Patrick McHardy wrote:

quoted

quoted

	  Security table (IP_NF_SECURITY) [Y/n/?] (NEW) ?

...

This is only the NETFILTER_ADVANCED=n default (for SECURITY=y).
The netfilter defaults for NETFILTER_ADVANCED=n should be m/y for
things that are needed by mainstream distributions for normal
usage.

Don't ask what mainstream distributors would choose, ask how "make
oldconfig" or "make silentoldconfig" should behave.  They should not add
features that weren't there before and are not necessary to continue
using all features of the old configuration.
-- 
Stefan Richter
-=====-==--- -=== =-=-=
http://arcgraph.de/sr/