Yasuyuki KOZAKAI <yasuyuki.kozakai@xxxxxxxxxxxxx> writes: > The only kernel >= 2.6.15 supports IPv6 state match. > And kernel option CONFIG_NETFILTER_XTABLES and > CONFIG_NETFILTER_XT_MATCH_STATE are required. > > Please "make menuconfig" in kernel source, and go to the menu > "Network packet filtering (replaces ipchains)", > enable "Netfilter Xtables support (required for ip_tables)", > enable "state match support". I am using kernel 2.6.15 but I do not see these config options anywhere. I have grep'd the kernel source and can find CONFIG_IP_NF_MATCH_STATE (which is only used in the ipv4 makefile to build ipt_state.o)