--- zzzz-none-000/linux-4.9.279/net/netfilter/Kconfig	2021-08-08 06:38:54.000000000 +0000
+++ puma7-atom-6591-750/linux-4.9.279/net/netfilter/Kconfig	2023-02-08 11:43:43.000000000 +0000
@@ -989,6 +989,14 @@
 	  This option adds a "TCPOPTSTRIP" target, which allows you to strip
 	  TCP options from TCP packets.
 
+config NETFILTER_XT_TARGET_GWMETA
+	tristate "GWMETA target support"
+	depends on INTEL_NF_GWMETA_SUPPORT
+	help
+          This option allows to label skb data of ip packets or disable packet processor
+	  To compile it as a module, choose M here.  If unsure, say N.
+
+
 # alphabetically ordered list of matches
 
 comment "Xtables matches"
@@ -1238,6 +1246,27 @@
 
 	To compile it as a module, choose M here. If unsure, say N.
 
+config NETFILTER_XT_MATCH_HTTPHOST
+        tristate '"httphost" HTTP Host header match support'
+        depends on NETFILTER_XTABLES
+        help
+          The xt_httphost module allows you to match the Host header
+          of HTTP requests.
+
+config NETFILTER_XT_MATCH_HTTPCOOKIE
+        tristate '"httpcookie" HTTP cookie blocking support'
+        depends on NETFILTER_XTABLES
+        help
+          The xt_httpcookie module allows you to block the contents of the Cookie
+          header from HTTP requests.
+
+config NETFILTER_XT_MATCH_HTTPURL
+        tristate '"httpurl" HTTP URL match support'
+        depends on NETFILTER_XTABLES
+        help
+          The xt_httpurl module allows you to match proxied, Java, or ActiveX
+          HTTP requests.
+
 config NETFILTER_XT_MATCH_LENGTH
 	tristate '"length" match support'
 	depends on NETFILTER_ADVANCED
@@ -1492,6 +1521,14 @@
 
 	  Details and examples are in the kernel module source.
 
+config NETFILTER_XT_MATCH_WEBSTR
+        tristate "WEBSTR match support"
+        depends on IP_NF_FILTER && INTEL_NF_WEBSTR_SUPPORT
+        help
+          This option allows to match string in http web header
+          To compile it as a module, choose M here.  If unsure, say N.
+
+
 endif # NETFILTER_XTABLES
 
 endmenu