netfilter: xt_rpfilter: depend on raw or mangle table

rpfilter is only valid in raw/mangle PREROUTING, i.e.
RPFILTER=y|m is useless without raw or mangle table support.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/net/ipv4/netfilter/Kconfig b/net/ipv4/netfilter/Kconfig
index 0d755c50994b2ca01438158e033c020810a3e8af..e7916c193932222b7538c104dc71eeb8b3f8b5f2 100644 (file)
--- a/net/ipv4/netfilter/Kconfig
+++ b/net/ipv4/netfilter/Kconfig
@@ -71,7 +71,7 @@ config IP_NF_MATCH_ECN
 
 config IP_NF_MATCH_RPFILTER
        tristate '"rpfilter" reverse path filter match support'
-       depends on NETFILTER_ADVANCED
+       depends on NETFILTER_ADVANCED && (IP_NF_MANGLE || IP_NF_RAW)
        ---help---
          This option allows you to match packets whose replies would
          go out via the interface the packet came in.

diff --git a/net/ipv6/netfilter/Kconfig b/net/ipv6/netfilter/Kconfig
index c72532a60d887aeaaf31187f470622de24aabda8..4433ab40e7de05a2b518e20dacfa370d736bded3 100644 (file)
--- a/net/ipv6/netfilter/Kconfig
+++ b/net/ipv6/netfilter/Kconfig
@@ -105,7 +105,7 @@ config IP6_NF_MATCH_MH
 
 config IP6_NF_MATCH_RPFILTER
        tristate '"rpfilter" reverse path filter match support'
-       depends on NETFILTER_ADVANCED
+       depends on NETFILTER_ADVANCED && (IP6_NF_MANGLE || IP6_NF_RAW)
        ---help---
          This option allows you to match packets whose replies would
          go out via the interface the packet came in.