On Sun, Apr 09, 2006 at 10:43:13AM +0300, you [Ville Herva] wrote: > > > > Most likely you didn't enable the new xtables options. Please post your > > full config. > > The full .config is here > http://www.iki.fi/v/tmp/2.6.17-rc1.config Now "iptables -L" works, but I still get > iptables -A INPUT -p tcp -d 0.0.0.0/0 --dport http -m state --state NEW,ESTABLISHED -j ACCEPT iptables: Unknown error 4294967295 from about half of the iptables rules. My current config is here: http://www.iki.fi/v/tmp/2.6.17-rc1.config.new The following modules are loaded: iptable_nat 6948 1 ip_nat 14860 1 iptable_nat ip_conntrack 43188 2 iptable_nat,ip_nat ipt_REJECT 4704 0 iptable_filter 2784 0 and CONFIG_NETFILTER=y CONFIG_NETFILTER_XTABLES=y CONFIG_IP_NF_IPTABLES=y are compiled in statically. I just realized # CONFIG_NETFILTER_XT_MATCH_STATE is not set should probably be set. I'm building a new kernel now... -- v -- v@xxxxxx