Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit d37d6968 authored Apr 17, 2013 by Florian Westphal Committed by Pablo Neira Ayuso Apr 19, 2013

netfilter: xt_rpfilter: depend on raw or mangle table



rpfilter is only valid in raw/mangle PREROUTING, i.e.
RPFILTER=y|m is useless without raw or mangle table support.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

parent f229f6ce

net/ipv4/netfilter/Kconfig

+1 −1

Original line number	Original line	Diff line number	Diff line
	@@ -71,7 +71,7 @@ config IP_NF_MATCH_ECN

	config IP_NF_MATCH_RPFILTER		config IP_NF_MATCH_RPFILTER
	tristate '"rpfilter" reverse path filter match support'		tristate '"rpfilter" reverse path filter match support'
	depends on NETFILTER_ADVANCED		depends on NETFILTER_ADVANCED && (IP_NF_MANGLE \|\| IP_NF_RAW)
	---help---		---help---
	This option allows you to match packets whose replies would		This option allows you to match packets whose replies would
	go out via the interface the packet came in.		go out via the interface the packet came in.

net/ipv6/netfilter/Kconfig

+1 −1

Original line number	Original line	Diff line number	Diff line
	@@ -105,7 +105,7 @@ config IP6_NF_MATCH_MH

	config IP6_NF_MATCH_RPFILTER		config IP6_NF_MATCH_RPFILTER
	tristate '"rpfilter" reverse path filter match support'		tristate '"rpfilter" reverse path filter match support'
	depends on NETFILTER_ADVANCED		depends on NETFILTER_ADVANCED && (IP6_NF_MANGLE \|\| IP6_NF_RAW)
	---help---		---help---
	This option allows you to match packets whose replies would		This option allows you to match packets whose replies would
	go out via the interface the packet came in.		go out via the interface the packet came in.