Hi Patrick, The connmark match/target require ip_conntrack to work. This patch add such dependency via need_ip_conntrack(). Thanks to Piotr Chytla for spotting this problem. Signed-off-by: Pablo Neira Ayuso