New iptables require new kernels, new kernels require recompiling lots of system soft. Back porting was the optimal solution. 2012/7/29 Jan Engelhardt <jengelh@xxxxxxx>: > On Wednesday 2012-07-25 11:21, kay wrote: > >>The http://bugzilla.netfilter.org/show_bug.cgi?id=778 patch is wrong, >>I should not have to use it. Please ignore it. > > In general, it is easier to just ship a new iptables version. Like Linux > kernels, having something that has pretty much the same stability level > at every release is a good approach. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html