[From nobody Thu Jun 25 05:54:51 2020
Received: from mail-pf1-f194.google.com ([209.85.210.194])
 by bombadil.infradead.org with esmtps (Exim 4.90_1 #2 (Red Hat Linux))
 id 1fyHLA-0001a2-0e
 for openwrt-devel@lists.openwrt.org; Fri, 07 Sep 2018 14:02:29 +0000
Received: by mail-pf1-f194.google.com with SMTP id j26-v6so7076518pfi.10
 for &lt;openwrt-devel@lists.openwrt.org&gt;; Fri, 07 Sep 2018 07:02:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=honson.id.au; s=google;
 h=from:content-transfer-encoding:mime-version:subject:message-id:date
 :to; bh=Lu/mBqZU9YG1fbC+R27pS+5qV+y6zRwrNDNW/NGWW7g=;
 b=BYFquVF2spuDqbPAlIwsnM0CNBBmpBI15BVvA+KDqd9EAKzgI6PiTH0jR3uLviSQ3Y
 mKk2vuMC6xqswYbSvqj1dciGJgatY624sznr7psf8bcjiw22XFKxSgCtTGwWzgNhiw5K
 b3bFKBxukacZtuYDsL6H8x1WXmT14lx9OmXrM=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:from:content-transfer-encoding:mime-version
 :subject:message-id:date:to;
 bh=Lu/mBqZU9YG1fbC+R27pS+5qV+y6zRwrNDNW/NGWW7g=;
 b=QMT96w8xsBSwJorOtgk9Ah3qYoaV0e37WbKFEBao3k8h9X8d2iE+Gi5yhnRdHs0OSe
 qWMbGHJVsc9aSOvTZmogQ3+cq+qfbw6Vwl8UT1Ypn5jbAI2vXd54Izr2k3AJqTMgkM7J
 FrIncsIvXI04XWXHDu5+jf7i+c6Rsj2KvOaM8v0cuxEWkYC8On1EAFmFxRlz7x2Pneln
 M0TrsC77Pln0voCe/+6/3Dwl46PHYNm96N8thC7iCfm91pqVxorpuXyJkjXORZpmbnsI
 yo5cKPgbxn2MHRI2k+NI01eTnKo77dkL2DvsqTOA67eIGLFW+jFu89Ak8CpGPlmhiSB1
 shlA==
X-Gm-Message-State: APzg51DRTXxqgdOPvYqmvZFpLr9GtA8PYo5iqy6C4a1XaMnAfnd0mPhX
 0AF044WEPhGPcrRg64pcdF9vyZWVbfs=
X-Google-Smtp-Source: ANB0VdZG2TyXbEq0p8KlSnKOyPpKlEaqO/LMoaINXiC078v01C3Li/E0qyL7smiR2WnzSitcc1pMLA==
X-Received: by 2002:a63:8f17:: with SMTP id
 n23-v6mr8399299pgd.131.1536328877068; 
 Fri, 07 Sep 2018 07:01:17 -0700 (PDT)
Received: from matterhorn.honson.network (180-150-55-9.cust.aussiebb.net.
 [180.150.55.9])
 by smtp.gmail.com with ESMTPSA id z22-v6sm16257816pgc.67.2018.09.07.07.01.15
 for &lt;openwrt-devel@lists.openwrt.org&gt;
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Fri, 07 Sep 2018 07:01:16 -0700 (PDT)
From: Steven Honson &lt;steven@honson.id.au&gt;
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
Subject: [PATCH] kernel: nf-nathelper depends on ipt-raw
Message-Id: &lt;7A76DBE2-5492-4319-BF64-B2A7563BBBBB@honson.id.au&gt;
Date: Sat, 8 Sep 2018 00:01:11 +1000
To: openwrt-devel@lists.openwrt.org
X-Mailer: Apple Mail (2.3445.9.1)
X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 
X-CRM114-CacheID: sfid-20180907_070228_051849_7BEB67A0 
X-CRM114-Status: UNSURE (   8.96  )
X-CRM114-Notice: Please train this message.
X-Spam-Score: -0.1 (/)
X-Spam-Report: SpamAssassin version 3.4.1 on bombadil.infradead.org summary:
 Content analysis details:   (-0.1 points)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 RCVD_IN_DNSWL_NONE     RBL: Sender listed at http://www.dnswl.org/, no
 trust [209.85.210.194 listed in list.dnswl.org]
 0.0 RCVD_IN_MSPIKE_H3      RBL: Good reputation (+3)
 [209.85.210.194 listed in wl.mailspike.net]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature,
 not necessarily valid
 -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
 domain
 -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
 0.0 RCVD_IN_MSPIKE_WL      Mailspike good senders

As automatic helper assignment is disabled in recent Linux kernels,
explicit rules must be added to the raw table for each helper.

While commit f50a524 in the firewall3 project added a set of default
rules and other additional related functionality, both this and the
alternative manual methods of defining these rules require kmod-ipt-raw.

Signen-off-by: Steven Honson &lt;steven@honson.id.au&gt;
---
 package/kernel/linux/modules/netfilter.mk | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package/kernel/linux/modules/netfilter.mk =
b/package/kernel/linux/modules/netfilter.mk
index 6d751cc658..9d5c8c6d92 100644
--- a/package/kernel/linux/modules/netfilter.mk
+++ b/package/kernel/linux/modules/netfilter.mk
@@ -429,7 +429,7 @@ define KernelPackage/nf-nathelper
   KCONFIG:=3D$(KCONFIG_NF_NATHELPER)
   FILES:=3D$(foreach mod,$(NF_NATHELPER-m),$(LINUX_DIR)/net/$(mod).ko)
   AUTOLOAD:=3D$(call AutoProbe,$(notdir $(NF_NATHELPER-m)))
-  DEPENDS:=3D+kmod-nf-nat
+  DEPENDS:=3D+kmod-nf-nat +kmod+ipt-raw
 endef

 define KernelPackage/nf-nathelper/description
--
2.18.0


]