From: Graham Murray <graham@xxxxxxxxxxxxxx> Date: Mon, 13 Feb 2006 09:21:26 +0000 > Yasuyuki KOZAKAI <yasuyuki.kozakai@xxxxxxxxxxxxx> writes: > > > The only kernel >= 2.6.15 supports IPv6 state match. > > And kernel option CONFIG_NETFILTER_XTABLES and > > CONFIG_NETFILTER_XT_MATCH_STATE are required. > > > > Please "make menuconfig" in kernel source, and go to the menu > > "Network packet filtering (replaces ipchains)", > > enable "Netfilter Xtables support (required for ip_tables)", > > enable "state match support". > > I am using kernel 2.6.15 but I do not see these config options > anywhere. I have grep'd the kernel source and can find > CONFIG_IP_NF_MATCH_STATE (which is only used in the ipv4 makefile to > build ipt_state.o) Sorry, I was wrong. nf_conntrack lives in kernel >= 2.6.15, but only kernel >= 2.6.16 supports IPv6 state match. -- Yasuyuki Kozakai
