diff options
| author | Tan En De <ende.tan@starfivetech.com> | 2024-02-28 09:48:55 +0300 |
|---|---|---|
| committer | Tan En De <ende.tan@starfivetech.com> | 2024-02-28 09:48:55 +0300 |
| commit | 5781a9106cac05447e65f191662232165d5f3e88 (patch) | |
| tree | 5daa8888580da3005bda644b8db76743221ce4c0 | |
| parent | 200f10e0ed6d5767c1774f3bd842016d4d8c860d (diff) | |
| download | linux-5781a9106cac05447e65f191662232165d5f3e88.tar.xz | |
riscv: configs: dubhe: Enable iptables raw table and CT target
Needed to properly forward TFTP to KVM guest behind NAT, by marking
packets to use TFTP-specific NAT helper module.
Usage example (setup in host before starting guest):
modprobe nf_nat_tftp
iptables -t raw -I PREROUTING -j CT -p udp -m udp --dport 69 --helper tftp
Signed-off-by: Tan En De <ende.tan@starfivetech.com>
| -rw-r--r-- | arch/riscv/configs/starfive_dubhe_defconfig | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/arch/riscv/configs/starfive_dubhe_defconfig b/arch/riscv/configs/starfive_dubhe_defconfig index 4f4e229ad094..6023f5d3085b 100644 --- a/arch/riscv/configs/starfive_dubhe_defconfig +++ b/arch/riscv/configs/starfive_dubhe_defconfig @@ -65,6 +65,7 @@ CONFIG_NF_CONNTRACK_TFTP=m CONFIG_NF_TABLES=y CONFIG_NFT_CT=y CONFIG_NFT_COMPAT=y +CONFIG_NETFILTER_XT_TARGET_CT=y CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y CONFIG_NETFILTER_XT_MATCH_IPCOMP=y @@ -95,6 +96,7 @@ CONFIG_IP_NF_TARGET_MASQUERADE=y CONFIG_IP_NF_TARGET_NETMAP=y CONFIG_IP_NF_TARGET_REDIRECT=y CONFIG_IP_NF_MANGLE=m +CONFIG_IP_NF_RAW=y CONFIG_NF_LOG_IPV6=m CONFIG_IP6_NF_IPTABLES=m CONFIG_IP6_NF_MATCH_IPV6HEADER=m |