[From nobody Thu Jun 25 05:54:51 2020
Received: from mail-pl1-f195.google.com ([209.85.214.195])
 by bombadil.infradead.org with esmtps (Exim 4.90_1 #2 (Red Hat Linux))
 id 1fyHV0-0005yV-BI
 for openwrt-devel@lists.openwrt.org; Fri, 07 Sep 2018 14:12:39 +0000
Received: by mail-pl1-f195.google.com with SMTP id ba4-v6so6656350plb.11
 for &lt;openwrt-devel@lists.openwrt.org&gt;; Fri, 07 Sep 2018 07:12:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=honson.id.au; s=google;
 h=from:content-transfer-encoding:mime-version:subject:message-id:date
 :to; bh=VdlKK43xbbidnV/VsMJRkPvAEAi1rl7Ji5j/llRaplc=;
 b=W+hZXlSIbfjdh3QJxqQF2Xg5gYcgijLty8uXOJM30dw7X2s6gbNdhRalEy5AYPCCGd
 +pUiVcomXjuLTtYDVjX9ah5nQ3Zt0Hv9QjRuumhVHcP8sJ6C3XajeLQTNdRaX2rW7+DL
 xmxN9+WnTI1e63KzM9HBEuQIWAchUiuI0syEQ=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:from:content-transfer-encoding:mime-version
 :subject:message-id:date:to;
 bh=VdlKK43xbbidnV/VsMJRkPvAEAi1rl7Ji5j/llRaplc=;
 b=qEPZIAaGO7l9q3AsZ2WVKHF83aWVdq/BjwrXCZQeVFV36mcxkACA9iHJU1F1TPt5l2
 P+W/cUBo5kK3zt5YzC3TPMdQbFDZcmqI0kcdz4BxSIbw1vxrB8rnhVOe0pcukv8c6qfU
 QZ5ZFgOR/He6Fanrj4tG9wyT8EPEAEKD/bfkoIJFYZTqhFYr3JpMh6M2b4jt5ELvx0tF
 WTXcmTf185GiyiyVz9XUQi2vr6K3mqiCt2MkCU2kGoCqer7PQpkp/G0uYnzXE2C/YQzV
 ILahBuzgcxMkNoqK/TujUUvGrKychADZhDIGYRQG3+hqhFvUDBjIGYiHD/4CFSX+ksUr
 omIA==
X-Gm-Message-State: APzg51ARYtIwYeKJUyHmeMdg0AyM/AAew6I17eHAU5rhQnOdciexCBVk
 l7GXS7MZ2kLLGTQWHPxvRNYte9uGvY4=
X-Google-Smtp-Source: ANB0VdbxR6RIb956waR5GWCJRHXnHi4wJg2FpbRBVe2dU/VT29N2JPlJeM4pOvPRLUa/kIvJ3k046w==
X-Received: by 2002:a17:902:b947:: with SMTP id
 h7-v6mr8233608pls.157.1536329483904; 
 Fri, 07 Sep 2018 07:11:23 -0700 (PDT)
Received: from matterhorn.honson.network (180-150-55-9.cust.aussiebb.net.
 [180.150.55.9])
 by smtp.gmail.com with ESMTPSA id k26-v6sm15929018pfb.167.2018.09.07.07.11.22
 for &lt;openwrt-devel@lists.openwrt.org&gt;
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Fri, 07 Sep 2018 07:11:23 -0700 (PDT)
From: Steven Honson &lt;steven@honson.id.au&gt;
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
Subject: [PATCH v2] kernel: nf-nathelper depends on ipt-raw
Message-Id: &lt;E5108C7F-3048-4A33-A43C-D65E5AA17AC5@honson.id.au&gt;
Date: Sat, 8 Sep 2018 00:11:19 +1000
To: openwrt-devel@lists.openwrt.org
X-Mailer: Apple Mail (2.3445.9.1)
X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 
X-CRM114-CacheID: sfid-20180907_071238_403638_FF2E5921 
X-CRM114-Status: UNSURE (   9.08  )
X-CRM114-Notice: Please train this message.
X-Spam-Score: -0.1 (/)
X-Spam-Report: SpamAssassin version 3.4.1 on bombadil.infradead.org summary:
 Content analysis details:   (-0.1 points)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 RCVD_IN_DNSWL_NONE     RBL: Sender listed at http://www.dnswl.org/, no
 trust [209.85.214.195 listed in list.dnswl.org]
 0.0 RCVD_IN_MSPIKE_H3      RBL: Good reputation (+3)
 [209.85.214.195 listed in wl.mailspike.net]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature,
 not necessarily valid
 -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
 domain
 -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
 0.0 RCVD_IN_MSPIKE_WL      Mailspike good senders

As automatic helper assignment is disabled in recent Linux kernels,
explicit rules must be added to the raw table for each helper.

While commit f50a524 in the firewall3 project added a set of default
rules and other additional related functionality, both this and the
alternative manual methods of defining these rules require kmod-ipt-raw.

Signed-off-by: Steven Honson &lt;steven@honson.id.au&gt;
---
 package/kernel/linux/modules/netfilter.mk | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package/kernel/linux/modules/netfilter.mk =
b/package/kernel/linux/modules/netfilter.mk
index 6d751cc658..9d5c8c6d92 100644
--- a/package/kernel/linux/modules/netfilter.mk
+++ b/package/kernel/linux/modules/netfilter.mk
@@ -429,7 +429,7 @@ define KernelPackage/nf-nathelper
   KCONFIG:=3D$(KCONFIG_NF_NATHELPER)
   FILES:=3D$(foreach mod,$(NF_NATHELPER-m),$(LINUX_DIR)/net/$(mod).ko)
   AUTOLOAD:=3D$(call AutoProbe,$(notdir $(NF_NATHELPER-m)))
-  DEPENDS:=3D+kmod-nf-nat
+  DEPENDS:=3D+kmod-nf-nat +kmod+ipt-raw
 endef

 define KernelPackage/nf-nathelper/description
--
2.18.0


]