Commit acda0743 authored by Laszlo Attila Toth's avatar Laszlo Attila Toth Committed by David S. Miller
Browse files

xt_socket: checks for the state of nf_conntrack 



xt_socket can use connection tracking, and checks whether it is a module.

Signed-off-by: default avatarLaszlo Attila Toth <panther@balabit.hu>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 689c96cc

net/netfilter/Kconfig

+1 −0
Original line number Diff line number Diff line
@@ -837,6 +837,7 @@ config NETFILTER_XT_MATCH_SOCKET 
	depends on NETFILTER_TPROXY

	depends on NETFILTER_XTABLES

	depends on NETFILTER_ADVANCED

	depends on !NF_CONNTRACK || NF_CONNTRACK

	select NF_DEFRAG_IPV4

	help

	  This option adds a `socket' match, which can be used to match