- added patch to support statically linking of iptables
- iptables-save/-restore is no longer experimental
diff --git a/INSTALL b/INSTALL
index 738dd99..59fe5ef 100644
--- a/INSTALL
+++ b/INSTALL
@@ -17,16 +17,16 @@
================================================================
FEELING BRAVE?
-1) If you want to try some extensions, you can do the following:
+1) The netfilter core team is maintaining a set of extensions / new
+ features which are not yet committed to the mainstream kernel tree.
+
+If you want to try some extensions, you can do the following:
% make patch-o-matic KERNEL_DIR=<<where-your-kernel-is>>
-This offers you a collection of maybe-broken maybe-cool third-part
+This offers you a collection of maybe-broken maybe-cool third-party
extensions. It will modify you kernel source (so back it up first!).
-
-2) If you want to test out `iptables-save' and `iptables-restore', you
-can use
- % make experimental
- % make install-experimental
+Most of them will require you to recompile / rebuild your kernel and
+modules.
================================================================
PROBLEMS YOU MAY ENCOUNTER:
@@ -42,6 +42,12 @@
% make BINDIR=/usr/bin LIBDIR=/usr/lib MANDIR=/usr/man
# make BINDIR=/usr/bin LIBDIR=/usr/lib MANDIR=/usr/man install
+4) If you want to build a statically linked version of the iptables binary,
+ without the need for loading the plugins at runtime (e.g. for an embedded
+ device or router-on-a-disk), please use
+
+ % make NO_SHARED_LIBS=1
+
NOTE: make sure you build with at least the correct LIBDIR=
specification, otherwise iptables(8) won't know where to find the
dynamic objects.