> > OK. If you recompile without conntrack, can you do NAT? I'm just wondering? > > no, Netfilter's NAT relies upon the conntrack. > > Can I ask you why do you want to turn off the conntrack? I don't. I just wanted to learn from the people who were saying "just don't load the ip_conntrack..." Ramin > If it's for > speed or memory reasons, then using NAT will have a similar overhead > (maybe not exactly the same, but similar) anyway. When you NAT a > connection, you're forced to keep track of the connection a way or > another, to NAT further packets of the connection the same way.