[meta-virtualization] [PATCH] iptables: add to our list of RRECOMMENDS

Mark Asselstine mark.asselstine at windriver.com
Tue Dec 19 20:03:10 PST 2017


Extend the list of RRECOMMENDS to include some essential kernel
modules needed to make iptables minimally useful. Specifically include
the common tables and conntrack, all of which are used by even basic
iptables configurations. While at it I also made things more
consistent for ipv4 vs ipv6.

Signed-off-by: Mark Asselstine <mark.asselstine at windriver.com>
---
 recipes-extended/iptables/iptables_1.%.bbappend | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/recipes-extended/iptables/iptables_1.%.bbappend b/recipes-extended/iptables/iptables_1.%.bbappend
index 52a4c4f..8fd521c 100644
--- a/recipes-extended/iptables/iptables_1.%.bbappend
+++ b/recipes-extended/iptables/iptables_1.%.bbappend
@@ -1,8 +1,19 @@
 RRECOMMENDS_${PN} += "kernel-module-ip6-tables \
+                      kernel-module-ip-tables \
                       kernel-module-ip6table-filter \
-                      kernel-module-xt-tcpudp \
+                      kernel-module-iptable-filter \
+                      kernel-module-ip6table-raw \
+                      kernel-module-iptable-raw \
+                      kernel-module-ip6table-nat \
+                      kernel-module-iptable-nat \
+                      kernel-module-ip6table-mangle \
+                      kernel-module-iptable-magle \
+                      kernel-module-ip6table-security \
+                      kernel-module-iptable-security \
                       kernel-module-ipt-reject \
                       kernel-module-iptable-mangle \
                       kernel-module-xt-checksum \
+                      kernel-module-xt-conntrack \
                       kernel-module-xt-state \
+                      kernel-module-xt-tcpudp \
                       "
-- 
2.7.4



More information about the meta-virtualization mailing list