[kernel] netfilter: add a check for ip proto in netfilter_match_speedup patches ...

[openwrt.git] / target / linux / generic-2.6 / patches-2.6.25 / 140-netfilter_time.patch

diff --git a/target/linux/generic-2.6/patches-2.6.25/140-netfilter_time.patch b/target/linux/generic-2.6/patches-2.6.25/140-netfilter_time.patch
index 41787cc..6f62346 100644 (file)
--- a/target/linux/generic-2.6/patches-2.6.25/140-netfilter_time.patch
+++ b/target/linux/generic-2.6/patches-2.6.25/140-netfilter_time.patch
@@ -1,7 +1,5 @@
-Index: linux-2.6.25.4/include/linux/netfilter_ipv4/ipt_time.h
-===================================================================
 --- /dev/null
-+++ linux-2.6.25.4/include/linux/netfilter_ipv4/ipt_time.h
++++ b/include/linux/netfilter_ipv4/ipt_time.h
 @@ -0,0 +1,18 @@
 +#ifndef __ipt_time_h_included__
 +#define __ipt_time_h_included__
@@ -21,10 +19,8 @@ Index: linux-2.6.25.4/include/linux/netfilter_ipv4/ipt_time.h
 +
 +
 +#endif /* __ipt_time_h_included__ */
-Index: linux-2.6.25.4/net/ipv4/netfilter/ipt_time.c
-===================================================================
 --- /dev/null
-+++ linux-2.6.25.4/net/ipv4/netfilter/ipt_time.c
++++ b/net/ipv4/netfilter/ipt_time.c
 @@ -0,0 +1,180 @@
 +/*
 +  This is a module which is used for time matching
@@ -206,42 +202,36 @@ Index: linux-2.6.25.4/net/ipv4/netfilter/ipt_time.c
 +      r->tm_mon=i;
 +      r->tm_mday=work-__spm[i]+1;
 +}
-Index: linux-2.6.25.4/net/ipv4/netfilter/Kconfig
-===================================================================
---- linux-2.6.25.4.orig/net/ipv4/netfilter/Kconfig
-+++ linux-2.6.25.4/net/ipv4/netfilter/Kconfig
-@@ -63,6 +63,22 @@ config IP_NF_MATCH_IPP2P
-       help
-         Module for matching traffic of various Peer-to-Peer applications
+--- a/net/ipv4/netfilter/Kconfig
++++ b/net/ipv4/netfilter/Kconfig
+@@ -57,6 +57,20 @@ config IP_NF_IPTABLES
+         To compile it as a module, choose M here.  If unsure, say N.
  
-+
+ # The matches.
 +config IP_NF_MATCH_TIME
 +      tristate  'TIME match support'
-+      depends on IP_NF_IPTABLES
-+      help
-+        This option adds a `time' match, which allows you
-+        to match based on the packet arrival time/date
-+        (arrival time/date at the machine which netfilter is running on) or
-+        departure time/date (for locally generated packets).
-+
-+        If you say Y here, try iptables -m time --help for more information.
-+        If you want to compile it as a module, say M here and read
++      depends on IP_NF_IPTABLES
++      help
++        This option adds a `time' match, which allows you
++        to match based on the packet arrival time/date
++        (arrival time/date at the machine which netfilter is running on) or
++        departure time/date (for locally generated packets).
 +
-+        Documentation/modules.txt.  If unsure, say `N'.
++        If you say Y here, try iptables -m time --help for more information.
++        If you want to compile it as a module, say M here and read
 +
++        Documentation/modules.txt.  If unsure, say `N'.
 +
  config IP_NF_MATCH_RECENT
        tristate '"recent" match support'
        depends on IP_NF_IPTABLES
-Index: linux-2.6.25.4/net/ipv4/netfilter/Makefile
-===================================================================
---- linux-2.6.25.4.orig/net/ipv4/netfilter/Makefile
-+++ linux-2.6.25.4/net/ipv4/netfilter/Makefile
+--- a/net/ipv4/netfilter/Makefile
++++ b/net/ipv4/netfilter/Makefile
 @@ -47,6 +47,7 @@ obj-$(CONFIG_IP_NF_MATCH_ECN) += ipt_ecn
  obj-$(CONFIG_IP_NF_MATCH_RECENT) += ipt_recent.o
  obj-$(CONFIG_IP_NF_MATCH_TTL) += ipt_ttl.o
  obj-$(CONFIG_IP_NF_MATCH_SET) += ipt_set.o
 +obj-$(CONFIG_IP_NF_MATCH_TIME) += ipt_time.o
  
- obj-$(CONFIG_IP_NF_MATCH_IPP2P) += ipt_ipp2p.o
- 
+ # targets
+ obj-$(CONFIG_IP_NF_TARGET_CLUSTERIP) += ipt_CLUSTERIP.o