From d20516c06eb4d87692b252f253d754a2c888a60c Mon Sep 17 00:00:00 2001
From: Christian Wiese <chris@opensde.org>
Date: Sun, 15 Dec 2013 12:34:25 +0100
Subject: [PATCH] iptables: improved to build/install the netfilter bpf
 compiler 'nfbpf_compile'

Linux kernels >= 3.9 have BPF filter support
---
 network/iptables/iptables.conf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/network/iptables/iptables.conf b/network/iptables/iptables.conf
index ca25b878d..17921c473 100644
--- a/network/iptables/iptables.conf
+++ b/network/iptables/iptables.conf
@@ -21,3 +21,7 @@ if [ "$SDECFG_PKG_IPTABLES_DEVEL" != 0 ] ; then
 	var_append confopt ' ' "--enable-devel"
 	var_append confopt ' ' "--enable-libipq"
 fi
+
+# kernel >= 3.9 have BPF filter support
+# enable to build/install the netfilter bpf compiler 'nfbpf_compile'
+var_append extraconfopt ' ' "--enable-bpf-compiler"