From 7805ea26a48382c2b10a697c898c5a936a0e4ee1 Mon Sep 17 00:00:00 2001 From: "cheng.qian_a" Date: Fri, 15 Jul 2022 15:41:53 +0800 Subject: [PATCH 1/3] =?UTF-8?q?=E5=A2=9E=E5=8A=A0iptables=E5=86=85?= =?UTF-8?q?=E6=A0=B8=E9=80=89=E9=A1=B9=EF=BC=8C=E6=94=AF=E6=8C=81=E7=BD=91?= =?UTF-8?q?=E7=BB=9C=E5=85=B1=E4=BA=AB?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: cheng.qian_a --- linux-5.10/arch/arm64/configs/rk3568_standard_defconfig | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig index 3324f56..44e37b2 100644 --- a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig +++ b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig @@ -937,8 +937,9 @@ CONFIG_NETFILTER_INGRESS=y # CONFIG_NETFILTER_NETLINK_QUEUE is not set # CONFIG_NETFILTER_NETLINK_LOG is not set # CONFIG_NETFILTER_NETLINK_OSF is not set -# CONFIG_NF_CONNTRACK is not set +CONFIG_NF_CONNTRACK=y # CONFIG_NF_LOG_NETDEV is not set +CONFIG_NF_NAT=y # CONFIG_NF_TABLES is not set CONFIG_NETFILTER_XTABLES=y @@ -1045,6 +1046,7 @@ CONFIG_IP_NF_IPTABLES=y # CONFIG_IP_NF_MATCH_RPFILTER is not set # CONFIG_IP_NF_MATCH_TTL is not set CONFIG_IP_NF_FILTER=y +CONFIG_IP_NF_NAT=y CONFIG_IP_NF_MANGLE=y # CONFIG_IP_NF_TARGET_ECN is not set # CONFIG_IP_NF_TARGET_TTL is not set -- Gitee From 24710695f2449d2dfe982217c285bb4aa2868e72 Mon Sep 17 00:00:00 2001 From: "cheng.qian_a" Date: Fri, 15 Jul 2022 20:01:12 +0800 Subject: [PATCH 2/3] =?UTF-8?q?=E5=86=85=E6=A0=B8=E6=94=AF=E6=8C=81iptable?= =?UTF-8?q?s=E7=9A=84=E6=B5=81=E9=87=8F=E9=99=90=E9=A2=9D=E6=89=80?= =?UTF-8?q?=E9=9C=80=E7=9A=84quota2=E4=BB=A5=E5=8F=8AREJECT?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: cheng.qian_a --- linux-5.10/arch/arm64/configs/rk3568_standard_defconfig | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig index 44e37b2..f9f61ed 100644 --- a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig +++ b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig @@ -1015,6 +1015,8 @@ CONFIG_NETFILTER_XT_MATCH_OWNER=y CONFIG_NETFILTER_XT_MATCH_POLICY=y CONFIG_NETFILTER_XT_MATCH_PKTTYPE=y CONFIG_NETFILTER_XT_MATCH_QUOTA=y +CONFIG_NETFILTER_XT_MATCH_QUOTA2=y +CONFIG_NETFILTER_XT_MATCH_QUOTA2_LOG=y # CONFIG_NETFILTER_XT_MATCH_RATEEST is not set # CONFIG_NETFILTER_XT_MATCH_REALM is not set # CONFIG_NETFILTER_XT_MATCH_RECENT is not set @@ -1039,13 +1041,14 @@ CONFIG_NETFILTER_XT_MATCH_U32=y # CONFIG_NF_DUP_IPV4 is not set # CONFIG_NF_LOG_ARP is not set # CONFIG_NF_LOG_IPV4 is not set -# CONFIG_NF_REJECT_IPV4 is not set +CONFIG_NF_REJECT_IPV4=y CONFIG_IP_NF_IPTABLES=y # CONFIG_IP_NF_MATCH_AH is not set # CONFIG_IP_NF_MATCH_ECN is not set # CONFIG_IP_NF_MATCH_RPFILTER is not set # CONFIG_IP_NF_MATCH_TTL is not set CONFIG_IP_NF_FILTER=y +CONFIG_IP_NF_TARGET_REJECT=y CONFIG_IP_NF_NAT=y CONFIG_IP_NF_MANGLE=y # CONFIG_IP_NF_TARGET_ECN is not set -- Gitee From 2938c02bf445f6fe9ecf0d78950bf744fe897039 Mon Sep 17 00:00:00 2001 From: "cheng.qian_a" Date: Fri, 29 Jul 2022 01:51:32 +0000 Subject: [PATCH 3/3] =?UTF-8?q?update=20linux-5.10/arch/arm64/configs/rk35?= =?UTF-8?q?68=5Fstandard=5Fdefconfig.=20=E5=88=A0=E9=99=A4quota2=5Flog?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- linux-5.10/arch/arm64/configs/rk3568_standard_defconfig | 1 - 1 file changed, 1 deletion(-) diff --git a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig index f9f61ed..9f15b7b 100644 --- a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig +++ b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig @@ -1016,7 +1016,6 @@ CONFIG_NETFILTER_XT_MATCH_POLICY=y CONFIG_NETFILTER_XT_MATCH_PKTTYPE=y CONFIG_NETFILTER_XT_MATCH_QUOTA=y CONFIG_NETFILTER_XT_MATCH_QUOTA2=y -CONFIG_NETFILTER_XT_MATCH_QUOTA2_LOG=y # CONFIG_NETFILTER_XT_MATCH_RATEEST is not set # CONFIG_NETFILTER_XT_MATCH_REALM is not set # CONFIG_NETFILTER_XT_MATCH_RECENT is not set -- Gitee