Hello, This is something I ran into a long time ago. When ucbering 2.x went from iptables 1.3.1 to 1.3.5, I noticed that shorewall went from:
Connection Tracking Match: Available To: Connection Tracking Match: Not available I wasn't quite sure if this was a self inflicted wound since I compile my own kernel and packages, so I stayed with iptables 1.3.1 but upgraded all the other packages. With ucBering 3.1 I'm now using iptables 1.3.5 and I want to use conntrack with the --ctorigdst option but it doesn't work: iptables conntrack "Unknown error -1" Doesn't work with any option, actually. On my older boxes with iptables 1.3.1 it works fine. -cpu ____________________________________________________________________________________ Looking for last minute shopping deals? Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace ------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/