Hi, On Thu, Sep 03, 2015 at 12:10:34PM +0200, Pablo Neira Ayuso wrote: > The idea is that nfnetlink_queue and nfnetlink_log request this module > to be loaded when the CONNTRACK flag is passed. I tried to modularize nfnetlink_queue_ct first, please see a patch attached. It can be compiled with NETFILTER_NETLINK_QUEUE=m and any of NETFILTER_NETLINK_QUEUE_CT, but in a case of QUEUE=y, QUEUE_CT can not be a module. Can we enforce QUEUE_CT not to be 'm', in case of QUEUE=y by updating Kconfig? Would you please give me some advice? Thanks,