Simplify configure and add target optimizations,

[openwrt.git] / openwrt / package / iptables / kernelconfig.mk

diff --git a/openwrt/package/iptables/kernelconfig.mk b/openwrt/package/iptables/kernelconfig.mk
index 319cea8..bac26e2 100644 (file)
--- a/openwrt/package/iptables/kernelconfig.mk
+++ b/openwrt/package/iptables/kernelconfig.mk
@@ -17,22 +17,24 @@ ext-$(CONFIG_IP_NF_MATCH_LENGTH) += length
 ext-$(CONFIG_IP_NF_MATCH_TTL) += ttl
 ext-$(CONFIG_IP_NF_MATCH_TCPMSS) += tcpmss
 ext-$(CONFIG_IP_NF_MATCH_HELPER) += helper
 ext-$(CONFIG_IP_NF_MATCH_TTL) += ttl
 ext-$(CONFIG_IP_NF_MATCH_TCPMSS) += tcpmss
 ext-$(CONFIG_IP_NF_MATCH_HELPER) += helper

-ext-$(CONFIG_IP_NF_MATCH_STATE) += state
-ext-$(CONFIG_IP_NF_MATCH_CONNTRACK) += conntrack
+#ext-$(CONFIG_IP_NF_MATCH_STATE) += state
+#ext-$(CONFIG_IP_NF_MATCH_CONNTRACK) += conntrack

 ext-$(CONFIG_IP_NF_MATCH_UNCLEAN) += unclean
 ext-$(CONFIG_IP_NF_MATCH_OWNER) += owner
 ext-$(CONFIG_IP_NF_MATCH_PHYSDEV) += physdev
 ext-$(CONFIG_IP_NF_MATCH_UNCLEAN) += unclean
 ext-$(CONFIG_IP_NF_MATCH_OWNER) += owner
 ext-$(CONFIG_IP_NF_MATCH_PHYSDEV) += physdev

-ext-$(CONFIG_IP_NF_TARGET_MASQUERADE) += MASQUERADE
+ext-$(CONFIG_IP_NF_MATCH_LAYER7) += layer7
+#ext-$(CONFIG_IP_NF_TARGET_MASQUERADE) += MASQUERADE

 ext-$(CONFIG_IP_NF_TARGET_REDIRECT) += REDIRECT
 ext-$(CONFIG_IP_NF_TARGET_REJECT) += REJECT
 ext-$(CONFIG_IP_NF_TARGET_TOS) += TOS
 ext-$(CONFIG_IP_NF_TARGET_ECN) += ECN
 ext-$(CONFIG_IP_NF_TARGET_DSCP) += DSCP
 ext-$(CONFIG_IP_NF_TARGET_MARK) += MARK
 ext-$(CONFIG_IP_NF_TARGET_REDIRECT) += REDIRECT
 ext-$(CONFIG_IP_NF_TARGET_REJECT) += REJECT
 ext-$(CONFIG_IP_NF_TARGET_TOS) += TOS
 ext-$(CONFIG_IP_NF_TARGET_ECN) += ECN
 ext-$(CONFIG_IP_NF_TARGET_DSCP) += DSCP
 ext-$(CONFIG_IP_NF_TARGET_MARK) += MARK

-ext-$(CONFIG_IP_NF_TARGET_LOG) += LOG
+#ext-$(CONFIG_IP_NF_TARGET_LOG) += LOG

 ext-$(CONFIG_IP_NF_TARGET_ULOG) += ULOG
 ext-$(CONFIG_IP_NF_TARGET_ULOG) += ULOG

-ext-$(CONFIG_IP_NF_TARGET_TCPMSS) += TCPMSS
+#ext-$(CONFIG_IP_NF_TARGET_TCPMSS) += TCPMSS
+ext-$(CONFIG_IP_NF_TARGET_NETMAP) += NETMAP

 
 # add extensions that don't depend on kernel config
 ext-m += TTL
 
 # add extensions that don't depend on kernel config
 ext-m += TTL

-ext-y += icmp standard tcp udp
+ext-y += icmp standard tcp udp state MASQUERADE conntrack TCPMSS LOG