--- zzzz-none-000/linux-2.6.32.61/net/ipv4/ip_input.c 2013-06-10 09:43:48.000000000 +0000 +++ virian-300e-630/linux-2.6.32.61/net/ipv4/ip_input.c 2011-10-27 15:47:13.000000000 +0000 @@ -144,6 +144,11 @@ #include #include +#ifdef CONFIG_LTQ_NETFILTER_PROCFS +int sysctl_netfilter_prerouting_enable = 1; +int sysctl_netfilter_input_enable = 1; +#endif + /* * Process Router Attention IP option */ @@ -265,6 +270,10 @@ return 0; } +#ifdef CONFIG_LTQ_NETFILTER_PROCFS + if (!sysctl_netfilter_input_enable) + return ip_local_deliver_finish(skb); +#endif return NF_HOOK(PF_INET, NF_INET_LOCAL_IN, skb, skb->dev, NULL, ip_local_deliver_finish); } @@ -443,6 +452,13 @@ /* Must drop socket now because of tproxy. */ skb_orphan(skb); +#ifdef CONFIG_AVM_PA + AVM_PKT_INFO(skb)->ptype_pid_handle = AVM_PA_PTYPE_DEVINFO(pt)->pid_handle; +#endif +#ifdef CONFIG_LTQ_NETFILTER_PROCFS + if (!sysctl_netfilter_prerouting_enable) + return ip_rcv_finish(skb); +#endif return NF_HOOK(PF_INET, NF_INET_PRE_ROUTING, skb, dev, NULL, ip_rcv_finish);