[From nobody Thu Jun 25 05:54:51 2020
Received: from mail-pg1-f196.google.com ([209.85.215.196])
 by bombadil.infradead.org with esmtps (Exim 4.90_1 #2 (Red Hat Linux))
 id 1fyH3X-0002lZ-8N
 for openwrt-devel@lists.openwrt.org; Fri, 07 Sep 2018 13:44:17 +0000
Received: by mail-pg1-f196.google.com with SMTP id d19-v6so7051465pgv.1
 for &lt;openwrt-devel@lists.openwrt.org&gt;; Fri, 07 Sep 2018 06:42:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=honson.id.au; s=google;
 h=from:content-transfer-encoding:mime-version:subject:message-id:date
 :to; bh=mG3ptOxJCkwDmSPdXG2ljMIgfuHnNYnaspO5pgQGF4g=;
 b=WfwuMP86kUk1H9ywlF7CMzSKFV/EPmrX5dIVrlilUuy4y2dm6VCPIGUlBIdp8Lb2R5
 3LLEvlo/Ll5l/J9AyvE18hNBr/3M8AXSZ0BbTtlP2oP0CFXOKsdr+Giz2UJA6u++80tF
 rm1AS+WYamsFyiEgPBKVEL7rADnMJJtMdnB0M=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:from:content-transfer-encoding:mime-version
 :subject:message-id:date:to;
 bh=mG3ptOxJCkwDmSPdXG2ljMIgfuHnNYnaspO5pgQGF4g=;
 b=phcbRqWzkXmmd2mVx81yQjLhbjHWlfKZrU8Gw3pgbUw/fX5efC69xJ7pnLzyN5xnYG
 rXewIaa+rpnpJVo8FHppXBATe5XmlPF7mf/VaP95X5C4Y7oL5sFZx0sP4scnP/lrPo1q
 KCAHu0OdIU7WdWkFuZbu5CYhiDkyIpyw5KFNkq8djvYKzh+64ZLF/89ZurAYiJ9O9hSN
 ieWSw+ZU36uO0uCS4vS56QuP/LV1p+T0F1D7j9y3Db53lI6pL8Juxl4MQptqvHFfqLbC
 IIOiYAPyx1qTr43vEhV2nBZfx0usfE8+wS3GAkBwgjPaME1pjF9QhT9vxMt4bSDPswIJ
 V7rw==
X-Gm-Message-State: APzg51CyG7/JAQneY8y3hDkqo8iOM0RhYWUxY/9PII6eqeUy8F2aYfOE
 FD56ekiIGtL1nnB/1O8dchbWxXxqU+4=
X-Google-Smtp-Source: ANB0Vdbn5HUdzv/68Z10Enfayh0HWheLoSDl89A+m8+NQqKawC43qC/QGtWhuFl6FHaPEO5CwUIXiw==
X-Received: by 2002:a62:3306:: with SMTP id z6-v6mr8462315pfz.85.1536327664054; 
 Fri, 07 Sep 2018 06:41:04 -0700 (PDT)
Received: from matterhorn.honson.network
 (pa49-183-145-24.pa.vic.optusnet.com.au. [49.183.145.24])
 by smtp.gmail.com with ESMTPSA id d12-v6sm12083106pfk.69.2018.09.07.06.41.02
 for &lt;openwrt-devel@lists.openwrt.org&gt;
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Fri, 07 Sep 2018 06:41:03 -0700 (PDT)
From: Steven Honson &lt;steven@honson.id.au&gt;
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
Subject: [PATCH] kernel: nf-nathelper-extra depends on ipt-raw
Message-Id: &lt;C2AA1E3A-702D-47D7-A2BD-26B9FC0EA2E1@honson.id.au&gt;
Date: Fri, 7 Sep 2018 23:40:57 +1000
To: openwrt-devel@lists.openwrt.org
X-Mailer: Apple Mail (2.3445.9.1)
X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 
X-CRM114-CacheID: sfid-20180907_064415_455379_C95480F8 
X-CRM114-Status: UNSURE (   8.64  )
X-CRM114-Notice: Please train this message.
X-Spam-Score: -0.1 (/)
X-Spam-Report: SpamAssassin version 3.4.1 on bombadil.infradead.org summary:
 Content analysis details:   (-0.1 points)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 RCVD_IN_DNSWL_NONE     RBL: Sender listed at http://www.dnswl.org/, no
 trust [209.85.215.196 listed in list.dnswl.org]
 0.0 RCVD_IN_MSPIKE_H3      RBL: Good reputation (+3)
 [209.85.215.196 listed in wl.mailspike.net]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature,
 not necessarily valid
 -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
 domain
 -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
 0.0 RCVD_IN_MSPIKE_WL      Mailspike good senders

As automatic helper assignment is disabled in recent Linux kernels,
explicit rules must be added to the raw table for each helper.

While commit f50a524 in the firewall3 project added a set of default
rules and other additional related functionality, both this and the
alternative manual methods of defining these rules require kmod-ipt-raw.

Signed-off-by: Steven Honson &lt;steven@honson.id.au&gt;
---
 package/kernel/linux/modules/netfilter.mk | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package/kernel/linux/modules/netfilter.mk =
b/package/kernel/linux/modules/netfilter.mk
index 6d751cc658..3dc408b8d2 100644
--- a/package/kernel/linux/modules/netfilter.mk
+++ b/package/kernel/linux/modules/netfilter.mk
@@ -447,7 +447,7 @@ define KernelPackage/nf-nathelper-extra
   KCONFIG:=3D$(KCONFIG_NF_NATHELPER_EXTRA)
   FILES:=3D$(foreach =
mod,$(NF_NATHELPER_EXTRA-m),$(LINUX_DIR)/net/$(mod).ko)
   AUTOLOAD:=3D$(call AutoProbe,$(notdir $(NF_NATHELPER_EXTRA-m)))
-  DEPENDS:=3D+kmod-nf-nat +kmod-lib-textsearch
+  DEPENDS:=3D+kmod-nf-nat +kmod-lib-textsearch +kmod-ipt-raw
 endef

 define KernelPackage/nf-nathelper-extra/description
=E2=80=94
2.18.0


]