From 21899cce22af1140e1315ffaab931e059e20e2d6 Mon Sep 17 00:00:00 2001 From: Arne Fitzenreiter Date: Mon, 18 May 2009 19:04:43 +0200 Subject: [PATCH] Fix layer7 kernel config --- config/kernel/kernel.config.i586-ipfire | 10 ++++++---- config/kernel/kernel.config.i586-ipfire-xen | 6 ++++-- config/rootfiles/packages/linux-xen | 2 ++ 3 files changed, 12 insertions(+), 6 deletions(-) diff --git a/config/kernel/kernel.config.i586-ipfire b/config/kernel/kernel.config.i586-ipfire index a39e0fdf2..0f187d546 100644 --- a/config/kernel/kernel.config.i586-ipfire +++ b/config/kernel/kernel.config.i586-ipfire @@ -1,7 +1,7 @@ # # Automatically generated make config: don't edit -# Linux kernel version: 2.6.27.21 -# Fri Apr 10 17:21:16 2009 +# Linux kernel version: 2.6.27.23-ipfire +# Mon May 18 14:11:11 2009 # # CONFIG_64BIT is not set CONFIG_X86_32=y @@ -540,7 +540,7 @@ CONFIG_NETFILTER_NETLINK=m CONFIG_NETFILTER_NETLINK_QUEUE=m CONFIG_NETFILTER_NETLINK_LOG=m CONFIG_NF_CONNTRACK=m -# CONFIG_NF_CT_ACCT is not set +CONFIG_NF_CT_ACCT=y CONFIG_NF_CONNTRACK_MARK=y CONFIG_NF_CONNTRACK_EVENTS=y CONFIG_NF_CT_PROTO_DCCP=m @@ -571,7 +571,7 @@ CONFIG_NETFILTER_XT_TARGET_TRACE=m CONFIG_NETFILTER_XT_TARGET_TCPMSS=m CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m CONFIG_NETFILTER_XT_MATCH_COMMENT=m -# CONFIG_NETFILTER_XT_MATCH_CONNBYTES is not set +CONFIG_NETFILTER_XT_MATCH_CONNBYTES=m CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=m CONFIG_NETFILTER_XT_MATCH_CONNMARK=m CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m @@ -594,6 +594,8 @@ CONFIG_NETFILTER_XT_MATCH_RATEEST=m CONFIG_NETFILTER_XT_MATCH_REALM=m CONFIG_NETFILTER_XT_MATCH_SCTP=m CONFIG_NETFILTER_XT_MATCH_STATE=m +CONFIG_NETFILTER_XT_MATCH_LAYER7=m +# CONFIG_NETFILTER_XT_MATCH_LAYER7_DEBUG is not set CONFIG_NETFILTER_XT_MATCH_STATISTIC=m CONFIG_NETFILTER_XT_MATCH_STRING=m CONFIG_NETFILTER_XT_MATCH_TCPMSS=m diff --git a/config/kernel/kernel.config.i586-ipfire-xen b/config/kernel/kernel.config.i586-ipfire-xen index 7753dae8d..fb53177af 100644 --- a/config/kernel/kernel.config.i586-ipfire-xen +++ b/config/kernel/kernel.config.i586-ipfire-xen @@ -443,7 +443,7 @@ CONFIG_NETFILTER_NETLINK=m CONFIG_NETFILTER_NETLINK_QUEUE=m CONFIG_NETFILTER_NETLINK_LOG=m CONFIG_NF_CONNTRACK=m -# CONFIG_NF_CT_ACCT is not set +CONFIG_NF_CT_ACCT=y CONFIG_NF_CONNTRACK_MARK=y CONFIG_NF_CONNTRACK_EVENTS=y CONFIG_NF_CT_PROTO_DCCP=m @@ -474,7 +474,7 @@ CONFIG_NETFILTER_XT_TARGET_TRACE=m CONFIG_NETFILTER_XT_TARGET_TCPMSS=m CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m CONFIG_NETFILTER_XT_MATCH_COMMENT=m -# CONFIG_NETFILTER_XT_MATCH_CONNBYTES is not set +CONFIG_NETFILTER_XT_MATCH_CONNBYTES=m CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=m CONFIG_NETFILTER_XT_MATCH_CONNMARK=m CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m @@ -497,6 +497,8 @@ CONFIG_NETFILTER_XT_MATCH_RATEEST=m CONFIG_NETFILTER_XT_MATCH_REALM=m CONFIG_NETFILTER_XT_MATCH_SCTP=m CONFIG_NETFILTER_XT_MATCH_STATE=m +CONFIG_NETFILTER_XT_MATCH_LAYER7=m +# CONFIG_NETFILTER_XT_MATCH_LAYER7_DEBUG is not set CONFIG_NETFILTER_XT_MATCH_STATISTIC=m CONFIG_NETFILTER_XT_MATCH_STRING=m CONFIG_NETFILTER_XT_MATCH_TCPMSS=m diff --git a/config/rootfiles/packages/linux-xen b/config/rootfiles/packages/linux-xen index c7d2e8e73..05c434206 100644 --- a/config/rootfiles/packages/linux-xen +++ b/config/rootfiles/packages/linux-xen @@ -1269,6 +1269,7 @@ lib/modules/KVER-ipfire-xen #lib/modules/KVER-ipfire-xen/kernel/net/netfilter/xt_TCPOPTSTRIP.ko #lib/modules/KVER-ipfire-xen/kernel/net/netfilter/xt_TRACE.ko #lib/modules/KVER-ipfire-xen/kernel/net/netfilter/xt_comment.ko +#lib/modules/KVER-ipfire-xen/kernel/net/netfilter/xt_connbytes.ko #lib/modules/KVER-ipfire-xen/kernel/net/netfilter/xt_connlimit.ko #lib/modules/KVER-ipfire-xen/kernel/net/netfilter/xt_connmark.ko #lib/modules/KVER-ipfire-xen/kernel/net/netfilter/xt_conntrack.ko @@ -1278,6 +1279,7 @@ lib/modules/KVER-ipfire-xen #lib/modules/KVER-ipfire-xen/kernel/net/netfilter/xt_hashlimit.ko #lib/modules/KVER-ipfire-xen/kernel/net/netfilter/xt_helper.ko #lib/modules/KVER-ipfire-xen/kernel/net/netfilter/xt_iprange.ko +#lib/modules/KVER-ipfire-xen/kernel/net/netfilter/xt_layer7.ko #lib/modules/KVER-ipfire-xen/kernel/net/netfilter/xt_length.ko #lib/modules/KVER-ipfire-xen/kernel/net/netfilter/xt_limit.ko #lib/modules/KVER-ipfire-xen/kernel/net/netfilter/xt_mac.ko -- 2.39.2