I'm not sure how far you're going to get with this, I'm stuck with a millicode problem that won't go away. The "millicode" problem is where cc decides to add some function calls to do things like implement '%' in C and cranking optimisation up does not make these calls go away. With no matching functions in the kernel, ipfilter won't link against it and hence won't load :-(
Darren
