enable new options (defconfig)

[estimadarocha]

@HD-Digital is it possible to review defconfig to be like this?

`#

Networking options

CONFIG_PACKET=y
CONFIG_PACKET_DIAG=y
CONFIG_UNIX=y
CONFIG_UNIX_DIAG=y
CONFIG_XFRM=y
CONFIG_XFRM_ALGO=y
CONFIG_XFRM_USER=y

CONFIG_XFRM_SUB_POLICY is not set

CONFIG_XFRM_MIGRATE is not set

CONFIG_XFRM_STATISTICS is not set

CONFIG_XFRM_IPCOMP=m

CONFIG_NET_KEY is not set

CONFIG_INET=y
CONFIG_IP_MULTICAST=y

CONFIG_IP_ADVANCED_ROUTER is not set

CONFIG_IP_PNP=y
CONFIG_IP_PNP_DHCP=y
CONFIG_IP_PNP_BOOTP=y
CONFIG_IP_PNP_RARP=y

CONFIG_NET_IPIP is not set

CONFIG_NET_IPGRE_DEMUX is not set

CONFIG_NET_IP_TUNNEL=m

CONFIG_IP_MROUTE is not set

CONFIG_SYN_COOKIES=y

CONFIG_NET_IPVTI is not set

CONFIG_NET_UDP_TUNNEL=m
CONFIG_NET_FOU=m

CONFIG_NET_FOU_IP_TUNNELS is not set

CONFIG_GENEVE is not set

CONFIG_INET_AH=m
CONFIG_INET_ESP=m
CONFIG_INET_IPCOMP=m
CONFIG_INET_XFRM_TUNNEL=m
CONFIG_INET_TUNNEL=m
CONFIG_INET_XFRM_MODE_TRANSPORT=m
CONFIG_INET_XFRM_MODE_TUNNEL=m
CONFIG_INET_XFRM_MODE_BEET=m
CONFIG_INET_LRO=y
CONFIG_INET_DIAG=y
CONFIG_INET_TCP_DIAG=y
CONFIG_INET_UDP_DIAG=m

CONFIG_TCP_CONG_ADVANCED is not set

CONFIG_TCP_CONG_CUBIC=y
CONFIG_DEFAULT_TCP_CONG="cubic"

CONFIG_TCP_MD5SIG is not set

CONFIG_IPV6=y

CONFIG_IPV6_ROUTER_PREF is not set

CONFIG_IPV6_ROUTE_INFO is not set

CONFIG_IPV6_OPTIMISTIC_DAD is not set

CONFIG_INET6_AH=m
CONFIG_INET6_ESP=m
CONFIG_INET6_IPCOMP=m

CONFIG_IPV6_MIP6 is not set

CONFIG_IPV6_ILA is not set

CONFIG_INET6_XFRM_TUNNEL=m
CONFIG_INET6_TUNNEL=m
CONFIG_INET6_XFRM_MODE_TRANSPORT=m
CONFIG_INET6_XFRM_MODE_TUNNEL=m
CONFIG_INET6_XFRM_MODE_BEET=m

CONFIG_INET6_XFRM_MODE_ROUTEOPTIMIZATION is not set

CONFIG_IPV6_VTI is not set

CONFIG_IPV6_SIT=m

CONFIG_IPV6_SIT_6RD is not set

CONFIG_IPV6_NDISC_NODETYPE=y

CONFIG_IPV6_TUNNEL is not set

CONFIG_IPV6_GRE is not set

CONFIG_IPV6_MULTIPLE_TABLES=y
CONFIG_IPV6_SUBTREES=y

CONFIG_IPV6_MROUTE is not set

CONFIG_ANDROID_PARANOID_NETWORK is not set

CONFIG_NETWORK_SECMARK is not set

CONFIG_NET_PTP_CLASSIFY=y

CONFIG_NETWORK_PHY_TIMESTAMPING is not set

CONFIG_NETFILTER=y

CONFIG_NETFILTER_DEBUG is not set

CONFIG_NETFILTER_ADVANCED=y

Core Netfilter Configuration

CONFIG_NETFILTER_INGRESS=y
CONFIG_NETFILTER_NETLINK=m

CONFIG_NETFILTER_NETLINK_ACCT is not set

CONFIG_NETFILTER_NETLINK_QUEUE is not set

CONFIG_NETFILTER_NETLINK_LOG is not set

CONFIG_NF_CONNTRACK=m
CONFIG_NF_LOG_COMMON=m
CONFIG_NF_CONNTRACK_MARK=y

CONFIG_NF_CONNTRACK_PROCFS is not set

CONFIG_NF_CONNTRACK_EVENTS is not set

CONFIG_NF_CONNTRACK_TIMEOUT is not set

CONFIG_NF_CONNTRACK_TIMESTAMP is not set

CONFIG_NF_CT_PROTO_DCCP is not set

CONFIG_NF_CT_PROTO_SCTP is not set

CONFIG_NF_CT_PROTO_UDPLITE is not set

CONFIG_NF_CONNTRACK_AMANDA is not set

CONFIG_NF_CONNTRACK_FTP=m

CONFIG_NF_CONNTRACK_H323 is not set

CONFIG_NF_CONNTRACK_IRC=m
CONFIG_NF_CONNTRACK_BROADCAST=m
CONFIG_NF_CONNTRACK_NETBIOS_NS=m

CONFIG_NF_CONNTRACK_SNMP is not set

CONFIG_NF_CONNTRACK_PPTP is not set

CONFIG_NF_CONNTRACK_SANE is not set

CONFIG_NF_CONNTRACK_SIP=m

CONFIG_NF_CONNTRACK_TFTP is not set

CONFIG_NF_CT_NETLINK=m

CONFIG_NF_CT_NETLINK_TIMEOUT is not set

CONFIG_NF_NAT=m
CONFIG_NF_NAT_NEEDED=y

CONFIG_NF_NAT_AMANDA is not set

CONFIG_NF_NAT_FTP=m
CONFIG_NF_NAT_IRC=m
CONFIG_NF_NAT_SIP=m

CONFIG_NF_NAT_TFTP is not set

CONFIG_NF_NAT_REDIRECT=m
CONFIG_NF_TABLES=m
CONFIG_NF_TABLES_INET=m
CONFIG_NFT_EXTHDR=m
CONFIG_NFT_META=m
CONFIG_NFT_CT=m
CONFIG_NFT_RBTREE=m
CONFIG_NFT_HASH=m
CONFIG_NFT_COUNTER=m
CONFIG_NFT_LOG=m
CONFIG_NFT_LIMIT=m
CONFIG_NFT_MASQ=m
CONFIG_NFT_REDIR=m
CONFIG_NFT_NAT=m
CONFIG_NFT_REJECT=m
CONFIG_NFT_REJECT_INET=m
CONFIG_NFT_COMPAT=m
CONFIG_NETFILTER_XTABLES=m

Xtables combined modules

CONFIG_NETFILTER_XT_MARK=m
CONFIG_NETFILTER_XT_CONNMARK=m
CONFIG_NETFILTER_XT_SET=m

Xtables targets

CONFIG_NETFILTER_XT_TARGET_CHECKSUM is not set

CONFIG_NETFILTER_XT_TARGET_CLASSIFY=m

CONFIG_NETFILTER_XT_TARGET_CONNMARK is not set

CONFIG_NETFILTER_XT_TARGET_DSCP=m
CONFIG_NETFILTER_XT_TARGET_HL=m

CONFIG_NETFILTER_XT_TARGET_HMARK is not set

CONFIG_NETFILTER_XT_TARGET_IDLETIMER is not set

CONFIG_NETFILTER_XT_TARGET_LED is not set

CONFIG_NETFILTER_XT_TARGET_LOG=m

CONFIG_NETFILTER_XT_TARGET_MARK is not set

CONFIG_NETFILTER_XT_NAT=m
CONFIG_NETFILTER_XT_TARGET_NETMAP=m

CONFIG_NETFILTER_XT_TARGET_NFLOG is not set

CONFIG_NETFILTER_XT_TARGET_NFQUEUE is not set

CONFIG_NETFILTER_XT_TARGET_RATEEST is not set

CONFIG_NETFILTER_XT_TARGET_REDIRECT=m

CONFIG_NETFILTER_XT_TARGET_TEE is not set

CONFIG_NETFILTER_XT_TARGET_TPROXY is not set

CONFIG_NETFILTER_XT_TARGET_TCPMSS=m

CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set

Xtables matches

CONFIG_NETFILTER_XT_MATCH_ADDRTYPE is not set

CONFIG_NETFILTER_XT_MATCH_BPF is not set

CONFIG_NETFILTER_XT_MATCH_CGROUP is not set

CONFIG_NETFILTER_XT_MATCH_CLUSTER is not set

CONFIG_NETFILTER_XT_MATCH_COMMENT=m
CONFIG_NETFILTER_XT_MATCH_CONNBYTES=m

CONFIG_NETFILTER_XT_MATCH_CONNLABEL is not set

CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=m
CONFIG_NETFILTER_XT_MATCH_CONNMARK=m
CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m

CONFIG_NETFILTER_XT_MATCH_CPU is not set

CONFIG_NETFILTER_XT_MATCH_DCCP is not set

CONFIG_NETFILTER_XT_MATCH_DEVGROUP is not set

CONFIG_NETFILTER_XT_MATCH_DSCP=m
CONFIG_NETFILTER_XT_MATCH_ECN=m
CONFIG_NETFILTER_XT_MATCH_ESP=m

CONFIG_NETFILTER_XT_MATCH_HASHLIMIT is not set

CONFIG_NETFILTER_XT_MATCH_HELPER=m
CONFIG_NETFILTER_XT_MATCH_HL=m

CONFIG_NETFILTER_XT_MATCH_IPCOMP is not set

CONFIG_NETFILTER_XT_MATCH_IPRANGE is not set

CONFIG_NETFILTER_XT_MATCH_L2TP is not set

CONFIG_NETFILTER_XT_MATCH_LENGTH=m
CONFIG_NETFILTER_XT_MATCH_LIMIT=m
CONFIG_NETFILTER_XT_MATCH_MAC=m
CONFIG_NETFILTER_XT_MATCH_MARK=m
CONFIG_NETFILTER_XT_MATCH_MULTIPORT=m

CONFIG_NETFILTER_XT_MATCH_NFACCT is not set

CONFIG_NETFILTER_XT_MATCH_OSF is not set

CONFIG_NETFILTER_XT_MATCH_OWNER is not set

CONFIG_NETFILTER_XT_MATCH_POLICY=m

CONFIG_NETFILTER_XT_MATCH_PKTTYPE is not set

CONFIG_NETFILTER_XT_MATCH_QUOTA is not set

CONFIG_NETFILTER_XT_MATCH_QUOTA2 is not set

CONFIG_NETFILTER_XT_MATCH_RATEEST is not set

CONFIG_NETFILTER_XT_MATCH_REALM is not set

CONFIG_NETFILTER_XT_MATCH_RECENT=m

CONFIG_NETFILTER_XT_MATCH_SCTP is not set

CONFIG_NETFILTER_XT_MATCH_SOCKET is not set

CONFIG_NETFILTER_XT_MATCH_STATE=m
CONFIG_NETFILTER_XT_MATCH_STATISTIC=m

CONFIG_NETFILTER_XT_MATCH_STRING is not set

CONFIG_NETFILTER_XT_MATCH_TCPMSS=m
CONFIG_NETFILTER_XT_MATCH_TIME=m

CONFIG_NETFILTER_XT_MATCH_U32 is not set

CONFIG_IP_SET=m
CONFIG_IP_SET_MAX=256
CONFIG_IP_SET_BITMAP_IP=m
CONFIG_IP_SET_BITMAP_IPMAC=m
CONFIG_IP_SET_BITMAP_PORT=m
CONFIG_IP_SET_HASH_IP=m
CONFIG_IP_SET_HASH_IPMARK=m
CONFIG_IP_SET_HASH_IPPORT=m
CONFIG_IP_SET_HASH_IPPORTIP=m
CONFIG_IP_SET_HASH_IPPORTNET=m
CONFIG_IP_SET_HASH_MAC=m
CONFIG_IP_SET_HASH_NETPORTNET=m
CONFIG_IP_SET_HASH_NET=m
CONFIG_IP_SET_HASH_NETNET=m
CONFIG_IP_SET_HASH_NETPORT=m
CONFIG_IP_SET_HASH_NETIFACE=m
CONFIG_IP_SET_LIST_SET=m

CONFIG_IP_VS is not set

IP: Netfilter Configuration

CONFIG_NF_DEFRAG_IPV4=m
CONFIG_NF_CONNTRACK_IPV4=m
CONFIG_NF_TABLES_IPV4=m

CONFIG_NFT_CHAIN_ROUTE_IPV4 is not set

CONFIG_NFT_REJECT_IPV4=m

CONFIG_NF_TABLES_ARP is not set

CONFIG_NF_LOG_ARP is not set

CONFIG_NF_LOG_IPV4=m
CONFIG_NF_REJECT_IPV4=m
CONFIG_NF_NAT_IPV4=m
CONFIG_NFT_CHAIN_NAT_IPV4=m
CONFIG_NF_NAT_MASQUERADE_IPV4=m
CONFIG_NFT_MASQ_IPV4=m
CONFIG_NFT_REDIR_IPV4=m

CONFIG_NF_NAT_PPTP is not set

CONFIG_NF_NAT_H323 is not set

CONFIG_IP_NF_IPTABLES=m
CONFIG_IP_NF_MATCH_AH=m

CONFIG_IP_NF_MATCH_ECN is not set

CONFIG_IP_NF_MATCH_RPFILTER is not set

CONFIG_IP_NF_MATCH_TTL is not set

CONFIG_IP_NF_FILTER=m
CONFIG_IP_NF_TARGET_REJECT=m

CONFIG_IP_NF_TARGET_SYNPROXY is not set

CONFIG_IP_NF_NAT=m
CONFIG_IP_NF_TARGET_MASQUERADE=m
CONFIG_IP_NF_TARGET_NETMAP=m
CONFIG_IP_NF_TARGET_REDIRECT=m
CONFIG_IP_NF_MANGLE=m

CONFIG_IP_NF_TARGET_CLUSTERIP is not set

CONFIG_IP_NF_TARGET_ECN=m

CONFIG_IP_NF_TARGET_TTL is not set

CONFIG_IP_NF_RAW is not set

CONFIG_IP_NF_ARPTABLES is not set

IPv6: Netfilter Configuration

CONFIG_NF_DEFRAG_IPV6=m
CONFIG_NF_CONNTRACK_IPV6=m
CONFIG_NF_TABLES_IPV6=m

CONFIG_NFT_CHAIN_ROUTE_IPV6 is not set

CONFIG_NFT_REJECT_IPV6=m
CONFIG_NF_REJECT_IPV6=m
CONFIG_NF_LOG_IPV6=m
CONFIG_NF_NAT_IPV6=m
CONFIG_NFT_CHAIN_NAT_IPV6=m
CONFIG_NF_NAT_MASQUERADE_IPV6=m
CONFIG_NFT_MASQ_IPV6=m
CONFIG_NFT_REDIR_IPV6=m
CONFIG_IP6_NF_IPTABLES=m
CONFIG_IP6_NF_MATCH_AH=m

CONFIG_IP6_NF_MATCH_EUI64 is not set

CONFIG_IP6_NF_MATCH_FRAG is not set

CONFIG_IP6_NF_MATCH_OPTS is not set

CONFIG_IP6_NF_MATCH_HL is not set

CONFIG_IP6_NF_MATCH_IPV6HEADER is not set

CONFIG_IP6_NF_MATCH_MH is not set

CONFIG_IP6_NF_MATCH_RT is not set

CONFIG_IP6_NF_FILTER=m
CONFIG_IP6_NF_TARGET_REJECT=m

CONFIG_IP6_NF_TARGET_SYNPROXY is not set

CONFIG_IP6_NF_MANGLE=m

CONFIG_IP6_NF_RAW is not set

CONFIG_IP6_NF_NAT=m
CONFIG_IP6_NF_TARGET_MASQUERADE=m
CONFIG_IP6_NF_TARGET_NPT=m

CONFIG_IP_DCCP is not set

CONFIG_IP_SCTP is not set

CONFIG_RDS is not set

CONFIG_TIPC is not set

CONFIG_ATM is not set

CONFIG_L2TP is not set

CONFIG_BRIDGE is not set

CONFIG_HAVE_NET_DSA=y

CONFIG_VLAN_8021Q is not set

CONFIG_DECNET is not set

CONFIG_LLC2 is not set

CONFIG_IPX is not set

CONFIG_ATALK is not set

CONFIG_X25 is not set

CONFIG_LAPB is not set

CONFIG_PHONET is not set

CONFIG_6LOWPAN is not set

CONFIG_IEEE802154 is not set

CONFIG_NET_SCHED is not set

CONFIG_DCB is not set

CONFIG_DNS_RESOLVER=y

CONFIG_BATMAN_ADV is not set

CONFIG_OPENVSWITCH is not set

CONFIG_VSOCKETS is not set

CONFIG_NETLINK_MMAP is not set

CONFIG_NETLINK_DIAG is not set

CONFIG_MPLS is not set

CONFIG_HSR is not set

CONFIG_NET_SWITCHDEV is not set

CONFIG_NET_L3_MASTER_DEV is not set

CONFIG_RPS=y
CONFIG_RFS_ACCEL=y
CONFIG_XPS=y
CONFIG_NET_RX_BUSY_POLL=y
CONFIG_BQL=y

CONFIG_BPF_JIT is not set

CONFIG_NET_FLOW_LIMIT=y`

The idea is to be able to run iptables without problems.

Thanks

[HD-Digital]

Sure, the changes look fine. First we'll check if the driver doesn't get missing symbols.
Second if all is fine in a couple days the defconfig will been adjust with your requirements.

[estimadarocha]

@HD-Digital there are some other hi3798mv200 using 4.4.35 and with these options enabled. However i tried myself to change it also on other models without the same luck
... Showiframe get tainted. If thats the case is it possible to fix? Thanks for your time

[estimadarocha]

@HD-Digital any news?

[HD-Digital]

Waiting for confirmation for the changed settings. Soon some adjustments comes which hopefully helps you to run iptables

[estimadarocha]

@HD-Digital no news?