< > Netfilter netlink interface │ │ │ │ < > Layer 3 Independent Connection tracking (EXPERIMENTAL) │ │ │ │ <*> Netfilter Xtables support (required for ip_tables) │ │ │ │ <*> "CLASSIFY" target support │ │ │ │ <*> "MARK" target support │ │ │ │ <*> "NFQUEUE" target Support │ │ │ │ <*> "comment" match support │ │ │ │ <*> "DCCP" protocol match support │ │ │ │ <*> "ESP" match support │ │ │ │ <*> "length" match support │ │ │ │ <*> "limit" match support │ │ │ │ <*> "mac" address match support │ │ │ │ <*> "mark" match support │ │ │ │ <*> IPsec "policy" match support │ │ │ │ <*> Multiple port match support │ │ │ │ <*> "pkttype" packet type match support │ │ │ │ <*> "quota" match support │ │ │ │ <*> "realm" match support │ │ │ │ <*> "sctp" protocol match support (EXPERIMENTAL) │ │ │ │ <*> "statistic" match support │ │ │ │ <*> "string" match support │ │ │ │ <*> "tcpmss" match support