diff options
author | Florian Westphal <fw@strlen.de> | 2013-04-17 18:45:25 -0400 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2013-04-18 18:22:55 -0400 |
commit | d37d696804a83479f240b397670a07ccb53a7417 (patch) | |
tree | 5c56b44f435bcd8b93c17aa02ffc472c4d656056 | |
parent | f229f6ce481ceb33a966311722b8ef0cb6c25de7 (diff) |
netfilter: xt_rpfilter: depend on raw or mangle table
rpfilter is only valid in raw/mangle PREROUTING, i.e.
RPFILTER=y|m is useless without raw or mangle table support.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
-rw-r--r-- | net/ipv4/netfilter/Kconfig | 2 | ||||
-rw-r--r-- | net/ipv6/netfilter/Kconfig | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/net/ipv4/netfilter/Kconfig b/net/ipv4/netfilter/Kconfig index 0d755c50994b..e7916c193932 100644 --- a/net/ipv4/netfilter/Kconfig +++ b/net/ipv4/netfilter/Kconfig | |||
@@ -71,7 +71,7 @@ config IP_NF_MATCH_ECN | |||
71 | 71 | ||
72 | config IP_NF_MATCH_RPFILTER | 72 | config IP_NF_MATCH_RPFILTER |
73 | tristate '"rpfilter" reverse path filter match support' | 73 | tristate '"rpfilter" reverse path filter match support' |
74 | depends on NETFILTER_ADVANCED | 74 | depends on NETFILTER_ADVANCED && (IP_NF_MANGLE || IP_NF_RAW) |
75 | ---help--- | 75 | ---help--- |
76 | This option allows you to match packets whose replies would | 76 | This option allows you to match packets whose replies would |
77 | go out via the interface the packet came in. | 77 | go out via the interface the packet came in. |
diff --git a/net/ipv6/netfilter/Kconfig b/net/ipv6/netfilter/Kconfig index c72532a60d88..4433ab40e7de 100644 --- a/net/ipv6/netfilter/Kconfig +++ b/net/ipv6/netfilter/Kconfig | |||
@@ -105,7 +105,7 @@ config IP6_NF_MATCH_MH | |||
105 | 105 | ||
106 | config IP6_NF_MATCH_RPFILTER | 106 | config IP6_NF_MATCH_RPFILTER |
107 | tristate '"rpfilter" reverse path filter match support' | 107 | tristate '"rpfilter" reverse path filter match support' |
108 | depends on NETFILTER_ADVANCED | 108 | depends on NETFILTER_ADVANCED && (IP6_NF_MANGLE || IP6_NF_RAW) |
109 | ---help--- | 109 | ---help--- |
110 | This option allows you to match packets whose replies would | 110 | This option allows you to match packets whose replies would |
111 | go out via the interface the packet came in. | 111 | go out via the interface the packet came in. |