I tried to apply the 39_ip_conntrack-proc patch by putting the patch file at the root of the kernel source and using patch -p1 < 39_ip_conntrack-proc.patch and received this error: 1 out of 4 hunks FAILED -- saving rejects to file net/ipv4/netfilter/ip_conntrack_core.c.rej I am not much of a programmer so this does not mean much to me. The .rej file contains: *************** *** 1465,1489 **** for (i = 0; i < ip_conntrack_htable_size; i++) INIT_LIST_HEAD(&ip_conntrack_hash[i]); - /* This is fucking braindead. There is NO WAY of doing this without - the CONFIG_SYSCTL unless you don't want to detect errors. - Grrr... --RR */ - #ifdef CONFIG_SYSCTL - ip_conntrack_sysctl_header - = register_sysctl_table(ip_conntrack_root_table, 0); - if (ip_conntrack_sysctl_header == NULL) { - goto err_free_ct_cachep; - } - #endif /*CONFIG_SYSCTL*/ - /* For use by ipt_REJECT */ ip_ct_attach = ip_conntrack_attach; return ret; - #ifdef CONFIG_SYSCTL - err_free_ct_cachep: - kmem_cache_destroy(ip_conntrack_cachep); - #endif /*CONFIG_SYSCTL*/ err_free_hash: vfree(ip_conntrack_hash); err_unreg_sockopt: --- 1439,1448 ---- for (i = 0; i < ip_conntrack_htable_size; i++) INIT_LIST_HEAD(&ip_conntrack_hash[i]); /* For use by ipt_REJECT */ ip_ct_attach = ip_conntrack_attach; return ret; err_free_hash: vfree(ip_conntrack_hash); err_unreg_sockopt: Josh Berry Information Security Group 972-856-5402