&#9474; &#9474; <*> Connection tracking (required for masq/NAT)                     &#9474; &#9474;
  &#9474; &#9474; [ ]   Connection tracking flow accounting                           &#9474; &#9474;
  &#9474; &#9474; [ ]   Connection mark tracking support                              &#9474; &#9474;
  &#9474; &#9474; [ ]   Connection tracking events (EXPERIMENTAL)                     &#9474; &#9474;
  &#9474; &#9474; < >   SCTP protocol connection tracking support (EXPERIMENTAL)      &#9474; &#9474;
  &#9474; &#9474; < >   FTP protocol support                                          &#9474; &#9474;
  &#9474; &#9474; < >   IRC protocol support                                          &#9474; &#9474;
  &#9474; &#9474; < >   NetBIOS name service protocol support (EXPERIMENTAL)          &#9474; &#9474;
  &#9474; &#9474; < >   TFTP protocol support                                         &#9474; &#9474;
  &#9474; &#9474; < >   Amanda backup protocol support                                &#9474; &#9474;
  &#9474; &#9474; < >   PPTP protocol support                                         &#9474; &#9474;
  &#9474; &#9474; <*> IP Userspace queueing via NETLINK (OBSOLETE)                    &#9474; &#9474;
  &#9474; &#9474; <*> IP tables support (required for filtering/masq/NAT)             &#9474; &#9474;
  &#9474; &#9474; < >   IP range match support                                        &#9474; &#9474;
  &#9474; &#9474; < >   Multiple port match support                                   &#9474; &#9474;
  &#9474; &#9474; < >   TOS match support                                             &#9474; &#9474;
  &#9474; &#9474; < >   recent match support                                          &#9474; &#9474;
  &#9474; &#9474; < >   ECN match support                                             &#9474; &#9474;
  &#9474; &#9474; < >   DSCP match support                                            &#9474; &#9474;
  &#9474; &#9474; < >   AH/ESP match support                                          &#9474; &#9474;
  &#9474; &#9474; < >   TTL match support                                             &#9474; &#9474;
  &#9474; &#9474; < >   Owner match support                                           &#9474; &#9474;
  &#9474; &#9474; < >   address type match support                                    &#9474; &#9474;
  &#9474; &#9474; < >   hashlimit match support                                       &#9474; &#9474;
  &#9474; &#9474; <*>   Packet filtering                                              &#9474; &#9474;
  &#9474; &#9474; < >     REJECT target support                                       &#9474; &#9474;
  &#9474; &#9474; < >   LOG target support                                            &#9474; &#9474;
  &#9474; &#9474; < >   ULOG target support (OBSOLETE)                                &#9474; &#9474;
  &#9474; &#9474; < >   TCPMSS target support                                         &#9474; &#9474;
  &#9474; &#9474; < >   Full NAT                                                      &#9474; &#9474;
  &#9474; &#9474; < >   Packet mangling                                               &#9474; &#9474;
  &#9474; &#9474; < >   raw table support (required for NOTRACK/TRACE)                &#9474; &#9474;
  &#9474; &#9474; < > ARP tables support                                              &#9474; &#9474;