nf-conntrack: allow querying conntrack info in nfqueue
authorEtan Kissling <etan_kissling@apple.com>
Tue, 12 Jan 2021 23:54:08 +0000 (00:54 +0100)
committerDaniel Golle <daniel@makrotopia.org>
Thu, 14 Jan 2021 00:52:49 +0000 (00:52 +0000)
commit39add246c1e18afc1fe026b5f359a3acf8082279
tree26f959f82e55407516f2ac3add16da94a5d75e75
parent9afbf33b60a322d1d77fdaf50a4a33d82f2ba323
nf-conntrack: allow querying conntrack info in nfqueue

This allows libnetfilter_queue to access connection tracking information
by requesting NFQA_CFG_F_CONNTRACK. Connection tracking information is
provided in the NFQA_CT attribute.
CONFIG_NETFILTER_NETLINK_GLUE_CT enables the interaction between
nf_queue and nf_conntrack_netlink. Without this option, trying to access
connection tracking information results in "Operation not supported".

Signed-off-by: Etan Kissling <etan_kissling@apple.com>
package/kernel/linux/modules/netfilter.mk
target/linux/generic/config-5.4