugins). > > I do not think iptables-static makes any sense (neither now nor > before this move to autotools), because ld rightly tells me that > building with -static will cause loading of glibc parts /anyway/ > because of getserv*() in xt_dccp and so on. Yes. The NO_SHARED_LIBS option originally did the equivalent of iptables-mtss, but it seems that got changed somewhere along the line. - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html