From dbf92ae45a4d54082faefebc3ebca06f5f549a23 Mon Sep 17 00:00:00 2001 From: pkubaj Date: Sat, 30 Sep 2017 18:34:01 +0200 Subject: Remove multicast, WAN router, support iptables Multicast and WAN router are not useful on BMC, while iptables is quite useful. This patch only enables iptables for IPv4, support for IPv6 requires enabling other options. --- meta-raptor/meta-asus/recipes-kernel/linux/files/defconfig | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/meta-raptor/meta-asus/recipes-kernel/linux/files/defconfig b/meta-raptor/meta-asus/recipes-kernel/linux/files/defconfig index 5543b09..728dd74 100644 --- a/meta-raptor/meta-asus/recipes-kernel/linux/files/defconfig +++ b/meta-raptor/meta-asus/recipes-kernel/linux/files/defconfig @@ -342,7 +342,7 @@ CONFIG_XFRM=y # CONFIG_XFRM_STATISTICS is not set # CONFIG_NET_KEY is not set CONFIG_INET=y -CONFIG_IP_MULTICAST=y +#CONFIG_IP_MULTICAST=y # CONFIG_IP_ADVANCED_ROUTER is not set CONFIG_IP_FIB_HASH=y CONFIG_IP_PNP=y @@ -389,7 +389,14 @@ CONFIG_IPV6_NDISC_NODETYPE=y # CONFIG_IPV6_MULTIPLE_TABLES is not set # CONFIG_IPV6_MROUTE is not set # CONFIG_NETWORK_SECMARK is not set -# CONFIG_NETFILTER is not set +CONFIG_NETFILTER=y +CONFIG_NETFILTER_XTABLES=y +CONFIG_IP_NF_IPTABLES=y +CONFIG_NF_CONNTRACK=y +CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y +CONFIG_NF_CONNTRACK_IPV4=y +CONFIG_IP_NF_FILTER=y +CONFIG_IP_NF_TARGET_REJECT=y # CONFIG_IP_DCCP is not set # CONFIG_IP_SCTP is not set # CONFIG_TIPC is not set @@ -405,7 +412,7 @@ CONFIG_VLAN_8021Q=m # CONFIG_X25 is not set # CONFIG_LAPB is not set # CONFIG_ECONET is not set -CONFIG_WAN_ROUTER=y +#CONFIG_WAN_ROUTER=y # CONFIG_NET_SCHED is not set # -- cgit v1.1