RHEL and grsecurity: should I wait for the 2.6.20 patch?

[DirtyHarry]

Hello,

I have one more question before trying to install grsecurity on my RHEL 4 server (didn't ask for this OS, it was the only choice I had). Do you suggest me to install kernel 2.6.19.3 or wait for the grsecurity patch for 2.6.20 to be released?

I have also another problem - I need to specify a custom port for ip_conntrack_ftp - do I need to specify it in menuconfig?

Thanks!

[Thrawn]

If you compiled conntrack_ftp in your kernel append ip_conntrack_ftp.ports=21,2121 in your lilo/grub config, if compiled as module modprobe it with modprobe ip_conntrack_ftp ports=21,2121

[DirtyHarry]

Sorry to bother again; correct me if I am wrong - so, if I have a monolithic kernel, I simply add the config line in the bootloader; if I have a kernel which accepts loadable modules, I can use modprobe to load the module at startup, for example in rc.local.

Is it right?