From patchwork Fri Sep 7 13:44:19 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: gio--- via openwrt-devel X-Patchwork-Id: 967385 X-Patchwork-Delegate: blogic@openwrt.org Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=pass (mailfrom) smtp.mailfrom=lists.openwrt.org (client-ip=2607:7c80:54:e::133; helo=bombadil.infradead.org; envelope-from=openwrt-devel-bounces+incoming=patchwork.ozlabs.org@lists.openwrt.org; receiver=) Authentication-Results: ozlabs.org; dmarc=none (p=none dis=none) header.from=lists.openwrt.org Authentication-Results: ozlabs.org; dkim=pass (2048-bit key; unprotected) header.d=lists.infradead.org header.i=@lists.infradead.org header.b="ZfwVsHAm"; dkim-atps=neutral Received: from bombadil.infradead.org (bombadil.infradead.org [IPv6:2607:7c80:54:e::133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 426JZv0nrvz9s55 for ; Fri, 7 Sep 2018 23:44:38 +1000 (AEST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20170209; h=Date:Sender:Content-Type: Subject:List-Help:Reply-To:List-Archive:List-Unsubscribe:List-Subscribe:From: List-Post:List-Id:Message-ID:MIME-Version:To:Cc:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Owner; bh=kIx3fEor9FlHmRvP9Ig1RIFBpJMmyN0IE+jXdpkIikY=; b=ZfwVsHAmsGfixDHCGOSUOVBY9N F8VBQK2BY1YHQXl+zrfVFm/u77Gj/oxSmKTNy++IRYzwq/xK50PGc3I6zYXhdvql+wgr1ne7phRIL HWNGPIYirhZlYKhFMrBGucnl6jQkml28jAFGXNTDGEyfuaNx5HA9GoqW5P8bCu60VWDTfWxUPGYH7 ZziWXhyyqSrmEaaeBo7ygKwQzTIIP1vZuhCILBPgAyrQW1N1u1UFiEunrIzj20+ZMXWHSqw75d+ko ERx0I8Kx0WzmXWn7dEqgoNqcumv3HVKnHukmiwYQkLhsvVxHeA2HFLGMtMvQUtU7mnxKzr0mmA0n6 3EQYbknw==; Received: from localhost ([127.0.0.1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.90_1 #2 (Red Hat Linux)) id 1fyH3b-00038h-V1; Fri, 07 Sep 2018 13:44:19 +0000 To: openwrt-devel@lists.openwrt.org MIME-Version: 1.0 Message-ID: List-Id: List-Post: X-Patchwork-Original-From: Steven Honson via openwrt-devel From: gio--- via openwrt-devel Precedence: list X-Mailman-Version: 2.1.21 X-BeenThere: openwrt-devel@lists.openwrt.org List-Subscribe: , List-Unsubscribe: , List-Archive: Reply-To: Steven Honson List-Help: Subject: [OpenWrt-Devel] [PATCH] kernel: nf-nathelper-extra depends on ipt-raw Sender: "openwrt-devel" Date: Fri, 07 Sep 2018 13:44:19 +0000 Errors-To: openwrt-devel-bounces+incoming=patchwork.ozlabs.org@lists.openwrt.org The sender domain has a DMARC Reject/Quarantine policy which disallows sending mailing list messages using the original "From" header. To mitigate this problem, the original message has been wrapped automatically by the mailing list software. As automatic helper assignment is disabled in recent Linux kernels, explicit rules must be added to the raw table for each helper. While commit f50a524 in the firewall3 project added a set of default rules and other additional related functionality, both this and the alternative manual methods of defining these rules require kmod-ipt-raw. Signed-off-by: Steven Honson --- package/kernel/linux/modules/netfilter.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) — 2.18.0 diff --git a/package/kernel/linux/modules/netfilter.mk b/package/kernel/linux/modules/netfilter.mk index 6d751cc658..3dc408b8d2 100644 --- a/package/kernel/linux/modules/netfilter.mk +++ b/package/kernel/linux/modules/netfilter.mk @@ -447,7 +447,7 @@ define KernelPackage/nf-nathelper-extra KCONFIG:=$(KCONFIG_NF_NATHELPER_EXTRA) FILES:=$(foreach mod,$(NF_NATHELPER_EXTRA-m),$(LINUX_DIR)/net/$(mod).ko) AUTOLOAD:=$(call AutoProbe,$(notdir $(NF_NATHELPER_EXTRA-m))) - DEPENDS:=+kmod-nf-nat +kmod-lib-textsearch + DEPENDS:=+kmod-nf-nat +kmod-lib-textsearch +kmod-ipt-raw endef define KernelPackage/nf-nathelper-extra/description