本文总结了内核中与主线不同的主要变化，并详细介绍了包括网络、防火墙、连接跟踪器等模块的修改与新增功能。同时指出了一些重要的配置调整，如xt_qtaguid的使用、xt_quota2的NFLOG支持以及对大型SIP包处理能力的限制。
Kernel Changes
This is a summary of the main changes in the kernel that diverge from mainline.
- added net/netfilter/xt_qtaguid*
- imported then modified net/netfilter/xt_quota2.c from xtables-addons project
- fixes in net/netfilter/ip6_tables.c
- modified ip*t_REJECT.c
- modified net/netfilter/xt_socket.c
A few comments on the kernel configuration:
- xt_qtaguid masquerades as xt_owner and relies on xt_socket and itself relies on the connection tracker.
- The connection tracker can't handle large SIP packets, it must be disabled.
- The modified xt_quota2 uses the NFLOG support to notify userspace.
扫一扫
1482
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
