iptables-1.3.5-r2 supported the "extensions" USE flag, which, when enabled, would compile iptables against the currently installed kernel headers and build the supported extensions. iptables-1.3.5-r3 tried to split this USE flag into two new flags: "imq" and "l7filter". The problem is that it left no way to build the built-in extensions when both imq and l7filter are disabled. I upgraded my iptables to 1.3.5-r3, and suddenly the connbytes match extension just disappeared! Please correct the ebuild so that it provides a way of building the extensions supported by the currently installed kernel without needing imq or l7filter.
Martin fixed this in iptables-1.3.5-r4 that reintroduces the extensions use flag for this purpose. I'm sorry I neglected this in iptables-1.3.5-r3.
