This series of patches checks CT accounting state at rule instantiation time (as suggested). I'm slightly concerned about the case where the sysctl could be toggled after the xt_connbytes rule is loaded, but I guess the user better know what he/she is doing. I also moved the accounting state/toggle functions into the proper header nf_conntrack_acct.h. Finally, the 3rd patch removes all traces of CONFIG_NF_CT_ACCT. The following changes since commit fe6fb552858f686f39e33d7b0a33fe56dacea0bf: Arnd Hannemann (1): netfilter: fix simple typo in KConfig for netfiltert xt_TEE are available in the git repository at: git://kernel.ubuntu.com/rtg/nf-next-2.6 CONFIG_NF_CT_ACCT Tim Gardner (3): netfilter: Expose connection tracking accounting toggles netfilter: xt_connbytes: Force CT accounting to be enabled netfilter: Complete the deprecation of CONFIG_NF_CT_ACCT Documentation/feature-removal-schedule.txt | 9 --------- Documentation/kernel-parameters.txt | 3 +-- include/net/netfilter/nf_conntrack_acct.h | 12 ++++++++++++ net/netfilter/Kconfig | 22 ---------------------- net/netfilter/nf_conntrack_acct.c | 10 ---------- net/netfilter/xt_connbytes.c | 10 ++++++++++ 6 files changed, 23 insertions(+), 43 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html