--- zzzz-none-000/linux-2.6.32.61/net/netfilter/Kconfig	2013-06-10 09:43:48.000000000 +0000
+++ ar10-7272-687/linux-2.6.32.61/net/netfilter/Kconfig	2011-07-20 07:23:51.000000000 +0000
@@ -107,6 +107,15 @@
 config NF_CT_PROTO_GRE
 	tristate
 
+config NF_CT_PROTO_ESP
+   tristate 'ESP protocol connection tracking'
+   default y
+	depends on NETFILTER_ADVANCED
+   help
+      With this enabled, ESP protocol support is added
+
+
+
 config NF_CT_PROTO_SCTP
 	tristate 'SCTP protocol connection tracking support (EXPERIMENTAL)'
 	depends on EXPERIMENTAL
@@ -158,9 +167,26 @@
 
 	  To compile it as a module, choose M here.  If unsure, say N.
 
+config NF_CONNTRACK_IPSEC_IKE
+	tristate "IPSec IKEC support"
+	depends on NETFILTER_ADVANCED
+	help
+	  IPSec IKE ALG 
+
+	  To compile it as a module, choose M here.  If unsure, say N.
+
+
+
+config FTP_ALG_FIX
+	tristate "LTQ Fixes in FTP ALG"
+	depends on NF_CONNTRACK_FTP && LTQ_ADDON
+	default y
+	help
+		This is a fix to assign the mask for the port in the expectation
+		structure
+
 config NF_CONNTRACK_H323
 	tristate "H.323 protocol support"
-	depends on (IPV6 || IPV6=n)
 	depends on NETFILTER_ADVANCED
 	help
 	  H.323 is a VoIP signalling protocol from ITU-T. As one of the most
@@ -231,6 +257,14 @@
 
 	  To compile it as a module, choose M here.  If unsure, say N.
 
+config PPTP_ALG_FIX
+	tristate "LTQ fixes for PPTP ALG"
+	depends on LTQ_ADDON && NF_CONNTRACK_PPTP
+	default y
+	help
+		Fix to timeout (child) GRE connections if RST/FIN is recieved
+		for parent PPTP connection
+	
 config NF_CONNTRACK_SANE
 	tristate "SANE protocol support (EXPERIMENTAL)"
 	depends on EXPERIMENTAL
@@ -268,6 +302,46 @@
 
 	  To compile it as a module, choose M here.  If unsure, say N.
 
+config NF_CONNTRACK_RTSP
+	tristate "RTSP protocol support"
+	depends on NF_CONNTRACK
+	help
+		Support the RTSP protocol.  This allows UDP transports to be setup
+		properly, including RTP and RDT.
+
+		If you want to compile it as a module, say 'M' here and read
+		Documentation/modules.txt.  If unsure, say 'Y'.
+
+config RTSP_ALG_FIX
+	tristate "LTQ fixes for RTSP ALG"
+	depends on LTQ_ADDON && NF_CONNTRACK_RTSP
+	default y
+	help
+		Fix to support RTCP port expectation
+
+config NF_CONNTRACK_MMS
+	tristate "MMS protocol support (EXPERIMENTAL) "
+	depends on NETFILTER_ADVANCED && LTQ_ADDON
+	help
+		This option supports MMS protocol connection tracking and NAT .
+		Microsoft Media Server (MMS) protocol is used to transfer
+		unicast data. MMS can be transported via UDP or TCP. If the
+		Windows Media Player client cannot negotiate a reliable
+		connection with MMS over UDP,it will attempt connection over
+		TCP. The MMS default port is UDP/TCP 1755.
+
+		To compile it as a module, choose M here.  If unsure, say N.
+
+config NF_CONNTRACK_TALK
+	 tristate "TALK protocol support (EXPERIMENTAL) "
+	 depends on NETFILTER_ADVANCED && LTQ_ADDON
+	 help
+	 	This option supports TALK protocol connection tracking and NAT.
+		Talk was a program originally used for live text communication
+		between different users of a single multi-user computer .
+
+	        To compile it as a module, choose M here.  If unsure, say N.
+
 config NF_CT_NETLINK
 	tristate 'Connection tracking netlink interface'
 	select NETFILTER_NETLINK
@@ -396,6 +470,18 @@
 	  For more information on the LEDs available on your system, see
 	  Documentation/leds-class.txt
 
+config NETFILTER_XT_TARGET_IMQ
+        tristate '"IMQ" target support'
+	depends on NETFILTER_XTABLES
+	depends on IP_NF_MANGLE || IP6_NF_MANGLE
+	select IMQ
+	default m if NETFILTER_ADVANCED=n
+        help
+          This option adds a `IMQ' target which is used to specify if and
+          to which imq device packets should get enqueued/dequeued.
+
+          To compile it as a module, choose M here.  If unsure, say N.
+
 config NETFILTER_XT_TARGET_MARK
 	tristate '"MARK" target support'
 	default m if NETFILTER_ADVANCED=n
@@ -493,7 +579,6 @@
 
 config NETFILTER_XT_TARGET_TCPMSS
 	tristate '"TCPMSS" target support'
-	depends on (IPV6 || IPV6=n)
 	default m if NETFILTER_ADVANCED=n
 	---help---
 	  This option adds a `TCPMSS' target, which allows you to alter the
@@ -858,6 +943,27 @@
 
 	  To compile it as a module, choose M here.  If unsure, say N.
 
+config NETFILTER_XT_MATCH_LAYER7
+	tristate '"layer7" match support'
+	depends on NETFILTER_XTABLES
+	depends on EXPERIMENTAL && (IP_NF_CONNTRACK || NF_CONNTRACK)
+       depends on NF_CT_ACCT
+	help
+	  Say Y if you want to be able to classify connections (and their
+	  packets) based on regular expression matching of their application
+	  layer data.   This is one way to classify applications such as
+	  peer-to-peer filesharing systems that do not always use the same
+	  port.
+
+	  To compile it as a module, choose M here.  If unsure, say N.
+
+config NETFILTER_XT_MATCH_LAYER7_DEBUG
+        bool 'Layer 7 debugging output'
+        depends on NETFILTER_XT_MATCH_LAYER7
+        help
+          Say Y to get lots of debugging output.
+
+
 config NETFILTER_XT_MATCH_STATISTIC
 	tristate '"statistic" match support'
 	depends on NETFILTER_ADVANCED
@@ -930,6 +1036,8 @@
 
 	  To compile it as a module, choose M here.  If unsure, say N.
 
+source "net/netfilter/Kconfig.ifx"
+
 endif # NETFILTER_XTABLES
 
 endmenu