Re: [Patch] (updated) netfilter: remove deprecated CONFIG_NF_CT_ACCT

Krzysztof Oledzki
2009-10-15T11:29:42Z

[-- Attachment #1: Type: TEXT/PLAIN, Size: 711 bytes --]

Adding CC to netfilter-devel-owner@vger.kernel.org, where netfilter
related issues are discussed.

On Thu, 15 Oct 2009, Amerigo Wang wrote:

>
> CONFIG_NF_CT_ACCT is scheduled to be removed in 2.6.29.
>
> Cc: Krzysztof Piotr Oledzki <ole@ans.pl>
> Signed-off-by: WANG Cong <amwang@redhat.com>

This is not so easy - it was decided that we don't want to remove it just
that because of connbytes. The final conclusion was to keep it disabled by
default (if not enabled by kernel/modules/sysctl option) but enabling it
automatically for the current NS if nefilter rules contains "-m
connbytes".

Sorry, I should have gotten into this and finished it earlier, my bad. :(

Best regards,

Krzysztof Olędzki