I used to compile everything that can be compiled as modules as modules.
Including everything on the kernel would make it very big. I've had some
problems of big kernels that wouldnt even boot.
So I used to include netfilter stuff, NIC drivers, CDROM drivers,
codepages, floppy ...... as modules. Just for making the main kernel
smaller. Of course you cant get your IDE drivers as modules if you use an
IDE disk ... but you could include ALL the IDE stuff as modules if your boot
disk is a SCSI one !!! Why get your floppy driver ( +- 70K ) into the main
kernel of my servers if i'll probably use it no more than 2 times a week ???
And supposing the problem is really there and we really have an extra
argument on ipt_string.c, I'm almost sure compiling it as module or in the
kernel wont make any difference ...... havent tried, but I would bet .....
Sincerily,
Leonardo Rodrigues
----- Original Message -----
From: "Federico" <[EMAIL PROTECTED]>
To: "netfilter ML" <[EMAIL PROTECTED]>
Sent: Friday, March 15, 2002 11:52 AM
Subject: Re: problems with 2.4.18 and iptables 1.2.6 [string must be
included in kernel]
> Why don't include string match into kernel finally ???
> I've noticed that most people want to use it... so why keep it a "patch"
> some more ?
