Hi, From: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx> Date: Sun, 3 Jun 2007 13:12:55 +0200 (MEST) > +static int __init xt_connlimit_init(void) > +{ > + need_conntrack_ipv4(); > + return xt_register_match(&xt_connlimit_reg); > +} You can use nf_ct_l3proto_try_module_get() instead of introducing need_conntrack_ipv4(). Please refer xt_state.c and xt_conntrack.c as example. -- Yasuyuki Kozakai