Personally, I don't see why we should support ipfilter as an LKM, because see below. I don't think kernels for firewall machines should _have_ LKM support. i agree. (below) but not all machines running ipfilter _are_ firewalls. this software is more useful than just firewalling.