On Sun, 09 Apr 2006, Patrick McHardy murmured woefully: > Nix wrote: >>>Thanks for the help, and sorry for the noise. I hope not too many people hit >>>the same glitch while upgrading... >> >> >> I cetainly did. A simple `make oldconfig' ends up zapping pretty much >> all the old iptables CONFIG_ options, so you end up with not much of >> iptables or netfilter left. > > But it does show you all the new options. Admittedly, it would > have been better to automatically select the new options when > needed, but probably not worth changing it now, it has been > like this for two releases I think. Oh, yes, it did, and I thought they were userspace-matching related and left them off. The real problem is that oldconfig doesn't mention when options you *had* enabled disappear. >> I must admit not quite understanding why the xtables stuff is needed: >> I thought that was needed for userspace connection tracking, which >> while it sounds cool isn't something I'm using yet. > > Its a unification of the matches and targets that are address family > independant. Ah, hence the ipv6-matching stuff turning up in 2.6.16. I see. -- `On a scale of 1-10, X's "brokenness rating" is 1.1, but that's only because bringing Windows into the picture rescaled "brokenness" by a factor of 10.' --- Peter da Silva