Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote: > > I think this is still useful for people cross-compiling and installing > > iptables in some custom location. > > Hm, still, this may confuse people, as xt_connlabel always looks at: > > #define CONNLABEL_CFG "/etc/xtables/connlabel.conf" Right; this is easily fixable. However, this is also the default in libnetfilter_conntrack. But lnf-ct wont be able to know what configure options iptables was built with. So libnetfilter-conntrack and conntrack-tool would end up having to try a couple of locations to find that config file... -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html