Index: linux-2.6.17.1/net/netfilter/xt_CONNMARK.c =================================================================== --- linux-2.6.17.1.orig/net/netfilter/xt_CONNMARK.c +++ linux-2.6.17.1/net/netfilter/xt_CONNMARK.c @@ -133,13 +133,6 @@ checkentry(const char *tablename, { struct xt_connmark_target_info *matchinfo = targinfo; - if (matchinfo->mode == XT_CONNMARK_RESTORE) { - if (strcmp(tablename, "mangle") != 0) { - printk(KERN_WARNING "CONNMARK: restore can only be called from \"mangle\" table, not \"%s\"\n", tablename); - return 0; - } - } - if (matchinfo->mark > 0xffffffff || matchinfo->mask > 0xffffffff) { printk(KERN_WARNING "CONNMARK: Only supports 32bit mark\n"); return 0; Index: linux-2.6.17.1/net/netfilter/xt_MARK.c =================================================================== --- linux-2.6.17.1.orig/net/netfilter/xt_MARK.c +++ linux-2.6.17.1/net/netfilter/xt_MARK.c @@ -116,7 +116,6 @@ static struct xt_target ipt_mark_reg_v0 .name = "MARK", .target = target_v0, .targetsize = sizeof(struct xt_mark_target_info), - .table = "mangle", .checkentry = checkentry_v0, .me = THIS_MODULE, .family = AF_INET, @@ -127,7 +126,6 @@ static struct xt_target ipt_mark_reg_v1 .name = "MARK", .target = target_v1, .targetsize = sizeof(struct xt_mark_target_info_v1), - .table = "mangle", .checkentry = checkentry_v1, .me = THIS_MODULE, .family = AF_INET, @@ -138,7 +136,6 @@ static struct xt_target ip6t_mark_reg_v0 .name = "MARK", .target = target_v0, .targetsize = sizeof(struct xt_mark_target_info), - .table = "mangle", .checkentry = checkentry_v0, .me = THIS_MODULE, .family = AF_INET6,