Changeset 3651

Show
Ignore:
Timestamp:
11/18/07 19:50:57 (1 year ago)
Author:
n0-1
Message:

hackishly fix stateful firewalling for kernel 2.6

* there are major differences between 2.4 and 2.6,

as 2.6 makes use of layer 3 independent conntrack

* anyways, the whole iptables subsystem is FUBAR ATM.

Surprisingly, I have a complete rewrite of it in my
queue, which will also fix this issue in a better way.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/freewrt/mk/modules.mk

    r3572 r3651  
    314314$(eval $(call KMOD_template,IP_NF_MATCH_STATE,nf-ip-match-state,\ 
    315315        $(MODULES_DIR)/kernel/net/ipv4/netfilter/ipt_state \ 
     316,55)) 
     317else 
     318$(eval $(call KMOD_template,IP_NF_MATCH_STATE,nf-ip-match-state,\ 
     319        $(MODULES_DIR)/kernel/net/netfilter/xt_state \ 
    316320,55)) 
    317321endif 

  • trunk/freewrt/package/shorewall-common/Config.in

    r3567 r3651  
    33        tristate 
    44        default n 
     5        select FWRT_PACKAGE_IPTABLES 
    56        help 
    67          The Shoreline Firewall, more commonly known as "Shorewall", is a  

  • trunk/freewrt/target/linux/config/Config.in.netfilter

    r3599 r3651  
    107107config FWRT_KPACKAGE_KMOD_IP_NF_MATCH_STATE 
    108108        tristate 
     109        select FWRT_KPACKAGE_KMOD_NETFILTER_XT_MATCH_STATE if FWRT_LINUX_2_6 
     110        default n 
     111 
     112config FWRT_KPACKAGE_KMOD_NETFILTER_XT_MATCH_STATE 
     113        tristate 
     114        depends on FWRT_LINUX_2_6 
    109115        default n 
    110116