summaryrefslogtreecommitdiff
path: root/include
diff options
context:
space:
mode:
authorFelix Fietkau <nbd@openwrt.org>2006-11-19 01:03:47 +0000
committerFelix Fietkau <nbd@openwrt.org>2006-11-19 01:03:47 +0000
commit0a2540a31397f19c54cf197dabc9beca8dfdfd87 (patch)
treedb46dcd717d5acfbbae7d0aed8cd2db72ab59d70 /include
parentf5669c81c36b94aea2a153dad659258e2e0711af (diff)
downloadmtk-20170518-0a2540a31397f19c54cf197dabc9beca8dfdfd87.zip
mtk-20170518-0a2540a31397f19c54cf197dabc9beca8dfdfd87.tar.gz
mtk-20170518-0a2540a31397f19c54cf197dabc9beca8dfdfd87.tar.bz2
reorganize nat helper packages, move ftp and irc nat to a package that is enabled by default, for security reasons - see #917 for more information
SVN-Revision: 5581
Diffstat (limited to 'include')
-rw-r--r--include/netfilter.mk8
1 files changed, 7 insertions, 1 deletions
diff --git a/include/netfilter.mk b/include/netfilter.mk
index ba1512e..1d8f4d8 100644
--- a/include/netfilter.mk
+++ b/include/netfilter.mk
@@ -85,6 +85,13 @@ IPT_NAT-$(CONFIG_IP_NF_TARGET_MIRROR) += $(P_V4)ipt_MIRROR
IPT_NAT-$(CONFIG_IP_NF_TARGET_REDIRECT) += $(P_V4)ipt_REDIRECT
IPT_NAT-$(CONFIG_IP_NF_TARGET_NETMAP) += $(P_V4)ipt_NETMAP
+IPT_NAT_DEFAULT-m :=
+IPT_NAT_DEFAULT-$(CONFIG_IP_NF_FTP) += $(P_V4)ip_conntrack_ftp
+IPT_NAT_DEFAULT-$(CONFIG_IP_NF_NAT_FTP) += $(P_V4)ip_nat_ftp
+IPT_NAT_DEFAULT-$(CONFIG_IP_NF_IRC) += $(P_V4)ip_conntrack_irc
+IPT_NAT_DEFAULT-$(CONFIG_IP_NF_NAT_IRC) += $(P_V4)ip_nat_irc
+IPT_NAT_DEFAULT-$(CONFIG_IP_NF_TFTP) += $(P_V4)ip_conntrack_tftp
+
IPT_NAT_EXTRA-m :=
IPT_NAT_EXTRA-$(CONFIG_IP_NF_AMANDA) += $(P_V4)ip_conntrack_amanda
IPT_NAT_EXTRA-$(CONFIG_IP_NF_CT_PROTO_GRE) += $(P_V4)ip_conntrack_proto_gre
@@ -102,7 +109,6 @@ IPT_NAT_EXTRA-$(CONFIG_IP_NF_NAT_SIP) += $(P_V4)ip_nat_sip
IPT_NAT_EXTRA-$(CONFIG_IP_NF_NAT_SNMP_BASIC) += $(P_V4)ip_nat_snmp_basic
IPT_NAT_EXTRA-$(CONFIG_IP_NF_SIP) += $(P_V4)ip_conntrack_sip
IPT_NAT_EXTRA-$(CONFIG_IP_NF_NAT_SIP) += $(P_V4)ip_nat_sip
-IPT_NAT_EXTRA-$(CONFIG_IP_NF_TFTP) += $(P_V4)ip_conntrack_tftp
IPT_QUEUE-m :=
IPT_QUEUE-$(CONFIG_IP_NF_QUEUE) += $(P_V4)ip_queue