Bug 421283

Summary:	net-firewall/ufw-0.31.1 asks for CONFIG_IP6_NF_MATCH_HL in kernel even with -ipv6
Product:	Gentoo Linux	Reporter:	José Romildo Malaquias <jrmalaq>
Component:	Current packages	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED FIXED
Severity:	normal	CC:	slawomir.nizio
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description José Romildo Malaquias 2012-06-15 21:15:08 UTC

I do not use IPV6 on my systems.

When emerging net-firewall/ufw-0.31.1 with USE="-ipv6", it fails because CONFIG_IP6_NF_MATCH_HL is not set in kernel configuration.

Probably this check should be enforced only when compiling with support for IPV6.

Comment 1 Sławomir Nizio 2012-06-17 13:32:06 UTC

It looks that it's an option provided only for backward compatibility and CONFIG_NETFILTER_XT_MATCH_HL should be checked instead.
The change in Linux kernel "netfilter: Combine ipt_TTL and ip6t_HL source" was made in commit 563d36eb3fb22dd04da9aa6f12e1b9ba0ac115f3 and merged with 2.6.30 if I was looking correctly.

The warning about unset option is non fatal so please ignore it until it's fixed.

Comment 2 Ian Whyman (thev00d00) (RETIRED) gentoo-dev

2012-06-18 19:39:53 UTC

Change commited to CVS. Sync in a couple of hours.