--- zzzz-none-000/linux-5.15.111/net/netfilter/Kconfig	2023-05-11 14:00:40.000000000 +0000
+++ puma7-atom-6670-761/linux-5.15.111/net/netfilter/Kconfig	2024-02-07 10:23:30.000000000 +0000
@@ -1138,6 +1138,14 @@
 	  This option adds a "TCPOPTSTRIP" target, which allows you to strip
 	  TCP options from TCP packets.
 
+config NETFILTER_XT_TARGET_GWMETA
+	tristate "GWMETA target support"
+	depends on INTEL_NF_GWMETA_SUPPORT
+	help
+          This option allows to label skb data of ip packets or disable packet processor
+	  To compile it as a module, choose M here.  If unsure, say N.
+
+
 # alphabetically ordered list of matches
 
 comment "Xtables matches"
@@ -1388,6 +1396,27 @@
 
 	To compile it as a module, choose M here. If unsure, say N.
 
+config NETFILTER_XT_MATCH_HTTPHOST
+        tristate '"httphost" HTTP Host header match support'
+        depends on NETFILTER_XTABLES
+        help
+          The xt_httphost module allows you to match the Host header
+          of HTTP requests.
+
+config NETFILTER_XT_MATCH_HTTPCOOKIE
+        tristate '"httpcookie" HTTP cookie blocking support'
+        depends on NETFILTER_XTABLES
+        help
+          The xt_httpcookie module allows you to block the contents of the Cookie
+          header from HTTP requests.
+
+config NETFILTER_XT_MATCH_HTTPURL
+        tristate '"httpurl" HTTP URL match support'
+        depends on NETFILTER_XTABLES
+        help
+          The xt_httpurl module allows you to match proxied, Java, or ActiveX
+          HTTP requests.
+
 config NETFILTER_XT_MATCH_LENGTH
 	tristate '"length" match support'
 	depends on NETFILTER_ADVANCED
@@ -1644,6 +1673,14 @@
 
 	  Details and examples are in the kernel module source.
 
+config NETFILTER_XT_MATCH_WEBSTR
+        tristate "WEBSTR match support"
+        depends on IP_NF_FILTER && INTEL_NF_WEBSTR_SUPPORT
+        help
+          This option allows to match string in http web header
+          To compile it as a module, choose M here.  If unsure, say N.
+
+
 endif # NETFILTER_XTABLES
 
 endmenu