From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pablo Neira Ayuso Subject: Re: Linux 4.3.1 regression: -m state returns "Protocol wrong type for socket" Date: Mon, 14 Dec 2015 21:55:56 +0100 Message-ID: <20151214205556.GA2927@salvia> References: <566C0E75.6080800@familie-kuntze.de> <566c4622.936d810a.ece67.ffffdfc9@mx.google.com> <20151212232044.GE12854@breakpoint.cc> <566cae67.86f60d0a.f3ad2.2638@mx.google.com> <566cb640.46dc0d0a.5c3cc.287a@mx.google.com> <566cbcbe.01ed0d0a.36f37.2c88@mx.google.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Jan Engelhardt , =?iso-8859-1?Q?D=E2niel?= Fraga , Florian Westphal , Noel Kuntze , Remzi =?iso-8859-1?Q?AKY=DCZ?= , netfilter@vger.kernel.org, netfilter-devel@vger.kernel.org To: Jozsef Kadlecsik Return-path: Received: from mail.us.es ([193.147.175.20]:56669 "EHLO mail.us.es" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753516AbbLNU4D (ORCPT ); Mon, 14 Dec 2015 15:56:03 -0500 Received: from antivirus1-rhel7.int (unknown [192.168.2.11]) by mail.us.es (Postfix) with ESMTP id C954BFB459 for ; Mon, 14 Dec 2015 21:55:59 +0100 (CET) Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id B7C56DA7FF for ; Mon, 14 Dec 2015 21:55:59 +0100 (CET) Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id 89F60DA807 for ; Mon, 14 Dec 2015 21:55:57 +0100 (CET) Content-Disposition: inline In-Reply-To: Sender: netfilter-devel-owner@vger.kernel.org List-ID: On Mon, Dec 14, 2015 at 09:47:31PM +0100, Jozsef Kadlecsik wrote: > diff --git a/net/ipv4/netfilter/Kconfig b/net/ipv4/netfilter/Kconfig > index a355841..a1dfd23 100644 > --- a/net/ipv4/netfilter/Kconfig > +++ b/net/ipv4/netfilter/Kconfig > @@ -12,6 +12,7 @@ config NF_DEFRAG_IPV4 > config NF_CONNTRACK_IPV4 > tristate "IPv4 connection tracking support (required for NAT)" > depends on NF_CONNTRACK > + default NETFILTER_XT_MATCH_CONNTRACK I know of some people already giving a try to compiling nftables only kernels, I think this would create an unnecessary dependency. > default m if NETFILTER_ADVANCED=n > select NF_DEFRAG_IPV4 > ---help--- > > Best regards, > Jozsef > - > E-mail : kadlec@blackhole.kfki.hu, kadlecsik.jozsef@wigner.mta.hu > PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt > Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences > H-1525 Budapest 114, POB. 49, Hungary