diff options
| author | pkubaj <pkubaj@users.noreply.github.com> | 2017-09-30 18:34:01 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-09-30 18:34:01 +0200 |
| commit | dbf92ae45a4d54082faefebc3ebca06f5f549a23 (patch) | |
| tree | 158e458d94deda309edc4714f5ecf7f5371c8d89 | |
| parent | e208d2fb646f915986d7e9f3cc4cc5b651a38e74 (diff) | |
| download | ast2050-yocto-openbmc-dbf92ae45a4d54082faefebc3ebca06f5f549a23.zip ast2050-yocto-openbmc-dbf92ae45a4d54082faefebc3ebca06f5f549a23.tar.gz | |
Remove multicast, WAN router, support iptables
Multicast and WAN router are not useful on BMC, while iptables is quite useful.
This patch only enables iptables for IPv4, support for IPv6 requires enabling other options.
| -rw-r--r-- | meta-raptor/meta-asus/recipes-kernel/linux/files/defconfig | 13 |
1 files changed, 10 insertions, 3 deletions
diff --git a/meta-raptor/meta-asus/recipes-kernel/linux/files/defconfig b/meta-raptor/meta-asus/recipes-kernel/linux/files/defconfig index 5543b09..728dd74 100644 --- a/meta-raptor/meta-asus/recipes-kernel/linux/files/defconfig +++ b/meta-raptor/meta-asus/recipes-kernel/linux/files/defconfig @@ -342,7 +342,7 @@ CONFIG_XFRM=y # CONFIG_XFRM_STATISTICS is not set # CONFIG_NET_KEY is not set CONFIG_INET=y -CONFIG_IP_MULTICAST=y +#CONFIG_IP_MULTICAST=y # CONFIG_IP_ADVANCED_ROUTER is not set CONFIG_IP_FIB_HASH=y CONFIG_IP_PNP=y @@ -389,7 +389,14 @@ CONFIG_IPV6_NDISC_NODETYPE=y # CONFIG_IPV6_MULTIPLE_TABLES is not set # CONFIG_IPV6_MROUTE is not set # CONFIG_NETWORK_SECMARK is not set -# CONFIG_NETFILTER is not set +CONFIG_NETFILTER=y +CONFIG_NETFILTER_XTABLES=y +CONFIG_IP_NF_IPTABLES=y +CONFIG_NF_CONNTRACK=y +CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y +CONFIG_NF_CONNTRACK_IPV4=y +CONFIG_IP_NF_FILTER=y +CONFIG_IP_NF_TARGET_REJECT=y # CONFIG_IP_DCCP is not set # CONFIG_IP_SCTP is not set # CONFIG_TIPC is not set @@ -405,7 +412,7 @@ CONFIG_VLAN_8021Q=m # CONFIG_X25 is not set # CONFIG_LAPB is not set # CONFIG_ECONET is not set -CONFIG_WAN_ROUTER=y +#CONFIG_WAN_ROUTER=y # CONFIG_NET_SCHED is not set # |
