From: Arne Fitzenreiter <arne_f@ipfire.org>
Date: Wed, 14 Oct 2020 13:09:13 +0000 (+0200)
Subject: netfilter: layer7: disable removed conntrack layer3 module handling
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fheads%2Fv6.0-layer7;p=people%2Fms%2Flinux.git

netfilter: layer7: disable removed conntrack layer3 module handling

this was removed with linux kernel 4.19.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
---

diff --git a/net/netfilter/xt_layer7.c b/net/netfilter/xt_layer7.c
index 565d2c99dcc5..a7eb760123bf 100644
--- a/net/netfilter/xt_layer7.c
+++ b/net/netfilter/xt_layer7.c
@@ -564,6 +564,7 @@ match(const struct sk_buff *skbin,
 	return (pattern_result ^ info->invert);
 }
 
+/*
 // load nf_conntrack_ipv4
 #if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 35)
 static int
@@ -608,14 +609,15 @@ check(const char *tablename, const void *inf,
 		nf_ct_l3proto_module_put(match->family);
 	}
 #endif
+*/
 
 static struct xt_match xt_layer7_match[] __read_mostly = {
 {
 	.name		= "layer7",
 	.family		= NFPROTO_IPV4,
-	.checkentry	= check,
+//	.checkentry	= check,
 	.match		= match,
-	.destroy	= destroy,
+//	.destroy	= destroy,
 	.matchsize	= sizeof(struct xt_layer7_info),
 	.me		= THIS_MODULE
 }
@@ -631,7 +633,7 @@ static const struct proc_ops layer7_numpackets_proc_fops = {
 
 static int __init xt_layer7_init(void)
 {
-	need_conntrack();
+//	need_conntrack();
 
 	// Register proc interface
 	proc_create_data("layer7_numpackets", 0644,