I'm using kernel 2.6.13 and iptables 1.3.2 and patch-o-matic ng-20040621 I'm getting an error when I try to patch and compile to use connlimit from the patch-o-matic base. the errors look like this: In function count_them: struct ip_conntrack_tuple_hash has no member named ctrack And sure enough I find the ctrack pointer was removed here: http://lists.netfilter.org/pipermail/netfilter-devel/2005-January/018147.htm l I started digging into the source and find it non-trivial Any suggestions on a work around?