Я удалил все вещи из Linux-ядра, которые мне не нужны, теперь брандмауэр не работает. Брандмауэр запускается, но нет правил внутри и не может добавлять правила. Что мне нужно выбрать / включить / модуль для работы брандмауэра?
Это мои настройки Linux-ядра в make menuconfig:
--- Networking support ---
Networking options --->
[ ] Amateur Radio support ----
< > CAN bus subsystem support ----
<*> Bluetooth subsystem support --->
< > RxRPC session sockets
< > KCM sockets
-*- Wireless --->
< > WiMAX Wireless Broadband support ----
<*> RF switch subsystem support --->
< > Plan 9 Resource Sharing Support (9P2000) ----
< > CAIF support ----
< > Ceph core library
< > NFC subsystem support ----
< > Packet-sampling netlink channel ----
< > Inter-FE based on IETF ForCES InterFE LFB ----
[ ] Network light weight tunnels
< > Network physical/parent device Netlink interface
< > Generic failover module
--- Networking options ---
<*> Packet socket
<M> Packet: sockets monitoring interface
<*> Unix domain sockets
<M> UNIX: socket monitoring interface
< > Transport Layer Security support
< > Transformation user configuration interface
< > PF_KEY sockets
[ ] XDP sockets
[*] TCP/IP networking
[ ] IP: multicasting
[ ] IP: advanced router
[ ] IP: kernel level autoconfiguration
< > IP: tunneling
< > IP: GRE demultiplexer
[*] IP: TCP syncookie support
< > IP: Foo (IP protocols) over UDP
< > IP: AH transformation
< > IP: ESP transformation
< > IP: IPComp transformation
< > IP: IPsec transport mode
< > IP: IPsec tunnel mode
< > IP: IPsec BEET mode
< > INET: socket monitoring interface
[ ] TCP: advanced congestion control ----
[ ] TCP: MD5 Signature Option support (RFC2385)
< > The IPv6 protocol ----
[ ] NetLabel subsystem support
-*- Security Marking
[ ] Timestamping in PHY devices
[*] Network packet filtering framework (Netfilter) --->
[*] BPF based packet filtering framework (BPFILTER) --->
< > The DCCP Protocol ----
< > The SCTP Protocol ----
< > The Reliable Datagram Sockets Protocol
< > The TIPC Protocol ----
< > Asynchronous Transfer Mode (ATM)
< > Layer Two Tunneling Protocol (L2TP) ----
< > 802.1d Ethernet Bridging
< > Distributed Switch Architecture
< > 802.1Q/802.1ad VLAN Support
< > DECnet Support
< > ANSI/IEEE 802.2 LLC type 2 Support
< > Appletalk protocol support
< > CCITT X.25 Packet Layer
< > LAPB Data Link Driver
< > Phonet protocols family
< > IEEE Std 802.15.4 Low-Rate Wireless Personal Area Networks support ----
[ ] QoS and/or fair queueing ----
[ ] Data Center Bridging support
< > DNS Resolver support
< > B.A.T.M.A.N. Advanced Meshing Protocol
< > Open vSwitch
< > Virtual Socket protocol
< > NETLINK: socket monitoring interface
[ ] MultiProtocol Label Switching ----
< > Network Service Header (NSH) protocol ----
< > High-availability Seamless Redundancy (HSR)
[ ] Switch (and switch-ish) device support
[ ] L3 Master device support
[ ] NCSI interface support
[ ] Network priority cgroup
[ ] Network classid cgroup
[ ] enable BPF Just In Time compiler
[ ] enable BPF STREAM_PARSER
Network testing --->