Fernando Fernandez Mancera <ffmanc...@riseup.net> wrote: > Signed-off-by: Fernando Fernandez Mancera <ffmanc...@riseup.net> > --- > net/ipv4/netfilter/Kconfig | 2 +- > net/ipv6/netfilter/Kconfig | 2 +- > net/netfilter/Kconfig | 4 ++++ > net/netfilter/Makefile | 1 + > 4 files changed, 7 insertions(+), 2 deletions(-) > > diff --git a/net/ipv4/netfilter/Kconfig b/net/ipv4/netfilter/Kconfig > index 1412b029f37f..87f6ec800e54 100644 > --- a/net/ipv4/netfilter/Kconfig > +++ b/net/ipv4/netfilter/Kconfig > @@ -197,7 +197,7 @@ config IP_NF_TARGET_SYNPROXY > tristate "SYNPROXY target support" > depends on NF_CONNTRACK && NETFILTER_ADVANCED > select NETFILTER_SYNPROXY > - select SYN_COOKIES > + select NF_SYNPROXY
Careful. This means I can now create a kernel config with IP_NF_TARGET_SYNPROXY=y SYN_COOKIES=n ... and that will fail to build.
