]> git.ipfire.org Git - people/ms/linux.git/commitdiff
netfilter: layer7: disable removed conntrack layer3 module handling v6.0-layer7
authorArne Fitzenreiter <arne_f@ipfire.org>
Wed, 14 Oct 2020 13:09:13 +0000 (15:09 +0200)
committerMichael Tremer <michael.tremer@ipfire.org>
Wed, 28 Sep 2022 09:35:17 +0000 (09:35 +0000)
this was removed with linux kernel 4.19.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
net/netfilter/xt_layer7.c

index 565d2c99dcc51ebc3f275d38caf4388c6764ee4b..a7eb760123bf51826396e2a4c58ec6c9e739f14b 100644 (file)
@@ -564,6 +564,7 @@ match(const struct sk_buff *skbin,
        return (pattern_result ^ info->invert);
 }
 
+/*
 // load nf_conntrack_ipv4
 #if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 35)
 static int
@@ -608,14 +609,15 @@ check(const char *tablename, const void *inf,
                nf_ct_l3proto_module_put(match->family);
        }
 #endif
+*/
 
 static struct xt_match xt_layer7_match[] __read_mostly = {
 {
        .name           = "layer7",
        .family         = NFPROTO_IPV4,
-       .checkentry     = check,
+//     .checkentry     = check,
        .match          = match,
-       .destroy        = destroy,
+//     .destroy        = destroy,
        .matchsize      = sizeof(struct xt_layer7_info),
        .me             = THIS_MODULE
 }
@@ -631,7 +633,7 @@ static const struct proc_ops layer7_numpackets_proc_fops = {
 
 static int __init xt_layer7_init(void)
 {
-       need_conntrack();
+//     need_conntrack();
 
        // Register proc interface
        proc_create_data("layer7_numpackets", 0644,