Not "ip contract" but  "ip conntrack"  ("connection tracking support").

---

From: tproxy-request@lists.balabit.hu
Sent: Tuesday, January 20, 2009 11:06 AM
To: 'tproxy@lists.balabit.hu'
Subject: TPROXY-4 and ip contract

Why do i need "ip contract" for using getsockopt with the option SO_ORIGINAL_DST?