On 01/13/2015 09:32 PM, Jan Engelhardt wrote: >> That's the precise build failure which is triggered when >> libnetfilter_conntrack is around. > > The -ldl which appears in the command line, it suggests that it stems > from libxtables.la. (Unless there is one in your libnetfilter_conntrack.la.) It's coming from libnetfilter_conntrack.la from src/Makefile.am (hardcoded). Not only that, you've also got -ldl in Libs.private in xtables.pc.in in an unconditional way (iptables) but that's not the culprit at this point. I'll send a revised patch against libnetfilter_conntrack unless there's a good reason for getting it hardcoded there (other than static building since killing it makes iptables build fine). Florian: regarding iptables master it won't build static with nft support enabled, i'll look into it, but at least it's an option that can be easily disabled for the build, so no quick patches required. Regards. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html