On 9 Apr 2006, Ville Herva yowled: > On Sun, Apr 09, 2006 at 05:44:16PM +0300, you [Ville Herva] wrote: >> I just realized >> # CONFIG_NETFILTER_XT_MATCH_STATE is not set >> should probably be set. I'm building a new kernel now... > > Ok, that seems to do it. > > Thanks for the help, and sorry for the noise. I hope not too many people hit > the same glitch while upgrading... I cetainly did. A simple `make oldconfig' ends up zapping pretty much all the old iptables CONFIG_ options, so you end up with not much of iptables or netfilter left. I must admit not quite understanding why the xtables stuff is needed: I thought that was needed for userspace connection tracking, which while it sounds cool isn't something I'm using yet. -- `On a scale of 1-10, X's "brokenness rating" is 1.1, but that's only because bringing Windows into the picture rescaled "brokenness" by a factor of 10.' --- Peter da Silva