From: Patrick McHardy <redacted>
Date: Mon, 21 Jul 2008 14:05:57 +0200

The idea was that NETFILTER_ADVANCED=n enables everything needed
by mainstream distributions and hides the rest. We can certainly
change the default for this option, but that makes NETFILTER_ADVANCED
pretty much useless.

A new feature cannot possibly be used by existing distributions.  I
think that's the main gripe.

Distributions themselves will enable the feature no matter what we
mark it's default as.

And once the feature thus becomes pervasive we can re-adjust the
default.