From: Alin Năstac <alin.nastac@gmail.com>
Date: Thu, 19 May 2016 07:54:06 +0000 (+0200)
Subject: conntrack: enable support for netfilter conntrack zones
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=0cc58a0f98be555b101d9dffe4082b132741e40a;p=openwrt%2Fstaging%2Fstintel.git

conntrack: enable support for netfilter conntrack zones

Storage of such zones is provided by a nf_ct_ext struct, hence conntrack
memory foot print will not be increased if zones are not used.

Signed-off-by: Alin Năstac <alin.nastac@gmail.com>
---

diff --git a/package/kernel/linux/modules/netfilter.mk b/package/kernel/linux/modules/netfilter.mk
index a0a19b23a9..353de3e45b 100644
--- a/package/kernel/linux/modules/netfilter.mk
+++ b/package/kernel/linux/modules/netfilter.mk
@@ -68,6 +68,7 @@ define KernelPackage/nf-conntrack
   KCONFIG:= \
         CONFIG_NETFILTER=y \
         CONFIG_NETFILTER_ADVANCED=y \
+        CONFIG_NF_CONNTRACK_ZONES=y \
 	$(KCONFIG_NF_CONNTRACK)
   FILES:=$(foreach mod,$(NF_CONNTRACK-m),$(LINUX_DIR)/net/$(mod).ko)
   AUTOLOAD:=$(call AutoProbe,$(notdir $(NF_CONNTRACK-m)))