(Not sure whether this should go to user or devel list.) Below is the transcript. iptables-1.2.7a INSTALL says requires >=2.4.4, so 2.4.17 should work, right? INSTALL also mentions patch-o-matic, but latest patch-o-matic README says >= 2.4.18. Does that mean I shouldn't need it or that I have to get an earlier patch-o-matic or what? ==== [root@router2 /root]# cd iptables-1.2.7a/ [root@router2 iptables-1.2.7a]# make KERNEL_DIR=/home/user/linux-2.4.17 Making dependencies: please wait... Extensions found: cc -O2 -Wall -Wunused -I/home/user/linux-2.4.17/include -Iinclude/ -DIPTABLES_VERSION=\"1.2.7a\" -fPIC -o\ extensions/libipt_ah_sh.o -c extensions/libipt_ah.c ld -shared -o extensions/libipt_ah.so extensions/libipt_ah_sh.o cc -O2 -Wall -Wunused -I/home/user/linux-2.4.17/include -Iinclude/ -DIPTABLES_VERSION=\"1.2.7a\" -fPIC -o\ extensions/libipt_conntrack_sh.o -c extensions/libipt_conntrack.c In file included from extensions/libipt_conntrack.c:15: include/linux/netfilter_ipv4/ipt_conntrack.h:28: `IP_CT_DIR_MAX' undeclared here (not in a function) include/linux/netfilter_ipv4/ipt_conntrack.h:29: `IP_CT_DIR_MAX' undeclared here (not in a function) include/linux/netfilter_ipv4/ipt_conntrack.h:29: `IP_CT_DIR_MAX' undeclared here (not in a function) extensions/libipt_conntrack.c: In function `parse_status': extensions/libipt_conntrack.c:103: `IPS_EXPECTED' undeclared (first use in this function) extensions/libipt_conntrack.c:103: (Each undeclared identifier is reported only once extensions/libipt_conntrack.c:103: for each function it appears in.) extensions/libipt_conntrack.c:105: `IPS_SEEN_REPLY' undeclared (first use in this function) extensions/libipt_conntrack.c:107: `IPS_ASSURED' undeclared (first use in this function) extensions/libipt_conntrack.c: In function `parse': extensions/libipt_conntrack.c:202: `IP_CT_DIR_ORIGINAL' undeclared (first use in this function) extensions/libipt_conntrack.c:259: `IP_CT_DIR_REPLY' undeclared (first use in this function) extensions/libipt_conntrack.c: In function `print_status': extensions/libipt_conntrack.c:364: `IPS_EXPECTED' undeclared (first use in this function) extensions/libipt_conntrack.c:368: `IPS_SEEN_REPLY' undeclared (first use in this function) extensions/libipt_conntrack.c:372: `IPS_ASSURED' undeclared (first use in this function) extensions/libipt_conntrack.c: In function `matchinfo_print': extensions/libipt_conntrack.c:420: `IP_CT_DIR_ORIGINAL' undeclared (first use in this function) extensions/libipt_conntrack.c:440: `IP_CT_DIR_REPLY' undeclared (first use in this function) make: *** [extensions/libipt_conntrack_sh.o] Error 1