Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 46a246c4 authored by David S. Miller's avatar David S. Miller
Browse files

netfilter: Remove NOTRACK/RAW dependency on NETFILTER_ADVANCED. 



Distributions are using this in their default scripts, so don't hide
them behind the advanced setting.

Reported-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent c16a98ed

net/ipv4/netfilter/Kconfig

+0 −1
Original line number Diff line number Diff line
@@ -325,7 +325,6 @@ config IP_NF_TARGET_TTL 
# raw + specific targets

config IP_NF_RAW

	tristate  'raw table support (required for NOTRACK/TRACE)'

	depends on NETFILTER_ADVANCED

	help

	  This option adds a `raw' table to iptables. This table is the very

	  first in the netfilter framework and hooks in at the PREROUTING

net/ipv6/netfilter/Kconfig

+0 −1
Original line number Diff line number Diff line
@@ -186,7 +186,6 @@ config IP6_NF_MANGLE 


config IP6_NF_RAW

	tristate  'raw table support (required for TRACE)'

	depends on NETFILTER_ADVANCED

	help

	  This option adds a `raw' table to ip6tables. This table is the very

	  first in the netfilter framework and hooks in at the PREROUTING

net/netfilter/Kconfig

+0 −1
Original line number Diff line number Diff line
@@ -542,7 +542,6 @@ config NETFILTER_XT_TARGET_NOTRACK 
	tristate  '"NOTRACK" target support'

	depends on IP_NF_RAW || IP6_NF_RAW

	depends on NF_CONNTRACK

	depends on NETFILTER_ADVANCED

	help

	  The NOTRACK target allows a select rule to specify

	  which packets *not* to enter the conntrack/NAT