Iptables dies making ipt_connbytes which was introduced with kernel 2.6.14. Reproducible: Always Steps to Reproduce: emerge iptables Actual Results: Fails Expected Results: Works Portage 2.0.53_rc6 (default-linux/x86/2005.1, gcc-3.4.4, glibc-2.3.5-r3, 2.6.13-archck8 i686) ================================================================= System uname: 2.6.13-archck8 i686 AMD Athlon(TM) XP 3000+ Gentoo Base System version 1.12.0_pre9 distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [enabled] ccache version 2.4 [enabled] dev-lang/python: 2.4.2 sys-apps/sandbox: 1.2.13 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1 sys-devel/binutils: 2.16.1 sys-devel/libtool: 1.5.20 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="x86 ~x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=athlon-xp -O2 -pipe -fomit-frame-pointer -m3dnow -msse -mmmx" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env /usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/init.d /etc/pam.d /etc/terminfo /etc/env.d" CXXFLAGS="-march=athlon-xp -O2 -pipe -fomit-frame-pointer -m3dnow -msse -mmmx" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig ccache distcc distlocks fixpackages sandbox sfperms strict" GENTOO_MIRRORS="http://gentoo.chem.wisc.edu/gentoo ftp://gentoo.chem/wisc.edu/gentoo http://gentoo.mirrors.tds.net/gentoo http://gentoo.osuosl.org http://www.ibiblio.org/pub/Linux/distributions/gentoo" LANG="en_US" LC_ALL="en_US" LDFLAGS="-Wl,-O1" LINGUAS="en_US" MAKEOPTS="-j5" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://192.168.123.250/gentoo-portage" USE="x86 3dnow 3dnowex 3dnowext X X509 a52 aac aalib acl acpi adns alsa amd apm applet artworkextra asm async audiofile avi bash-completion bcmath berkdb bidi bitmap-fonts bl bonobo bzip2 bzlib c++ calendar caps ccache cdb cdda cddb cdinstall cdio cdparanoia cdr cdrom clamav codecs cpdflib cracklib crypt css cups curl curlwrappers custom-cflags dga dict dio directfb dnd dpms droproot dts dv dvb dvd dvdr dvdread dxr3 edl encode exif extensions f77 faac faad fame fastcgi fb fbcon fbdev fbsplash ffmpeg fftw firefox flac flash foomaticdb fortran freetype ftp gd gdbm ggi gif gimpprint ginac glade glgd glibc-compat20 glibc-omitfp glut gmail gmailtimestamps gnome-print gnomedb gnutls gphoto2 gpm gs gstreamer gtk gtk2 gtkhtml id3 image imagemagick imap imlib imlib2 jack javadoc jikes joystick jpeg ladcca lame lcd lcms libcaca libclamav libg++ libvisual libwww lm_sensors logrotate lzo lzw lzw-tiff m17n-lib mad math mhash mikmod mime mjpeg mmap mmx mmxext mng monkey motif mp3 mpeg mpeg4 mplayer musicbrainz ncurses neXt netbeans network nls nocd nptl oav offensive ogg oggvorbis openal opengl osc oscache oss pam pcntl pcre pda pdf pdfkit pdflib perl pic png pnp portaudio posix ppds pthreads python qt quicktime rar rdesktop readline real recode rtc samba scanner sdl session sftplogging sharedmem shorten slang slp sndfile snmp sockets sox speedo spell sse ssl stream stroke subp subtitles svg svgz sysfs sysvipc tcltk tcpd tga theora threads thumbnail tidy tiff transcode truetype truetype-fonts type1 type1-fonts unicode usb userland userlocales utf8 vcd vcdimager vdesktop vhosts videos vidix virus-scan visualization vlm vnc vorbis win32codecs wmf wxgtk1 wxwindows x11vnc xanim xine xml xml2 xmlrpc xmms xosd xpm xprint xrandr xscreensaver xsl xv xvid xvmc yv12 zlib video_cards_ati128 video_cards_radeon linguas_en_US userland_GNU kernel_linux elibc_glibc" Unset: ASFLAGS, CTARGET
Created attachment 71657 [details] emerge_iptabes.log
This problem should be solved by iptables-1.3.4 released on 3rd of November (See Changelog at netfilter.org).
thanks, 1.3.4 now in portage