From: Qingfang Deng Date: Tue, 20 Jan 2026 05:57:46 +0000 (+0800) Subject: netfilter: remove nf-conntrack6 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5b61a50244ebc82096f5949de294ad69851e1fd6;p=thirdparty%2Fopenwrt.git netfilter: remove nf-conntrack6 nf_conntrack_ipv6 is no longer a separate kernel module, so remove it. Signed-off-by: Qingfang Deng Link: https://github.com/openwrt/openwrt/pull/21612 Signed-off-by: Robert Marko --- diff --git a/include/netfilter.mk b/include/netfilter.mk index 255e478b687..21595403180 100644 --- a/include/netfilter.mk +++ b/include/netfilter.mk @@ -358,7 +358,6 @@ $(eval $(if $(NF_KMOD),$(call nf_add,NFT_CONNLIMIT,CONFIG_NFT_CONNLIMIT, $(P_XT) IPT_BUILTIN += $(NF_IPT-y) $(NF_IPT-m) IPT_BUILTIN += $(IPT_CORE-y) $(IPT_CORE-m) IPT_BUILTIN += $(NF_CONNTRACK-y) -IPT_BUILTIN += $(NF_CONNTRACK6-y) IPT_BUILTIN += $(IPT_CONNTRACK-y) IPT_BUILTIN += $(IPT_CONNTRACK_EXTRA-y) IPT_BUILTIN += $(IPT_EXTRA-y) diff --git a/package/kernel/linux/modules/netfilter.mk b/package/kernel/linux/modules/netfilter.mk index 96531b1e080..fa490857104 100644 --- a/package/kernel/linux/modules/netfilter.mk +++ b/package/kernel/linux/modules/netfilter.mk @@ -120,23 +120,11 @@ endef $(eval $(call KernelPackage,nf-conntrack)) -define KernelPackage/nf-conntrack6 - SUBMENU:=$(NF_MENU) - TITLE:=Netfilter IPv6 connection tracking - KCONFIG:=$(KCONFIG_NF_CONNTRACK6) - DEPENDS:=@IPV6 +kmod-nf-conntrack - FILES:=$(foreach mod,$(NF_CONNTRACK6-m),$(LINUX_DIR)/net/$(mod).ko) - AUTOLOAD:=$(call AutoProbe,$(notdir $(NF_CONNTRACK6-m))) -endef - -$(eval $(call KernelPackage,nf-conntrack6)) - - define KernelPackage/nf-dup-inet SUBMENU:=$(NF_MENU) TITLE:=Netfilter nf_tables dup in ip/ip6/inet family support HIDDEN:=1 - DEPENDS:=+kmod-nf-conntrack +IPV6:kmod-nf-conntrack6 + DEPENDS:=+kmod-nf-conntrack KCONFIG:= \ CONFIG_NF_DUP_IPV4 \ CONFIG_NF_DUP_IPV6 @@ -187,7 +175,7 @@ define KernelPackage/nf-nat6 SUBMENU:=$(NF_MENU) TITLE:=Netfilter IPV6-NAT KCONFIG:=$(KCONFIG_NF_NAT6) - DEPENDS:=@IPV6 +kmod-nf-conntrack6 +kmod-nf-nat + DEPENDS:=@IPV6 +kmod-nf-nat FILES:=$(foreach mod,$(NF_NAT6-m),$(LINUX_DIR)/net/$(mod).ko) AUTOLOAD:=$(call AutoProbe,$(notdir $(NF_NAT6-m))) endef @@ -1135,7 +1123,7 @@ $(eval $(call KernelPackage,ipt-rpfilter)) define KernelPackage/nft-core SUBMENU:=$(NF_MENU) TITLE:=Netfilter nf_tables support - DEPENDS:=+kmod-nfnetlink +kmod-nf-reject +IPV6:kmod-nf-reject6 +IPV6:kmod-nf-conntrack6 +kmod-nf-nat +kmod-nf-log +IPV6:kmod-nf-log6 +kmod-lib-crc32c + DEPENDS:=+kmod-nfnetlink +kmod-nf-reject +IPV6:kmod-nf-reject6 +kmod-nf-nat +kmod-nf-log +IPV6:kmod-nf-log6 +kmod-lib-crc32c FILES:=$(foreach mod,$(NFT_CORE-m),$(LINUX_DIR)/net/$(mod).ko) AUTOLOAD:=$(call AutoProbe,$(notdir $(NFT_CORE-m))) KCONFIG:= \ diff --git a/package/kernel/nat46/Makefile b/package/kernel/nat46/Makefile index 4dc95ebffc1..45450f59ae1 100644 --- a/package/kernel/nat46/Makefile +++ b/package/kernel/nat46/Makefile @@ -15,7 +15,7 @@ PKG_LICENSE:=GPL-2.0 include $(INCLUDE_DIR)/package.mk define KernelPackage/nat46 - DEPENDS:=@IPV6 +kmod-nf-conntrack6 + DEPENDS:=@IPV6 +kmod-nf-conntrack TITLE:=Stateless NAT46 translation kernel module SECTION:=kernel SUBMENU:=Network Support diff --git a/package/network/config/firewall/Makefile b/package/network/config/firewall/Makefile index 7e62de5bf49..c3a02f7876a 100644 --- a/package/network/config/firewall/Makefile +++ b/package/network/config/firewall/Makefile @@ -30,7 +30,7 @@ define Package/firewall SECTION:=net CATEGORY:=Base system TITLE:=OpenWrt C Firewall - DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libiptext +IPV6:libiptext6 +libxtables +kmod-ipt-core +kmod-ipt-conntrack +IPV6:kmod-nf-conntrack6 +kmod-ipt-nat + DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libiptext +IPV6:libiptext6 +libxtables +kmod-ipt-core +kmod-ipt-conntrack +kmod-ipt-nat PROVIDES:=uci-firewall CONFLICTS:=firewall4 endef