--- a/extensions/libxt_conntrack.c +++ b/extensions/libxt_conntrack.c @@ -1399,6 +1399,7 @@ static int conntrack3_mt6_xlate(struct x } static struct xtables_match conntrack_mt_reg[] = { +#ifndef NO_LEGACY { .version = XTABLES_VERSION, .name = "conntrack", @@ -1474,6 +1475,7 @@ static struct xtables_match conntrack_mt .alias = conntrack_print_name_alias, .x6_options = conntrack2_mt_opts, }, +#endif { .version = XTABLES_VERSION, .name = "conntrack", @@ -1506,6 +1508,7 @@ static struct xtables_match conntrack_mt .x6_options = conntrack3_mt_opts, .xlate = conntrack3_mt6_xlate, }, +#ifndef NO_LEGACY { .family = NFPROTO_UNSPEC, .name = "state", @@ -1536,6 +1539,8 @@ static struct xtables_match conntrack_mt .x6_parse = state_ct23_parse, .x6_options = state_opts, }, +#endif +#ifndef NO_LEGACY { .family = NFPROTO_UNSPEC, .name = "state", @@ -1565,6 +1570,7 @@ static struct xtables_match conntrack_mt .x6_parse = state_parse, .x6_options = state_opts, }, +#endif }; void _init(void) --- a/extensions/libxt_CT.c +++ b/extensions/libxt_CT.c @@ -363,6 +363,7 @@ static int xlate_ct1_tg(struct xt_xlate } static struct xtables_target ct_target_reg[] = { +#ifndef NO_LEGACY { .family = NFPROTO_UNSPEC, .name = "CT", @@ -388,6 +389,7 @@ static struct xtables_target ct_target_r .x6_parse = ct_parse_v1, .x6_options = ct_opts_v1, }, +#endif { .family = NFPROTO_UNSPEC, .name = "CT", @@ -403,6 +405,7 @@ static struct xtables_target ct_target_r .x6_options = ct_opts_v1, .xlate = xlate_ct1_tg, }, +#ifndef NO_LEGACY { .family = NFPROTO_UNSPEC, .name = "NOTRACK", @@ -441,6 +444,7 @@ static struct xtables_target ct_target_r .revision = 0, .version = XTABLES_VERSION, }, +#endif }; void _init(void) --- a/extensions/libxt_multiport.c +++ b/extensions/libxt_multiport.c @@ -591,6 +591,7 @@ static int multiport_xlate6_v1(struct xt } static struct xtables_match multiport_mt_reg[] = { +#ifndef NO_LEGACY { .family = NFPROTO_IPV4, .name = "multiport", @@ -621,6 +622,7 @@ static struct xtables_match multiport_mt .x6_options = multiport_opts, .xlate = multiport_xlate6, }, +#endif { .family = NFPROTO_IPV4, .name = "multiport",