diff options
author | Patrick McHardy <kaber@trash.net> | 2014-02-05 15:03:38 +0000 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2014-02-06 09:44:10 +0100 |
commit | cc4723ca316742891954efa346298e7c747c0d17 (patch) | |
tree | 998eae9bbf8de6eeeb75c633921b8ab2e28cc258 /net/ipv6/netfilter/Kconfig | |
parent | 64d46806b6218c97f68742c5663a8ae3a5fbe838 (diff) | |
download | op-kernel-dev-cc4723ca316742891954efa346298e7c747c0d17.zip op-kernel-dev-cc4723ca316742891954efa346298e7c747c0d17.tar.gz |
netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc parts
Currently the nft_reject module depends on symbols from ipv6. This is
wrong since no generic module should force IPv6 support to be loaded.
Split up the module into AF-specific and a generic part.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/ipv6/netfilter/Kconfig')
-rw-r--r-- | net/ipv6/netfilter/Kconfig | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/net/ipv6/netfilter/Kconfig b/net/ipv6/netfilter/Kconfig index 35750df..4bff1f2 100644 --- a/net/ipv6/netfilter/Kconfig +++ b/net/ipv6/netfilter/Kconfig @@ -50,6 +50,11 @@ config NFT_CHAIN_NAT_IPV6 packet transformations such as the source, destination address and source and destination ports. +config NFT_REJECT_IPV6 + depends on NF_TABLES_IPV6 + default NFT_REJECT + tristate + config IP6_NF_IPTABLES tristate "IP6 tables support (required for filtering)" depends on INET && IPV6 |