Changeset 3caf3ea in freewrt

Timestamp:

Jun 13, 2007, 2:24:23 PM (19 years ago)

Author:

Thorsten Glaser <tg@…>

Children:

bcc8db5

Parents:

2ab404f

Message:

some “make the iptables stuff work schnellschnellschnell because I need
it working for something” – interested parties should still fix it…

git-svn-id: ​svn://www.freewrt.org/trunk/freewrt@2778 afb5a338-a214-0410-bd46-81f09a774fd1

Files:

• mk/modules.mk (modified) (1 diff)
• package/iptables/Config.in (modified) (1 diff)
• target/linux/config/Config.in.netfilter (modified) (2 diffs)

mk/modules.mk

@@ -271 +271 @@
 $(eval $(call KMOD_template,IP_NF_MATCH_HASHLIMIT,nf-ip-match-hashlimit,\
         $(MODULES_DIR)/kernel/net/ipv4/netfilter/ipt_hashlimit \
+,55))
+
+$(eval $(call KMOD_template,IP_NF_MATCH_CONNTRACK,nf-ip-match-conntrack,\
+        $(MODULES_DIR)/kernel/net/ipv4/netfilter/ipt_conntrack \
+,55))
+
+$(eval $(call KMOD_template,IP_NF_MATCH_STATE,nf-ip-match-state,\
+        $(MODULES_DIR)/kernel/net/ipv4/netfilter/ipt_state \
 ,55))
 

package/iptables/Config.in

@@ -15 +15 @@
         select FWRT_KPACKAGE_KMOD_IP_NF_NAT
         select FWRT_KPACKAGE_KMOD_IP_NF_TARGET_MASQUERADE
+        select FWRT_KPACKAGE_KMOD_IP_NF_TARGET_REJECT
+        select FWRT_KPACKAGE_KMOD_IP_NF_MATCH_STATE
+        select FWRT_KPACKAGE_KMOD_IP_NF_MATCH_CONNTRACK
         help
           IPv4 firewall, NAT, and packet mangling tools.

target/linux/config/Config.in.netfilter

@@ -102 +102 @@
         default n
 
-config FWRT_KERNEL_IP_NF_MATCH_STATE
-        tristate
-        default n
-
-config FWRT_KERNEL_IP_NF_MATCH_CONNTRACK
+# cannot be FWRT_KERNEL_IP_NF_MATCH_STATE because
+# netfilter is built as a module -> this'll always be
+# a module, too
+config FWRT_KPACKAGE_KMOD_IP_NF_MATCH_STATE
+        tristate
+        default n
+
+# cannot be FWRT_KERNEL_IP_NF_MATCH_CONNTRACK because
+# netfilter is built as a module -> this'll always be
+# a module, too
+config FWRT_KPACKAGE_KMOD_IP_NF_MATCH_CONNTRACK
         tristate
         default n
@@ -213 +219 @@
         bool 'Connection mark tracking support'
         depends FWRT_KPACKAGE_KMOD_IP_NF_CONNTRACK
+        select FWRT_KERNEL_IP_NF_MATCH_CONNMARK
         help
           This option enables support for connection marks, used by the