From fbaf48387eb5e0e2bdc90d4c6f985a242a9fb0cc Mon Sep 17 00:00:00 2001 From: Hauke Mehrtens Date: Sat, 3 Nov 2018 00:31:22 +0100 Subject: kernel: netfilter: chain filters merged into nf_tables.ko In mainline kernel commit 02c7b25e5f5 ("netfilter: nf_tables: build-in filter chain type") all chain filters were merged into one file and into one kernel module to save some memory. The code protected by these configuration options CONFIG_NF_TABLES_BRIDGE, CONFIG_NF_TABLES_IPV4, CONFIG_NF_TABLES_ARP, CONFIG_NF_TABLES_IPV6, CONFIG_NF_TABLES_NETDEV and CONFIG_NF_TABLES_INET was merged into the nft_chain_filter.c file which is now always compiled into the nf_tables.ko file. This only happened in kernel 4.19 and OpenWrt has to select these as modules in older kennel versions. Mark them as build-in in the kernel 4.19 specific kernel configuration file which will then not be overwritten by the package specific settings which try to make them modular again. Signed-off-by: Hauke Mehrtens --- target/linux/generic/config-4.19 | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) (limited to 'target/linux') diff --git a/target/linux/generic/config-4.19 b/target/linux/generic/config-4.19 index f57824de86..0302cb6052 100644 --- a/target/linux/generic/config-4.19 +++ b/target/linux/generic/config-4.19 @@ -3370,12 +3370,12 @@ CONFIG_NF_NAT_MASQUERADE_IPV6=y # CONFIG_NF_SOCKET_IPV4 is not set # CONFIG_NF_SOCKET_IPV6 is not set # CONFIG_NF_TABLES is not set -# CONFIG_NF_TABLES_ARP is not set -# CONFIG_NF_TABLES_BRIDGE is not set -# CONFIG_NF_TABLES_INET is not set -# CONFIG_NF_TABLES_IPV4 is not set -# CONFIG_NF_TABLES_IPV6 is not set -# CONFIG_NF_TABLES_NETDEV is not set +CONFIG_NF_TABLES_ARP=y +CONFIG_NF_TABLES_BRIDGE=y +CONFIG_NF_TABLES_INET=y +CONFIG_NF_TABLES_IPV4=y +CONFIG_NF_TABLES_IPV6=y +CONFIG_NF_TABLES_NETDEV=y # CONFIG_NF_TABLES_SET is not set # CONFIG_NF_TPROXY_IPV4 is not set # CONFIG_NF_TPROXY_IPV6 is not set -- cgit v1.2.3