From patchwork Thu May 19 07:54:06 2016 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: =?utf-8?q?Alin_N=C4=83stac?= X-Patchwork-Id: 623876 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from bombadil.infradead.org (bombadil.infradead.org [IPv6:2001:1868:205::9]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 3r9Ng42rQMz9t5Q for ; Thu, 19 May 2016 17:56:16 +1000 (AEST) Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.b=P4YnNWUk; dkim-atps=neutral Received: from localhost ([127.0.0.1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.80.1 #2 (Red Hat Linux)) id 1b3Imx-0000ZC-Mj; Thu, 19 May 2016 07:54:35 +0000 Received: from mail-wm0-x241.google.com ([2a00:1450:400c:c09::241]) by bombadil.infradead.org with esmtps (Exim 4.80.1 #2 (Red Hat Linux)) id 1b3Imu-0000XE-UL for lede-dev@lists.infradead.org; Thu, 19 May 2016 07:54:34 +0000 Received: by mail-wm0-x241.google.com with SMTP id s63so4179436wme.2 for ; Thu, 19 May 2016 00:54:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:to:subject:date:message-id; bh=DyGVqqh9ckF6Vh6Aln3umyUBbsnap6KMER+6Uxan87A=; b=P4YnNWUkdGyfcmkT7JANyMAJlrcuoL/FKKdao1HGeEHJk1gY/Z/YBmhUVD9AA1UVZ7 +gdgOiy05cj4w2KRGk/MrRGFEAjvcQYU3GekUAMtNLE3Ziayd1U1OMpfCUarhXzyHYC5 gfG5rjwxuXXJsYzgM1+/5nFaW25B4yRQljJDEkj/v+0x72nSl9pE/z1CBOqzikhQAU1b Tl7YMDh1l/twVqRr6Ad0eUKDPKaq8lNtNdN3ahrTjgICZ40ViMMgvSOQIGRznoMSDJEr R5EajG14kqdKuRjnHN6Wzq8PVjnqJiLZUltm3jdZ5BBangZ0jB9Xv7qey6Mgpy5UcznN roLQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id; bh=DyGVqqh9ckF6Vh6Aln3umyUBbsnap6KMER+6Uxan87A=; b=DdTHHHShd8ZkJeXIGDqicDXckoC26/6RtLZx/gGHNBH+ksJ7wqQI+nKZQ+G7iQM+Rq xP/EEMcm182MD7V9/cCcH2qTUdexmuBKWMuyy+AMkYJ55UonnG8r24BA0gyLojoyq/SL COYcuaCtQJAFQxI0P5FWw/iiVTux9bqbeR6vMD0CBon7OGaaBJpnP3o1or9jIIxQ8QBK x4Rs5/Hn4GyWppJBlqLtantpKe5690ACwpwCb7V4O0UHW1+Q3fAvbbpCOgASW7iX4VDB Y7h+FQGsRMxL2OD8+RrSqNpHrVvt5RZXXTVzJBoFgEd5Q1wrZkD0wjMv4S5hcdpGBdBZ J4dg== X-Gm-Message-State: AOPr4FWSb4f531S7nigu514H7haei2v5ZIBZb7ajEPd4hERJRljb2eYOfkWaIGWyEOxaMw== X-Received: by 10.194.241.227 with SMTP id wl3mr11917386wjc.168.1463644451248; Thu, 19 May 2016 00:54:11 -0700 (PDT) Received: from cplx250.edegem.eu.thmulti.com (14.125.146.82.ipv4.evonet.be. [82.146.125.14]) by smtp.gmail.com with ESMTPSA id az2sm12943746wjc.6.2016.05.19.00.54.10 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 19 May 2016 00:54:10 -0700 (PDT) From: Alin Nastac To: openwrt-devel@lists.openwrt.org, lede-dev@lists.infradead.org Date: Thu, 19 May 2016 09:54:06 +0200 Message-Id: <1463644446-4279-1-git-send-email-alin.nastac@gmail.com> X-Mailer: git-send-email 1.7.12.4 X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20160519_005433_122890_9CE1AD69 X-CRM114-Status: UNSURE ( 8.42 ) X-CRM114-Notice: Please train this message. X-Spam-Score: -2.7 (--) X-Spam-Report: SpamAssassin version 3.4.0 on bombadil.infradead.org summary: Content analysis details: (-2.7 points) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (alin.nastac[at]gmail.com) -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [2a00:1450:400c:c09:0:0:0:241 listed in] [list.dnswl.org] Subject: [LEDE-DEV] [PATCH] conntrack: enable support for netfilter conntrack zones X-BeenThere: lede-dev@lists.infradead.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: "Lede-dev" Errors-To: lede-dev-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org Storage of such zones is provided by a nf_ct_ext struct, hence conntrack memory foot print will not be increased if zones are not used. --- package/kernel/linux/modules/netfilter.mk | 1 + 1 file changed, 1 insertion(+) diff --git a/package/kernel/linux/modules/netfilter.mk b/package/kernel/linux/modules/netfilter.mk index 3b623e4..4d9c116 100644 --- a/package/kernel/linux/modules/netfilter.mk +++ b/package/kernel/linux/modules/netfilter.mk @@ -68,6 +68,7 @@ define KernelPackage/nf-conntrack KCONFIG:= \ CONFIG_NETFILTER=y \ CONFIG_NETFILTER_ADVANCED=y \ + CONFIG_NF_CONNTRACK_ZONES=y \ $(KCONFIG_NF_CONNTRACK) FILES:=$(foreach mod,$(NF_CONNTRACK-m),$(LINUX_DIR)/net/$(mod).ko) AUTOLOAD:=$(call AutoProbe,$(notdir $(NF_CONNTRACK-m)))