Changeset 7474050

Timestamp:

12/14/2019 09:32:50 AM (4 years ago)

Author:

Pierre Labastie <pieere@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 9.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

0961ffc

Parents:

42adfc21

Message:

Update kernel configuration for iptables

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@22470 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:

• postlfs/security/iptables.xml (modified) (2 diffs)

postlfs/security/iptables.xml

@@ -80 +80 @@
       (required for Berkely Packet Filter support),
       <ulink url="https://netfilter.org/projects/libnfnetlink/">libnfnetlink</ulink>
-      (required for connlable support), and 
+      (required for connlabel support), and 
       <ulink url="https://netfilter.org/projects/libnetfilter_conntrack/">libnetfilter_conntrack"</ulink>
       (required for connlabel support)
@@ -100 +100 @@
     </para>
 
-<screen><literal>[*] Networking support  ---&gt;                                    [CONFIG_NET]
+<screen><literal>[*] Networking support  ---&gt;                                          [CONFIG_NET]
       Networking Options  ---&gt;
-        [*] Network packet filtering framework (Netfilter) ---&gt; [CONFIG_NETFILTER]
-          Core Netfilter Configuration ---&gt;</literal></screen>
+        [*] Network packet filtering framework (Netfilter) ---&gt;       [CONFIG_NETFILTER]
+          [*] Advanced netfilter configuration                        [CONFIG_NETFILTER_ADVANCED]
+          Core Netfilter Configuration ---&gt;
+            &lt;*/M&gt; Netfilter connection tracking support               [CONFIG_NF_CONNTRACK]
+            &lt;*/M&gt; Netfilter Xtables support (required for ip_tables)  [CONFIG_NETFILTER_XTABLES]
+            &lt;*/M&gt; LOG target support                                  [CONFIG_NETFILTER_XT_TARGET_LOG]
+          IP: Netfilter Configuration ---&gt;
+            &lt;*/M&gt; IP tables support (required for filtering/masq/NAT) [CONFIG_IP_NF_IPTABLES]</literal></screen>
 
     <para>
       Include any connection tracking protocols that will be used, as well as
       any protocols that you wish to use for match support under the
-      "Core Netfilter Configuration" section.
+      "Core Netfilter Configuration" section. The above options are enough
+      for running <xref linkend="fw-persFw-ipt"/> below.
     </para>