Package: src:linux Version: 4.11.6-1 Severity: normal Dear Maintainer,
The CONFIG_NFT_FIB_IPV4 and CONFIG_NFT_FIB_IPV46 should be build by default in the kernel. This two options are mandatory to implement reverse path filtering with nftables for Ipv4 and IPv6 protocol. This functionality is a must have for security of Linux based firewall. Best regards, -- Package-specific info: ** Version: Linux version 4.11.0-1-amd64 (debian-ker...@lists.debian.org) (gcc version 6.3.0 20170516 (Debian 6.3.0-18) ) #1 SMP Debian 4.11.6-1 (2017-06-19) ** Command line: BOOT_IMAGE=/boot/vmlinuz-4.11.0-1-amd64 root=UUID=cae47d6a-d3bb-4407- a218-0c8c8320d811 ro quiet ** Tainted: O (4096) * Out-of-tree module has been loaded. -- System Information: Debian Release: buster/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 4.11.0-1-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages linux-image-4.11.0-1-amd64 depends on: ii initramfs-tools [linux-initramfs-tool] 0.130 ii kmod 24-1 ii linux-base 4.5 Versions of packages linux-image-4.11.0-1-amd64 recommends: ii firmware-linux-free 3.4 ii irqbalance 1.1.0-2.3 Versions of packages linux-image-4.11.0-1-amd64 suggests: pn debian-kernel-handbook <none> ii extlinux 3:6.03+dfsg-14.1 ii grub-pc 2.02-2 pn linux-doc-4.11 <none> Versions of packages linux-image-4.11.0-1-amd64 is related to: pn firmware-amd-graphics <none> pn firmware-atheros <none> pn firmware-bnx2 <none> pn firmware-bnx2x <none> pn firmware-brcm80211 <none> pn firmware-cavium <none> pn firmware-intel-sound <none> pn firmware-intelwimax <none> pn firmware-ipw2x00 <none> pn firmware-ivtv <none> ii firmware-iwlwifi 20161130-3 pn firmware-libertas <none> pn firmware-linux-nonfree <none> pn firmware-misc-nonfree <none> pn firmware-myricom <none> pn firmware-netxen <none> pn firmware-qlogic <none> pn firmware-realtek <none> pn firmware-samsung <none> pn firmware-siano <none> pn firmware-ti-connectivity <none> pn xen-hypervisor <none> -- no debconf information -- Eric Leblond <e...@regit.org> Blog: https://home.regit.org/