Relationship between CONFIG_NF_CONNTRACK_ZONES and zone in /etc/config/firewall

For Developers
1

What's the relationship between CONFIG_NF_CONNTRACK_ZONES and zone in /etc/config/firewall?

Does zone in /etc/config/firewall take no effect, If CONFIG_NF_CONNTRACK_ZONES is unset?

Thanks.

2

There is no relationship, they're entirely different things.

3

Thanks a lot, one more thing, why CONFIG_NF_CONNTRACK_ZONES is set to y by default in package/kernel/linux/modules/netfilter.mk?

4

Probably it was needed by downstream users. It was enabled by commit

which claims that there is no additional overhead if unused, so little reason to not enable it.

5

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.