Gustavo Zacarias <gustavo@xxxxxxxxxxxxxxx> wrote: > When libnetfilter_conntrack is available iptables needs to link > against it otherwise we get build failures. Again, I doubt that this is the case. The only caller of libnetfilter_conntrack functions is libxt_connlabel, and that is not tied to the xtables-multi binary, UNLESS you build with --enable-static (which puts the extensions into the executable). So, afaiu, we should not need -lnetfilter_conntrack in the !ENABLE_STATIC case. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html