Rebase files to rsdk 3.2 and refresh patches. Compilable (not by humans).

Signed-off-by: Roman Yeryomin <roman@advem.lv>

2 files changed, 0 insertions, 3021 deletions

diff --git a/target/linux/realtek/files/net/rtl/features/98/rtl_features.c b/target/linux/realtek/files/net/rtl/features/98/rtl_features.c
deleted file mode 100644
index 1a5983521..000000000
--- a/target/linux/realtek/files/net/rtl/features/98/rtl_features.c
+++ /dev/null
@@ -1,2202 +0,0 @@
-#include <linux/types.h>
-#include <linux/netfilter.h>
-#include <linux/module.h>
-#include <linux/skbuff.h>
-#include <linux/moduleparam.h>
-#include <linux/notifier.h>
-#include <linux/kernel.h>
-#include <linux/inetdevice.h>
-#include <linux/netdevice.h>
-#include <linux/ip.h>
-#include <linux/tcp.h>
-
-#if defined(CONFIG_PROC_FS) 
-#include <linux/proc_fs.h>
-#endif
-
-#if	defined(CONFIG_RTL_HARDWARE_NAT )&&defined(CONFIG_RTL_MULTIPLE_WAN)
-#include <net/arp.h>
-#endif
-#include <net/netfilter/nf_conntrack.h>
-#include <net/netfilter/nf_conntrack_core.h>
-#include <net/netfilter/nf_conntrack_helper.h>
-#if defined(CONFIG_RTL_HARDWARE_NAT)
-#include <net/ip_fib.h>
-#include <net/ip_vs.h>
-#include <net/netfilter/nf_nat.h>
-#include <net/netfilter/nf_nat_core.h>
-#endif
-#include <net/rtl/rtl_types.h>
-#include <net/rtl/rtl_nic.h>
-#if defined(CONFIG_RTL_HARDWARE_NAT)
-#include <net/rtl/rtl865x_nat.h>
-#endif
-
-#ifdef CONFIG_RTL_LAYERED_DRIVER_L3
-#include <net/rtl/rtl865x_ppp.h>
-#include <net/rtl/rtl865x_route_api.h>
-#include <net/rtl/rtl865x_arp_api.h>
-#endif
-
-#include <net/rtl/features/rtl_features.h>
-
-#if defined(CONFIG_RTL_IPTABLES_FAST_PATH) || defined(CONFIG_RTL_HARDWARE_NAT)
-#include <linux/netfilter/nf_conntrack_tcp.h>
-#endif
-
-#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-#include <net/rtl/fastpath/fastpath_core.h>
-#endif
-
-#if defined(CONFIG_RTL_LOCAL_PUBLIC) || defined(CONFIG_RTL_MULTIPLE_WAN) || (defined(CONFIG_NET_SCHED)&&defined(CONFIG_RTL_IPTABLES_FAST_PATH)) || defined(CONFIG_RTL_HW_QOS_SUPPORT)
-#include <net/rtl/rtl865x_netif.h>
-#endif
-
-#if defined(CONFIG_RTL_HW_QOS_SUPPORT)
-#include <net/rtl/rtl865x_outputQueue.h>
-#endif
-
-#if defined (CONFIG_RTL_LOCAL_PUBLIC)
-#include <net/rtl/rtl865x_localPublic.h>
-extern int rtl865x_curOpMode;
-#endif
-
-#if defined(CONFIG_RTL_FAST_BRIDGE)
-#include <net/rtl/fastpath/fast_br.h>
-#endif
-
-#if defined(CONFIG_NET_SCHED)
-__DRAM_GEN int gQosEnabled;
-#endif
-
-#ifdef CONFIG_RTL_HARDWARE_NAT 
-/*2007-12-19*/
-#ifdef CONFIG_RTL_LAYERED_DRIVER_L3
-#include <net/rtl/rtl865x_ip_api.h>
-#endif
-#endif
-
-#include <linux/netfilter_ipv4.h>
-#include <linux/netfilter_ipv4/ip_tables.h>
-
-#if defined(CONFIG_FAST_PATH_MODULE) && defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-#include <fast_l2tp_core.h>
-enum LR_RESULT (*FastPath_hook4)( rtl_fp_napt_entry *fpNaptEntry)=NULL;
-enum LR_RESULT (*FastPath_hook6)( rtl_fp_napt_entry *fpNaptEntry,
-#if defined(IMPROVE_QOS)
-									struct sk_buff *pskb, struct nf_conn *ct, 
-#endif								
-                                                               enum NP_FLAGS flags)=NULL;
-enum LR_RESULT (*FastPath_hook11)(rtl_fp_napt_entry *fpNaptEntry, uint32 interval)=NULL;
-int (*fast_path_hook)(struct sk_buff **pskb) = NULL;
-EXPORT_SYMBOL(FastPath_hook4);
-EXPORT_SYMBOL(FastPath_hook6);
-EXPORT_SYMBOL(FastPath_hook11);
-EXPORT_SYMBOL(fast_path_hook);
-#endif
-
-#ifdef FAST_PPTP
-	void (*sync_tx_pptp_gre_seqno_hook)(struct sk_buff *skb) = NULL;	
-#ifdef CONFIG_FAST_PATH_MODULE
-EXPORT_SYMBOL(sync_tx_pptp_gre_seqno_hook);
-#endif
-#endif
-
-#if	defined(CONFIG_RTL_HARDWARE_NAT)
-__DRAM_GEN int gHwNatEnabled;
-
-int rtl865x_handle_nat(struct nf_conn *ct, int act, struct sk_buff *skb)
-{
-	struct nf_conn_nat *nat;
-	u_int32_t sip, dip, gip;
-	u_int16_t sp, dp, gp, proto=0;
-	u_int32_t timeval;
-	int rc=0;
-
-#if defined(CONFIG_RTL_HW_QOS_SUPPORT)
-	uint32 ret;
-	struct net_device	*lanDev, *wanDev;
-#endif
-
-#if defined(CONFIG_RTL_LAYERED_DRIVER_L4)
-	rtl865x_napt_entry rtl865xNaptEntry;
-	rtl865x_priority rtl865xPrio;
-	rtl865x_qos_mark rtl865xQosMark;
-#endif
-
-	if (gHwNatEnabled!=1)
-		return -1;
-
-	proto = (ct->tuplehash[0].tuple.dst.protonum==IPPROTO_TCP)? 1: 0;
-
-	if (ct->status & IPS_SRC_NAT)
-	{ /* outbound flow */
-		sip	= ct->tuplehash[0].tuple.src.u3.ip;
-		dip 	= ct->tuplehash[0].tuple.dst.u3.ip;
-		gip 	= ct->tuplehash[1].tuple.dst.u3.ip;
-		sp  	= (proto)? ct->tuplehash[0].tuple.src.u.tcp.port: ct->tuplehash[0].tuple.src.u.udp.port;
-		dp  	= (proto)? ct->tuplehash[0].tuple.dst.u.tcp.port: ct->tuplehash[0].tuple.dst.u.udp.port;
-		gp  	= (proto)? ct->tuplehash[1].tuple.dst.u.tcp.port: ct->tuplehash[1].tuple.dst.u.udp.port;
-	} 
-	else if (ct->status & IPS_DST_NAT)
-	{ /* inbound flow */
-		sip	= ct->tuplehash[1].tuple.src.u3.ip;
-		dip 	= ct->tuplehash[1].tuple.dst.u3.ip;
-		gip 	= ct->tuplehash[0].tuple.dst.u3.ip;
-		sp  	= (proto)? ct->tuplehash[1].tuple.src.u.tcp.port: ct->tuplehash[1].tuple.src.u.udp.port;
-		dp  	= (proto)? ct->tuplehash[1].tuple.dst.u.tcp.port: ct->tuplehash[1].tuple.dst.u.udp.port;
-		gp  	= (proto)? ct->tuplehash[0].tuple.dst.u.tcp.port: ct->tuplehash[0].tuple.dst.u.udp.port;
-	}
-	else 
-		return -1;
-
-	/* do not add hardware NAPT table if protocol is UDP and source IP address is equal to gateway IP address */
-	if ((act == 1) && (proto == 0) && (sip == gip))
-		return -1;
-
-	/* for TZO DDNS */
-	if ((act == 1) && (proto == 1) && (dp == 21347)) {
-		return -1;
-	}
-
-	if (act == 2) {
-		/* query for idle */
-		timeval = 0;
-#ifdef CONFIG_RTL_LAYERED_DRIVER_L4
-		rtl865xNaptEntry.protocol=proto;
-		rtl865xNaptEntry.intIp=sip;
-		rtl865xNaptEntry.intPort=sp;
-		rtl865xNaptEntry.extIp=gip;
-		rtl865xNaptEntry.extPort=gp;
-		rtl865xNaptEntry.remIp=dip;
-		rtl865xNaptEntry.remPort=dp;
-		
-		timeval = rtl865x_naptSync(&rtl865xNaptEntry, 0);
-#endif
-		if (timeval > 0)
-			return 0;
-		else
-			return -1;
-	}
-	else if (act == 0) {
-		/* delete */
-		rc = 0;
-#ifdef CONFIG_RTL_LAYERED_DRIVER_L4
-		rtl865xNaptEntry.protocol=proto;
-		rtl865xNaptEntry.intIp=sip;
-		rtl865xNaptEntry.intPort=sp;
-		rtl865xNaptEntry.extIp=gip;
-		rtl865xNaptEntry.extPort=gp;
-		rtl865xNaptEntry.remIp=dip;
-		rtl865xNaptEntry.remPort=dp;
-		
-		rc = rtl865x_delNaptConnection(&rtl865xNaptEntry);
-#endif
-	}
-	else {
-		#if defined(CONFIG_RTL_HW_QOS_SUPPORT)
-		if (NULL!=skb)
-		{
-			rtl865xNaptEntry.protocol=proto;
-			rtl865xNaptEntry.intIp=sip;
-			rtl865xNaptEntry.intPort=sp;
-			rtl865xNaptEntry.extIp=gip;
-			rtl865xNaptEntry.extPort=gp;
-			rtl865xNaptEntry.remIp=dip;
-			rtl865xNaptEntry.remPort=dp;
-
-			rtl865xQosMark.downlinkMark=0;	//Initial
-			rtl865xQosMark.uplinkMark=0;	//Initial
-			ret=rtl_qosGetSkbMarkByNaptEntry(&rtl865xNaptEntry, &rtl865xQosMark, skb);
-
-			lanDev=rtl865x_getLanDev();
-			wanDev=rtl865x_getWanDev();
-			rtl865xPrio.downlinkPrio=rtl_qosGetPriorityByMark(lanDev->name, rtl865xQosMark.downlinkMark);
-			rtl865xPrio.uplinkPrio=rtl_qosGetPriorityByMark(wanDev->name, rtl865xQosMark.uplinkMark);
-
-			if(lanDev)
-				dev_put(lanDev);
-
-			if(wanDev)
-				dev_put(wanDev);
-		} else
-		#endif
-		{
-			rtl865xPrio.downlinkPrio=0;
-			rtl865xPrio.uplinkPrio=0;
-		}
-
-#if defined(CONFIG_RTL_LAYERED_DRIVER_L4)
-		rtl865xNaptEntry.protocol=proto;
-		rtl865xNaptEntry.intIp=sip;
-		rtl865xNaptEntry.intPort=sp;
-		rtl865xNaptEntry.extIp=gip;
-		rtl865xNaptEntry.extPort=gp;
-		rtl865xNaptEntry.remIp=dip;
-		rtl865xNaptEntry.remPort=dp;
-#endif
-
-		/* add */
-#if defined(CONFIG_PROC_FS) && defined(CONFIG_NET_SCHED) && !defined(CONFIG_RTL_HW_QOS_SUPPORT)
-		if (gQosEnabled == 0)
-		{
-#ifdef CONFIG_RTL_LAYERED_DRIVER_L4
-			rc =  rtl865x_addNaptConnection(&rtl865xNaptEntry, &rtl865xPrio);
-#endif
-		}
-		else
-		{
-			act = 0;
-		}
-#else
-#ifdef CONFIG_RTL_LAYERED_DRIVER_L4
-		rc =  rtl865x_addNaptConnection(&rtl865xNaptEntry, &rtl865xPrio);
-#endif
-
-#endif
-       }
-
-	nat = nfct_nat(ct);
-	if (!rc && nat && act == 1) /* mark it as an asic entry */
-		nat->hw_acc = 1;
-	if (!rc && nat && act == 0) /* unmark it */
-		nat->hw_acc = 0;
-
-	#ifdef CONFIG_HARDWARE_NAT_DEBUG
-	/*2007-12-19*/
-	DEBUGP("%s:%d:(%s): errno=%d\n %s (%u.%u.%u.%u:%u -> %u.%u.%u.%u:%u) g:(%u.%u.%u.%u:%u)\n",
-			__FUNCTION__,__LINE__,((is_add)?"add_nat": "del_nat"), rc, ((proto)? "tcp": "udp"), 
-			NIPQUAD(sip), sp, NIPQUAD(dip), dp, NIPQUAD(gip), gp);	
-	#endif
-
-	return 0;	
-}
-
-/* return value:
-	FAILED:		ct should be delete
-	SUCCESS:	ct should NOT be delete.
-*/
-int rtl_hwnat_timer_update(struct nf_conn *ct)
-{
-	unsigned long expires, now;
-	struct nf_conn_nat *nat;
-
-	if (gHwNatEnabled!=1)
-		return FAILED;
-	
-	nat = nfct_nat(ct);	
-	if (nat==NULL || nat->hw_acc!=1)
-		return FAILED;
-	
-	now = jiffies;
-	//read_lock_bh(&nf_conntrack_lock);
-	if (ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.protonum == IPPROTO_UDP)	{
-		if(ct->status & IPS_SEEN_REPLY)
-			expires = nf_ct_udp_timeout_stream;
-		else
-			expires = nf_ct_udp_timeout;	
-	} else if (ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.protonum == IPPROTO_TCP &&
-		ct->proto.tcp.state < TCP_CONNTRACK_LAST_ACK) {
-		expires = tcp_get_timeouts_by_state(ct->proto.tcp.state);
-	} else {
-		//read_unlock_bh(&nf_conntrack_lock);
-		return FAILED;
-	}
-	//read_unlock_bh(&nf_conntrack_lock);
-	
-	if (!rtl865x_handle_nat(ct, 2, NULL)) {
-		/* update ct expires time */
-		ct->timeout.expires = now+expires;
-		rtl_check_for_acc(ct, (now+expires));
-		return SUCCESS;
-	} else
-		return FAILED;
-
-}
-#endif
-
-
-#if defined(CONFIG_RTL_IPTABLES_FAST_PATH) || defined(CONFIG_RTL_HARDWARE_NAT)
-int smart_count=0;
-unsigned long smart_count_start_timer;
-unsigned int _br0_ip;
-unsigned int _br0_mask;
-static void get_br0_ip_mask(void)
-{
-	struct in_device *in_dev;	
-	struct net_device *landev;
-	struct in_ifaddr *ifap = NULL;
-	
-      	if ((landev = __dev_get_by_name(&init_net, RTL_PS_BR0_DEV_NAME)) != NULL){
-		in_dev=(struct in_device *)(landev->ip_ptr);
-		if (in_dev != NULL) {
-			for (ifap=in_dev->ifa_list; ifap != NULL; ifap=ifap->ifa_next) {
-				if (strcmp(RTL_PS_BR0_DEV_NAME, ifap->ifa_label) == 0){
-					_br0_ip = ifap->ifa_address;
-					_br0_mask = ifap->ifa_mask;
-					return; 
-				}
-			}
-			
-		}
-	}	
-}
-
-/* return value:
-	FAILED:			ct should be delete
-	SUCCESS:		ct should NOT be delete.
-*/
-void rtl_delConnCache(struct nf_conn *ct)
-{
-	#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-	enum NP_PROTOCOL protocol;
-	rtl_fp_napt_entry rtlFpNaptEntry;
-	#endif
-	#ifdef CONFIG_RTL_HARDWARE_NAT 
-	struct nf_conn_nat *nat;
-	#endif
-
-	if (ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.protonum == IPPROTO_TCP) {
-		#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-		protocol = NP_TCP;
-		#endif
-	} else if (ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.protonum == IPPROTO_UDP) {
-		#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-		protocol = NP_UDP;
-		#endif
-	} else {
-		return;
-	}
-
-	spin_lock_bh(&nf_conntrack_lock);
-	#if defined(CONFIG_RTL_HARDWARE_NAT)
-	nat = nfct_nat(ct);
-	if ((nat!=NULL) && (nat->hw_acc==1)) {
-		rtl865x_handle_nat(ct, 0, NULL);
-	}
-	#endif
-
-	#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-	if(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u3.ip 
-		   == ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u3.ip) {
-		   /*case  WAN->LAN(BC->AB) use C|A-B*/
-
-		rtlFpNaptEntry.protocol=protocol;
-		rtlFpNaptEntry.intIp=ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u3.ip;
-		rtlFpNaptEntry.intPort=ntohs(ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u.all);
-		rtlFpNaptEntry.extIp=ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.u3.ip;
-		rtlFpNaptEntry.extPort=ntohs(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.u.all);
-		rtlFpNaptEntry.remIp=ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u3.ip;
-		rtlFpNaptEntry.remPort=ntohs(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u.all);
-			
-		#ifdef CONFIG_FAST_PATH_MODULE
-		if(FastPath_hook4!=NULL)
-		{
-			FastPath_hook4(&rtlFpNaptEntry) ;	
-		}
-		#else
-		rtk_delNaptConnection(&rtlFpNaptEntry) ;		
-		#endif
-	}	else if (ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.u3.ip 
-			== ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u3.ip) {
-		/*case  LAN->WAN(AB->BC) use A|C-B*/
-
-		rtlFpNaptEntry.protocol=protocol;
-		rtlFpNaptEntry.intIp=ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u3.ip;
-		rtlFpNaptEntry.intPort=ntohs(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u.all);
-		rtlFpNaptEntry.extIp=ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u3.ip;
-		rtlFpNaptEntry.extPort=ntohs(ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u.all);
-		rtlFpNaptEntry.remIp=ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u3.ip;
-		rtlFpNaptEntry.remPort=ntohs(ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u.all);
-		
-		#ifdef CONFIG_FAST_PATH_MODULE
-		if(FastPath_hook4!=NULL)
-		{
-			FastPath_hook4(&rtlFpNaptEntry);
-		}
-		#else
-		rtk_delNaptConnection(&rtlFpNaptEntry);
-		#endif
-	}
-	#endif
-	spin_unlock_bh(&nf_conntrack_lock);
-}
-
-void rtl_check_for_acc(struct nf_conn *ct, unsigned long expires)
-{
-	#if defined(CONFIG_RTL_NF_CONNTRACK_GARBAGE_NEW)
-	int	newstate;
-	struct list_head* state_hash;
-
-	write_lock_bh(&nf_conntrack_lock);
-	if (ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.protonum == IPPROTO_TCP) {
-		newstate = ct->proto.tcp.state;
-		state_hash = Tcp_State_Hash_Head[newstate].state_hash;
-	} else if (ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.protonum == IPPROTO_UDP) {
-		if(ct->status & IPS_SEEN_REPLY)
-			newstate = 1;
-		else
-			newstate = 0;
-		state_hash = Udp_State_Hash_Head[newstate].state_hash;
-	} else {
-		write_unlock_bh(&nf_conntrack_lock);
-		return;
-	}
-
-	list_move_tail(&ct->state_tuple, state_hash);
-	write_unlock_bh(&nf_conntrack_lock);
-	#endif
-}
-
-int32 rtl_connCache_timer_update(struct nf_conn *ct)
-{
-	spin_lock_bh(&nf_conntrack_lock);
-	if (time_after_eq(jiffies, ct->timeout.expires)) {
-		#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-		if (SUCCESS==rtl_fpTimer_update(ct)) {
-			add_timer(&ct->timeout);
-			spin_unlock_bh(&nf_conntrack_lock);
-			return SUCCESS;
-		}
-		#endif
-
-		#if defined(CONFIG_RTL_HARDWARE_NAT)
-		if (SUCCESS==rtl_hwnat_timer_update(ct)) {
-			add_timer(&ct->timeout);
-			spin_unlock_bh(&nf_conntrack_lock);
-			return SUCCESS;
-		}
-		#endif
-	}
-	spin_unlock_bh(&nf_conntrack_lock);
-	return FAILED;
-}
-
-#if defined(IMPROVE_QOS) 
-/*
- * ### for iperf application test ###
- * the behavior of iperf UDP test is LAN PC (client) will burst UDP from LAN to WAN (by one way),
- * WAN PC (server) will only send one UDP packet (statistics) at the end of test.
- * so the fastpath or hardware NAT will create link at the end of test.
- *
- * the purpose for adding the following code is to create fastpath or hardware NAT link 
- * when we only get one packet from LAN to WAN in UDP case.
- */
-static inline int32 rtl_addConnCheck(struct nf_conn *ct, struct iphdr *iph, struct sk_buff *skb)
-{
-	extern unsigned int	_br0_ip;
-	extern unsigned int	_br0_mask;
-	extern int			smart_count;
-	extern unsigned long smart_count_start_timer;
-	struct tcphdr		*tcph;
-	uint32	sip, dip;
-	int32	create_conn;
-
-	sip = ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u3.ip;
-	dip = ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u3.ip;
-	create_conn = FALSE;
-	
-	if (((ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.u3.ip 
-			 == ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u3.ip) ||
-			(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u3.ip 
-			 == ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u3.ip))
-	#if defined(UNNUMBER_IP)
-		 && (is_unnumber_ip(dip)==FALSE)
-	#endif
-	) {
-		/* UDP and "LAN to WAN" */
-		/* ignore some cases:  
-		 *	1. sip = br0's ip -----> (ex. sip 192.168.1.254 ==> dip 239.255.255.250)
-		 * 	2. (sip & br0's mask) != (br0's ip & br0's mask) -----> sip is not in br0's subnet
-		 *	3. (dip & br0's mask) =  (br0's ip & br0's mask) -----> dip is in br0's subnet
-		 *	4. dip != multicast IP address
-		 *	5. sip != gip
-		 */
-		if (iph->protocol == IPPROTO_UDP) {
-			if ((ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.u3.ip 
-					 == ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u3.ip)&&
-				(sip != _br0_ip) &&
-				((sip & _br0_mask) == (_br0_ip & _br0_mask)) &&
-				((dip & _br0_mask) != (_br0_ip & _br0_mask)) &&
-				((dip & 0xf0000000) != 0xe0000000) &&
-				(sip != (ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u3.ip))) {
-				create_conn = TRUE;
-			} else if ((ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u3.ip 
-					 	== ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u3.ip)&&
-					 ((sip & _br0_mask) != (_br0_ip & _br0_mask))&&
-					 ((dip & _br0_mask) == (_br0_ip & _br0_mask))&&
-					 (iph->daddr ==dip)) {
-				create_conn = TRUE;
-			}
-		} else if (iph->protocol == IPPROTO_TCP) {
-			tcph=(void *) iph + iph->ihl*4;
-			if (!tcph->fin && !tcph->syn && !tcph->rst && tcph->psh==1 && 
-				tcph->ack ==1 &&  
-				(((ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.u3.ip==ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u3.ip) &&
-				(iph->daddr !=_br0_ip) && ((sip & _br0_mask) == (_br0_ip & _br0_mask)) &&
-				((dip & _br0_mask) != (_br0_ip & _br0_mask)) && (sip != (ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u3.ip)))||
-				((ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u3.ip==ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u3.ip) &&
-				((sip & _br0_mask) != (_br0_ip & _br0_mask)) && 
-				((dip & _br0_mask) == (_br0_ip & _br0_mask))&& (sip == iph->saddr)))) {
-
-				if (smart_count==0) {
-					smart_count_start_timer = jiffies+HZ;
-				}
-				
-				if (time_after(jiffies, smart_count_start_timer)) {
-					smart_count_start_timer = jiffies+HZ;
-					smart_count=0;
-				}
-
-				smart_count++;
-				if(smart_count >810){
-					//panic_printk("the case hit for mart flow:tcp state=%d, assured=%d\n",ct->proto.tcp.state,test_bit(IPS_ASSURED_BIT, &ct->status));
-					create_conn=TRUE;
-				}
-			}
-		} else {
-			return create_conn;
-		}
-
-#if defined(UNNUMBER_IP)
-		if ((!create_conn) 
-			&& (is_unnumber_ip(sip)==TRUE)) 
-			){
-				create_conn = TRUE;
-		}
-#endif
-	}
-
-	return create_conn;
-}
-
-void rtl_addConnCache(struct nf_conn *ct, struct sk_buff *skb)
-{
-	int assured;
-	int create_conn;
-	struct iphdr *iph;
-	#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-	enum NP_PROTOCOL protocol;
-	rtl_fp_napt_entry rtlFpNaptEntry;
-	#endif
-
-	if (nfct_help(ct))
-		return;
-
-	iph=ip_hdr(skb);
-	if (iph->protocol== IPPROTO_TCP) {
-		assured = ((ct->proto.tcp.state==TCP_CONNTRACK_ESTABLISHED)&&
-					(test_bit(IPS_DST_NAT_DONE_BIT, &ct->status) || 
-					test_bit(IPS_SRC_NAT_DONE_BIT, &ct->status)));
-
-		#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-		protocol = NP_TCP;
-		#endif
-	} else if (iph->protocol== IPPROTO_UDP) {
-		assured = (test_bit(IPS_DST_NAT_DONE_BIT, &ct->status) || 
-				test_bit(IPS_SRC_NAT_DONE_BIT, &ct->status));
-		
-		#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-		protocol = NP_UDP;
-		#endif
-	} else {
-		return;
-	}
-
-	
-	if (!assured) {
-	        create_conn = rtl_addConnCheck(ct, iph, skb);
-	} else
-		create_conn = 0;
-
-	#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-	/*1.add "!(ct->helper)" to fix ftp-cmd type packet 
-	  2.add identify case LAN->WAN(AB->BC) or WAN->LAN(BC->AB) 
-	  3.add !(ct->nat.info.helper) for best ALG avoid
-	  */
-	if (assured || create_conn) {
-		if(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u3.ip 
-			== ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u3.ip) {
-			/*case BC->AB*/
-			/* wan->lan */
-			
-			rtlFpNaptEntry.protocol=protocol;
-			rtlFpNaptEntry.intIp=ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u3.ip;
-			rtlFpNaptEntry.intPort=ntohs(ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u.all);
-			rtlFpNaptEntry.extIp=ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.u3.ip;
-			rtlFpNaptEntry.extPort=ntohs(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.u.all);
-			rtlFpNaptEntry.remIp=ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u3.ip;
-			rtlFpNaptEntry.remPort=ntohs(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u.all);
-			
-			#ifdef CONFIG_FAST_PATH_MODULE
-			if(FastPath_hook6!=NULL)
-			{
-				FastPath_hook6(&rtlFpNaptEntry,
-					skb, ct, 
-					NP_NONE);					
-			}
-			#else
-			rtk_addNaptConnection(&rtlFpNaptEntry,
-				skb, ct, 
-				NP_NONE);		
-			#endif
-		} else if (ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.u3.ip 
-			== ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u3.ip) {
-			/*case AB->BC*/
-			/* lan->wan */
-
-			rtlFpNaptEntry.protocol=protocol;
-			rtlFpNaptEntry.intIp=ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u3.ip;
-			rtlFpNaptEntry.intPort=ntohs(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u.all);
-			rtlFpNaptEntry.extIp=ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u3.ip;
-			rtlFpNaptEntry.extPort=ntohs(ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u.all);
-			rtlFpNaptEntry.remIp=ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u3.ip;
-			rtlFpNaptEntry.remPort=ntohs(ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u.all);
-			
-			#ifdef CONFIG_FAST_PATH_MODULE
-			if(FastPath_hook6!=NULL)
-			{
-				FastPath_hook6(&rtlFpNaptEntry,
-					skb, ct, 
-					NP_NONE);
-			}
-			#else
-			rtk_addNaptConnection(&rtlFpNaptEntry,
-				skb, ct, 
-				NP_NONE);
-			#endif
-		}
-	}
-	#endif
-
-	#if	defined(CONFIG_RTL_HARDWARE_NAT)
-	/*2007-12-19*/
-	#if !defined(CONFIG_RTL865x_TCPFLOW_NONE_STATUS_CHECK)
-	if (assured || create_conn)
-	#endif
-	{
-		rtl865x_handle_nat(ct, 1, skb);
-	}
-	#endif
-}
-#else	/* !defined(IMPROVE_QOS)  */
-/*
- * ### for iperf application test ###
- * the behavior of iperf UDP test is LAN PC (client) will burst UDP from LAN to WAN (by one way),
- * WAN PC (server) will only send one UDP packet (statistics) at the end of test.
- * so the fastpath or hardware NAT will create link at the end of test.
- *
- * the purpose for adding the following code is to create fastpath or hardware NAT link 
- * when we only get one packet from LAN to WAN in UDP case.
- */
-static int32 rtl_fpAddConnCheck(struct nf_conn *ct, struct iphdr *iph, struct sk_buff *skb)
-{
-	extern unsigned int	_br0_ip;
-	extern unsigned int	_br0_mask;
-	struct tcphdr		*tcph;
-	uint32	sip, dip;
-	int32	create_conn;
-
-	sip = ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u3.ip;
-	dip = ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u3.ip;
-	create_conn = FALSE;
-	
-	if ((ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.u3.ip 
-		 == ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u3.ip)
-	#if defined(UNNUMBER_IP)
-		 && (is_unnumber_ip(dip)==FALSE)
-	#endif
-	) {
-		/* lan -> wan */
-		if (iph->protocol == IPPROTO_UDP &&
-			(sip != _br0_ip) &&
-			((sip & _br0_mask) == (_br0_ip & _br0_mask)) &&
-			((dip & _br0_mask) != (_br0_ip & _br0_mask)) &&
-			(!IS_CLASSD_ADDR(dip)) &&
-			(sip != (ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u3.ip))
-			) {
-			create_conn = TRUE;
-			/* copied from last 2 line of this function **/
-			set_bit(IPS_SEEN_REPLY_BIT, &ct->status);
-			/* next 3 lines are copied from udp_packet() in ip_conntrack_proto_udp.c */
-			nf_ct_refresh(ct,skb, nf_ct_udp_timeout_stream);
-			/* Also, more likely to be important, and not a probe */
-			set_bit(IPS_ASSURED_BIT, &ct->status);
-		} else if (iph->protocol == IPPROTO_TCP) {
-			tcph=(void *) iph + iph->ihl*4;
-			if (!tcph->fin && !tcph->syn && !tcph->rst && tcph->psh==1 && 
-				tcph->ack ==TRUE &&  (iph->daddr !=_br0_ip) && ((sip & _br0_mask) == (_br0_ip & _br0_mask)) &&
-				((dip & _br0_mask) != (_br0_ip & _br0_mask)) && (sip != (ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u3.ip))) { 
-
-				if (smart_count==0) {
-					smart_count_start_timer = jiffies+HZ;
-				}
-				
-				if (time_after(jiffies, smart_count_start_timer)) {
-					smart_count_start_timer = jiffies+HZ;
-					smart_count=0;
-				}
-
-				smart_count++;
-				if(smart_count >810){
-					//panic_printk("the case hit for mart flow:tcp state=%d, assured=%d\n",ct->proto.tcp.state,test_bit(IPS_ASSURED_BIT, &ct->status));
-					create_conn=TRUE;
-				}
-			}
-		} else {
-			return FALSE;
-		}
-
-#if defined(UNNUMBER_IP)
-		if ((!create_conn) 
-			&& (is_unnumber_ip(sip)==TRUE)) 
-			){
-				create_conn = TRUE;
-		}
-#endif
-	}
-
-	return create_conn;
-}
-
-void rtl_fpAddConnCache(struct nf_conn *ct, struct sk_buff *skb)
-{
-	int assured;
-	int create_conn;
-	struct iphdr *iph;
-	enum NP_PROTOCOL protocol;
-	rtl_fp_napt_entry rtlFpNaptEntry;
-
-	if (nfct_help(ct))
-		return;
-	
-	iph=ip_hdr(skb);
-	create_conn = rtl_fpAddConnCheck(ct, iph, skb);
-	assured = test_bit(IPS_ASSURED_BIT, &ct->status);
-	
-	/*1.add "!(ct->helper)" to fix ftp-cmd type packet 
-	  2.add identify case LAN->WAN(AB->BC) or WAN->LAN(BC->AB) 
-	  3.add !(ct->nat.info.helper) for best ALG avoid
-	  */
-
-	if ((assured) || (TRUE==create_conn))
-	{
-		if (ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.protonum == IPPROTO_TCP) {
-			protocol = NP_TCP;
-		} else if (ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.protonum == IPPROTO_UDP) {
-			protocol = NP_UDP;
-		}
-
-		if(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u3.ip 
-			== ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u3.ip) {
-			/*case BC->AB*/
-			/* wan->lan */
-
-			rtlFpNaptEntry.protocol=protocol;
-			rtlFpNaptEntry.intIp=ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u3.ip;
-			rtlFpNaptEntry.intPort=ntohs(ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u.all);
-			rtlFpNaptEntry.extIp=ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.u3.ip;
-			rtlFpNaptEntry.extPort=ntohs(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.u.all);
-			rtlFpNaptEntry.remIp=ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u3.ip;
-			rtlFpNaptEntry.remPort=ntohs(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u.all);
-			
-			#ifdef CONFIG_FAST_PATH_MODULE
-			if(FastPath_hook6!=NULL)
-			{
-				FastPath_hook6(&rtlFpNaptEntry,
-					NP_NONE);					
-			}
-			#else
-			rtk_addNaptConnection(&rtlFpNaptEntry,
-				NP_NONE);		
-			#endif
-		} else if (ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.u3.ip 
-			== ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u3.ip) {
-			/*case AB->BC*/
-			/* lan->wan */
-
-			rtlFpNaptEntry.protocol=protocol;
-			rtlFpNaptEntry.intIp=ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u3.ip;
-			rtlFpNaptEntry.intPort=ntohs(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.u.all);
-			rtlFpNaptEntry.extIp=ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u3.ip;
-			rtlFpNaptEntry.extPort=ntohs(ct->tuplehash[IP_CT_DIR_REPLY].tuple.dst.u.all);
-			rtlFpNaptEntry.remIp=ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u3.ip;
-			rtlFpNaptEntry.remPort=ntohs(ct->tuplehash[IP_CT_DIR_REPLY].tuple.src.u.all);
-			
-			#ifdef CONFIG_FAST_PATH_MODULE
-			if(FastPath_hook6!=NULL)
-			{
-				FastPath_hook6(&rtlFpNaptEntry,
-					NP_NONE);
-			}
-			#else
-			rtk_addNaptConnection(&rtlFpNaptEntry,
-				NP_NONE);
-			#endif
-		}
-	}
-
-}
-#endif	/* defined(IMPROVE_QOS)  */
-
-#endif
-
-#if defined(CONFIG_PROC_FS) && defined(CONFIG_RTL_HARDWARE_NAT )
-static struct proc_dir_entry *proc_hw_nat=NULL;
-static char gHwNatSetting[16];
-//extern unsigned int ldst, lmask, wdst, wmask;
-
-static int hw_nat_read_proc(char *page, char **start, off_t off,
-		     int count, int *eof, void *data)
-{
-	int len;
-
-	len = sprintf(page, "%s\n", gHwNatSetting);
-
-	if (len <= off+count) *eof = 1;
-	*start = page + off;
-	len -= off;
-	if (len>count) len = count;
-	if (len<0) len = 0;
-	return len;
-}
-
-static int hw_nat_write_proc(struct file *file, const char *buffer,
-		      unsigned long count, void *data)
-{
-	if (count < 2) 
-		return -EFAULT;
-
-	if (buffer && !copy_from_user(&gHwNatSetting, buffer, 8)) {
-		if (gHwNatSetting[0] == '0') { /* hardware NAT disabled, operation mode = gateway */
-			gHwNatEnabled = 0;
-			rtl865x_nat_reinit();
-			rtl865x_changeOpMode(GATEWAY_MODE);
-			//rtl8651_setAsicOperationLayer(4);
-		}
-		else if (gHwNatSetting[0] == '1') { /* hardware NAT enabled, operation mode = gateway */
-			
-			rtl865x_changeOpMode(GATEWAY_MODE);
-			//rtl8651_setAsicOperationLayer(4);
-			gHwNatEnabled = 1;
-		}
-		else if (gHwNatSetting[0] == '2') { /* hardware NAT enabled, operation mode = bridge mode*/
-			//rtl865x_delRoute(wdst, wmask);
-			//rtl865x_delRoute(ldst, lmask);
-			rtl865x_changeOpMode(BRIDGE_MODE);
-			//rtl8651_setAsicOperationLayer(3);
-			gHwNatEnabled = 2;
-		}
-		else if(gHwNatSetting[0] == '3'){ /* hardware NAT enabled, operation mode = wisp mode */
-			rtl865x_changeOpMode(WISP_MODE);
-			//rtl8651_setAsicOperationLayer(3);
-			gHwNatEnabled = 3;
-		}
-		else if ((gHwNatSetting[0] == '8')&&
-			((gHwNatSetting[1] == '5') /* L2TP */
-			||(gHwNatSetting[1] == '4') /* PPTP */))
-		{
-			gHwNatEnabled = 0;
-		}
-		#if defined(CONFIG_RTL_HARDWARE_NAT) || defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-		else if (gHwNatSetting[0] == '9') {
-			get_br0_ip_mask();
-		}
-		#endif
-		return count;
-	}
-	return -EFAULT;
-}
-#endif
-
-#if defined(CONFIG_RTL_819X) && (defined(CONFIG_PROC_FS) && !defined(CONFIG_RTL_HARDWARE_NAT))
-static struct proc_dir_entry *proc_sw_nat=NULL;
-static char gSwNatSetting[16];
-
-static int sw_nat_read_proc(char *page, char **start, off_t off,
-		     int count, int *eof, void *data)
-{
-	int len;
-
-	len = sprintf(page, "%s\n", gSwNatSetting);
-
-	if (len <= off+count) *eof = 1;
-	*start = page + off;
-	len -= off;
-	if (len>count) len = count;
-	if (len<0) len = 0;
-	return len;
-}
-
-static int sw_nat_write_proc(struct file *file, const char *buffer,
-		      unsigned long count, void *data)
-{
-	if (count < 2) 
-		return -EFAULT;
-      
-	if (buffer && !copy_from_user(&gSwNatSetting, buffer, 8)) {
-		if (gSwNatSetting[0] == '0'){  /* operation mode = GATEWAY */
-			//SoftNAT_OP_Mode(2);
-			rtl865x_changeOpMode(GATEWAY_MODE);
-			//rtl8651_setAsicOperationLayer(2);
-		}
-		else if (gSwNatSetting[0] == '1'){  /* operation mode = BRIDGE*/
-			//SoftNAT_OP_Mode(1);
-			rtl865x_changeOpMode(BRIDGE_MODE);
-			//rtl8651_setAsicOperationLayer(2);
-		}
-		else if(gSwNatSetting[0] == '2'){ /* operation mode = WISP */
-			rtl865x_changeOpMode(WISP_MODE);
-			//rtl8651_setAsicOperationLayer(2);
-		}
-#if defined(CONFIG_RTL_HARDWARE_NAT) || defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-		else if(gSwNatSetting[0] == '9'){
-			get_br0_ip_mask();
-		}
-#endif
-		return count;
-	}
-	return -EFAULT;
-}
-#endif /* defined(CONFIG_RTL_819X) && (defined(CONFIG_PROC_FS) && !defined(CONFIG_RTL_HARDWARE_NAT))	*/
-
-#if defined(CONFIG_RTL_819X)
-int32 rtl_nat_init(void)
-{
-	#if defined(CONFIG_PROC_FS) && defined(CONFIG_RTL_HARDWARE_NAT)
-	proc_hw_nat = create_proc_entry("hw_nat", 0, NULL);
-	if (proc_hw_nat) {
-		proc_hw_nat->read_proc = hw_nat_read_proc;
-		proc_hw_nat->write_proc = hw_nat_write_proc;
-	}  
-	#endif
-
-	#if defined(CONFIG_PROC_FS) && !defined(CONFIG_RTL_HARDWARE_NAT)
-	proc_sw_nat = create_proc_entry("sw_nat", 0, NULL);
-	if (proc_sw_nat) {
-		proc_sw_nat->read_proc = sw_nat_read_proc;
-		proc_sw_nat->write_proc = sw_nat_write_proc;
-	}  
-	#endif
-
-	#if	defined(CONFIG_RTL_HARDWARE_NAT)
-	gHwNatEnabled=1;
-	#endif
-
-	return SUCCESS;
-}
-#endif
-
-#if defined(CONFIG_RTL_LOCAL_PUBLIC) || defined(CONFIG_RTL_MULTIPLE_WAN) || (defined(CONFIG_NET_SCHED)&&defined(CONFIG_RTL_IPTABLES_FAST_PATH))
-extern int rtl865x_curOpMode;
-struct net_device *rtl865x_getWanDev(void )
-{
-	struct net_device * wanDev=NULL;
-	
-	if(rtl865x_curOpMode==GATEWAY_MODE)
-	{
-#if defined(CONFIG_RTL_PUBLIC_SSID)
-		wanDev=dev_get_by_name(&init_net,RTL_GW_WAN_DEVICE_NAME);
-#else
-		//Try ppp0 first
-		wanDev=dev_get_by_name(&init_net,RTL_PS_PPP0_DEV_NAME);
-		if(wanDev==NULL)
-		{
-			//Try eth1 then
-			wanDev=dev_get_by_name(&init_net,RTL_PS_WAN0_DEV_NAME);
-		}
-#endif		
-	}
-	else if(rtl865x_curOpMode==WISP_MODE)
-	{
-#if defined(CONFIG_RTL_PUBLIC_SSID)
-		wanDev=dev_get_by_name(&init_net,RTL_WISP_WAN_DEVICE_NAME);
-#else
-		wanDev=dev_get_by_name(&init_net,RTL_PS_WLAN0_DEV_NAME);
-#endif
-	}
-	else if(rtl865x_curOpMode==BRIDGE_MODE)
-	{
-#if defined(CONFIG_RTL_PUBLIC_SSID)
-		wanDev=dev_get_by_name(&init_net,RTL_BR_WAN_DEVICE_NAME);
-#else
-		wanDev=dev_get_by_name(&init_net,RTL_PS_BR0_DEV_NAME);
-#endif		
-	}
-	
-	return wanDev;
-}
-
-struct net_device *rtl865x_getLanDev(void )
-{
-	struct net_device * lanDev=NULL;
-	lanDev=dev_get_by_name(&init_net,RTL_PS_BR0_DEV_NAME);
-	return lanDev;
-}
-#endif
-
-#if defined (CONFIG_RTL_LOCAL_PUBLIC) || defined(CONFIG_RTL_HW_QOS_SUPPORT)
-int rtl865x_attainDevType(unsigned char *devName, unsigned int *isLanDev, unsigned int *isWanDev)
-{
-	*isLanDev=0;
-	*isWanDev=0;
-	if(rtl865x_curOpMode==GATEWAY_MODE)
-	{
-#if defined(CONFIG_RTL_PUBLIC_SSID)
-		if(strncmp(devName, RTL_PS_WAN0_DEV_NAME, 4) ==0 || strncmp(devName, RTL_GW_WAN_DEVICE_NAME, 3) ==0 || 
-			rtl865x_from_public_ssid_device(devName)
-			)
-#else
-		if(strncmp(devName, RTL_PS_WAN0_DEV_NAME, 4) ==0)
-#endif
-		{
-			*isWanDev=1;
-		}
-		else if(	(strncmp(devName, RTL_PS_BR0_DEV_NAME, 3) ==0)||	
-				(strncmp(devName, RTL_PS_ETH_NAME, 3) ==0) || 	
-				(strncmp(devName, RTL_PS_WLAN_NAME, 4) ==0))
-		{
-			*isLanDev=1;
-		}
-		else
-		{
-			return -1;
-		}
-		
-	}
-	else if(rtl865x_curOpMode==WISP_MODE)
-	{
-		if(strncmp(devName, RTL_PS_WAN0_DEV_NAME, 4)==0)
-		{
-			*isWanDev=1;
-		}
-		else if(	(strncmp(devName, RTL_PS_BR0_DEV_NAME, 3) ==0) ||
-				(strncmp(devName, RTL_PS_ETH_NAME, 3) ==0))
-		{
-			*isLanDev=1;
-		}
-		else
-		{
-			return -1;
-		}
-	}
-	else if(rtl865x_curOpMode==BRIDGE_MODE)
-	{
-		if(	(strncmp(devName, RTL_PS_BR0_DEV_NAME, 3) ==0) ||
-			(strncmp(devName, RTL_PS_ETH_NAME, 3) ==0) ||
-			(strncmp(devName, RTL_PS_WLAN_NAME, 4) ==0))
-		{
-			*isLanDev=0;
-		}
-		else
-		{
-			return -1;
-		}
-	}
-	else
-	{
-		return -1;
-	}
-	
-	return 0;
-}
-#endif
-
-#if defined (CONFIG_RTL_LOCAL_PUBLIC)
-int rtl865x_localPublicRx(struct sk_buff *skb)
-{
-	struct rtl865x_pktInfo pktInfo;
-	unsigned int rxFromLan, rxFromWan;
-	
-	if(rtl865x_localPublicEnabled() ==0)
-	{
-		goto end_of_local_public_rx;
-	}
-	
-	if(rtl865x_attainDevType(skb->dev->name, &rxFromLan, &rxFromWan))
-	{
-		return NET_RX_SUCCESS;
-	}
-
-	if(skb->localPublicFlags == 0x1)
-	{
-		//local public has done
-		return NET_RX_SUCCESS;
-	}
-	#if 0
-	printk("%s:%d,skb->dev->name is %s,rxFromLan is %d,rxFromWan is %d\n",__FUNCTION__,__LINE__,skb->dev->name,rxFromLan,rxFromWan);
-	printk("EtherType: 0x%x\n", *((uint16*)&skb->mac.raw[12]));
-	printk("%x:%x:%x:%x:%x:%x ==> %x:%x:%x:%x:%x:%x \n\n", 
-	skb->mac.raw[6], skb->mac.raw[7], skb->mac.raw[8],
-	skb->mac.raw[9], skb->mac.raw[10], skb->mac.raw[11], 
-	skb->mac.raw[0], skb->mac.raw[1], skb->mac.raw[2], 
-	skb->mac.raw[3], skb->mac.raw[4], skb->mac.raw[5]);
-	#endif
-	if(rxFromWan)
-	{
-		/*rx from ethernet wan*/
-		/*direction WAN--->LAN*/
-		//pktInfo.data=skb->mac.raw;
-		pktInfo.data=skb_mac_header(skb);
-		pktInfo.action=RX_WAN_PACKET;
-		rtl865x_checkLocalPublic(&pktInfo);
-	
-		if(pktInfo.fromLocalPublic==1)
-		{
-			kfree_skb(skb);
-			return NET_RX_DROP;
-		}
-		else if(pktInfo.toLocalPublic==1)
-		{
-	
-			skb->pkt_type=PACKET_HOST;
-			//printk("%s:%d,pktInfo.fromLocalPublic is %d,pktInfo.toLocalPublic is %d\n",__FUNCTION__,__LINE__,pktInfo.fromLocalPublic,pktInfo.toLocalPublic );
-			memcpy(eth_hdr(skb)->h_dest, skb->dev->dev_addr, 6);
-		 }
-		
-	}
-	else if (rxFromLan)
-	{
-		/*rx from ethernet lan*/
-		pktInfo.data=skb_mac_header(skb);
-		pktInfo.port=skb->srcPort;
-		pktInfo.action=RX_LAN_PACKET;
-		strcpy(pktInfo.dev, skb->dev->name);
-		rtl865x_checkLocalPublic(&pktInfo);
-		//printk("%s:%d,pktInfo.fromLocalPublic is %d,pktInfo.toLocalPublic is %d\n",__FUNCTION__,__LINE__,pktInfo.fromLocalPublic,pktInfo.toLocalPublic );
-		if(pktInfo.fromLocalPublic==1)
-		{
-			skb->fromLocalPublic=1;
-			skb->srcLocalPublicIp=pktInfo.srcIp;
-			//if(pktInfo.toLocalPublic==1)
-			{			
-				skb->pkt_type=PACKET_HOST;
-				memcpy(eth_hdr(skb)->h_dest, skb->dev->dev_addr, 6);
-				#if 0
-				dest = eth_hdr(skb)->h_dest;
-				src = eth_hdr(skb)->h_source;
-				printk("=========%s(%d),dst(%x:%x:%x:%x:%x:%x),src(%x:%x:%x:%x:%x:%x)\n",__FUNCTION__,__LINE__,
-					dest[0],dest[1],dest[2],dest[3],dest[4],dest[5],
-					src[0],src[1],src[2],src[3],src[4],src[5]);
-				#endif
-				
-			}
-		}
-		
-	}
-	skb->localPublicFlags = 0x1;
-	
-end_of_local_public_rx:
-	return NET_RX_SUCCESS;
-}
-
-int rtl865x_localPublicTx(struct sk_buff *skb, struct net_device *dev)
-{
-	unsigned int txToLan, txToWan;
-	if(rtl865x_attainDevType(skb->dev->name, &txToLan, &txToWan))
-	{
-		return NET_RX_SUCCESS;
-	}
-	
-	if(txToWan)
-	{	
-		if((skb->fromLocalPublic==1) && (skb->srcLocalPublicIp!=0))
-		{
-			rtl865x_getLocalPublicMac(skb->srcLocalPublicIp, eth_hdr(skb)->h_source);
-		}
-			
-	}
-	else if (txToLan)
-	{
-		/*needn't do anything*/
-
-	}
-	return NET_RX_SUCCESS;
-}
-
-#endif
-
-int rtl865x_getDevIpAndNetmask(struct net_device * dev, unsigned int *ipAddr, unsigned int *netMask )
-{
-	struct in_device *in_dev;	
-	struct in_ifaddr *ifap = NULL;
-
-	if((dev==NULL) || (ipAddr==NULL) || (netMask==NULL))
-	{
-		return FAILED;
-	}
-	
-	*ipAddr=0;
-	*netMask=0;
-   
-	in_dev=(struct net_device *)(dev->ip_ptr);
-	if (in_dev != NULL) {
-		for (ifap=in_dev->ifa_list; ifap != NULL; ifap=ifap->ifa_next) {
-			if (strcmp(dev->name, ifap->ifa_label) == 0){
-				*ipAddr = ifap->ifa_address;
-				*netMask = ifap->ifa_mask;
-				return SUCCESS; 
-			}
-		}
-		
-	}
-	
-	return FAILED;
-		
-}
-
-
-#if defined(CONFIG_PROC_FS) && defined(CONFIG_NET_SCHED)
-#define	QOS_CLASSIFY_INFO_LEN	16
-typedef struct {
-	/*	classify	*/
-	unsigned int protocol;
-	struct in_addr local_ip;
-	struct in_addr  remote_ip;
-	unsigned short lo_port;
-	unsigned short re_port;
-
-	/*	tc	*/
-	uint32		mark;
-	unsigned char	prio;
-} rtl865x_qos_cache_t;
-
-static struct proc_dir_entry *proc_qos=NULL;
-
-static char *gQosSetting = NULL;
-#ifdef CONFIG_FAST_PATH_MODULE
-EXPORT_SYMBOL(gQosEnabled);
-#endif
-
-static int qos_read_proc(char *page, char **start, off_t off,
-		     int count, int *eof, void *data)
-{
-      int len;
-
-      len = sprintf(page, "%s\n", gQosSetting);
-
-      if (len <= off+count) *eof = 1;
-      *start = page + off;
-      len -= off;
-      if (len>count) len = count;
-      if (len<0) len = 0;
-      return len;
-}
-
-static int qos_write_proc(struct file *file, const char *buffer,
-		      unsigned long count, void *data)
-{
-      if ( gQosSetting==NULL || count < 2) 
-	    return -EFAULT;
-
-      if (buffer && !copy_from_user(gQosSetting, buffer, count)) {
-          gQosSetting[count-1] = 0; /* remove 0x0a */
-          if (gQosSetting[0] == '0')
-                gQosEnabled = 0;
-          else
-                gQosEnabled = 1;
-
-#if defined (CONFIG_RTL_HW_QOS_SUPPORT) && defined(CONFIG_RTL_QOS_PATCH)
-	if(gQosEnabled == 1){
-		rtl865x_reinitOutputQueuePatchForQoS(TRUE);
-	}
-	else{
-		rtl865x_reinitOutputQueuePatchForQoS(FALSE);
-	}
-#endif
-
-	    return count;
-      }
-      return -EFAULT;
-}
-#endif
-
-#if defined(CONFIG_NET_SCHED)
-#define	RTL_QOS_PROC_MAX_LEN		1024
-int32 rtl_qos_init(void)
-{
-	#if defined(CONFIG_PROC_FS)
-	proc_qos = create_proc_entry("qos", 0, NULL);
-	if (proc_qos) {
-		proc_qos->read_proc = qos_read_proc;
-		proc_qos->write_proc = qos_write_proc;
-	}
-	#endif
-	gQosSetting = kmalloc(RTL_QOS_PROC_MAX_LEN, GFP_KERNEL);
-	memset(gQosSetting, 0, RTL_QOS_PROC_MAX_LEN);
-	gQosEnabled = 0;
-	
-	return SUCCESS;
-}
-
-int32 rtl_qos_cleanup(void)
-{
-	kfree(gQosSetting);
-
-	return SUCCESS;
-}
-#endif
-
-
-#if defined(CONFIG_RTL_FAST_BRIDGE)
-int32 rtl_fb_add_br_entry(skb)
-{	
-	struct net_bridge_fdb_entry *dst;
-	const unsigned char *dest = eth_hdr(skb)->h_dest;
-	if (!is_multicast_ether_addr(dest))
-	{					
-		dst = __br_fdb_get(skb->dev->br_port->br, dest);
-		if(dst != NULL && dst->dst->dev == skb->dev)
-		{
-			fast_br_cache_entry entry;
-			memset(&entry,0,sizeof(fast_br_cache_entry));
-			memcpy(&entry.mac_addr,dest,6);
-			entry.ageing_timer = jiffies;
-			entry.to_dev = skb->dev;
-			entry.valid = 1;
-
-			rtl_add_fast_br_entry(&entry);
-		}
-	}
-}
-#endif
-
-#if defined(FAST_PATH_SPI_ENABLED)
-enum tcp_bit_set {
-	TCP_SYN_SET,
-	TCP_SYNACK_SET,
-	TCP_FIN_SET,
-	TCP_ACK_SET,
-	TCP_RST_SET,
-	TCP_NONE_SET,
-};
-
-static unsigned int rtl_spi_get_conntrack_index(const struct tcphdr *tcph)
-			{
-				if (tcph->rst) return TCP_RST_SET;
-				else if (tcph->syn) return (tcph->ack ? TCP_SYNACK_SET : TCP_SYN_SET);
-				else if (tcph->fin) return TCP_FIN_SET;
-				else if (tcph->ack) return TCP_ACK_SET;
-				else return TCP_NONE_SET;
-			}
-
-extern bool tcp_in_window(const struct nf_conn *ct,
-			  struct ip_ct_tcp *state,
-			  enum ip_conntrack_dir dir,
-			  unsigned int index,
-			  const struct sk_buff *skb,
-			  unsigned int dataoff,
-			  const struct tcphdr *tcph,
-			  u_int8_t pf);
-
-static inline struct nf_conn *
-rtl_resolve_normal_ct(struct net *net,
-		  struct sk_buff *skb,
-		  unsigned int dataoff,
-		  u_int16_t l3num,
-		  u_int8_t protonum,
-		  struct nf_conntrack_l3proto *l3proto,
-		  struct nf_conntrack_l4proto *l4proto,
-		  int *set_reply,
-		  enum ip_conntrack_info *ctinfo)
-{
-	struct nf_conntrack_tuple tuple;
-	struct nf_conntrack_tuple_hash *h;
-	struct nf_conn *ct;
-
-	if (!nf_ct_get_tuple(skb, skb_network_offset(skb),
-			     dataoff, l3num, protonum, &tuple, l3proto,
-			     l4proto)) {
-		pr_debug("resolve_normal_ct: Can't get tuple\n");
-		return NULL;
-	}
-
-	/* look for tuple match */
-	h = nf_conntrack_find_get(net, &tuple);
-	
-	if (!h) {
-		//h = init_conntrack(net, &tuple, l3proto, l4proto, skb, dataoff);
-		//if (!h)
-		return NULL;
-		//if (IS_ERR(h))
-		//	return (void *)h;
-	}
-	ct = nf_ct_tuplehash_to_ctrack(h);
-
-	/* It exists; we have (non-exclusive) reference. */
-	if (NF_CT_DIRECTION(h) == IP_CT_DIR_REPLY) {
-		*ctinfo = IP_CT_ESTABLISHED + IP_CT_IS_REPLY;
-	} else {
-		/* Once we've had two way comms, always ESTABLISHED. */
-		if (test_bit(IPS_SEEN_REPLY_BIT, &ct->status)) {
-			pr_debug("nf_conntrack_in: normal packet for %p\n", ct);
-			*ctinfo = IP_CT_ESTABLISHED;
-		} else if (test_bit(IPS_EXPECTED_BIT, &ct->status)) {
-			pr_debug("nf_conntrack_in: related packet for %p\n",
-				 ct);
-			*ctinfo = IP_CT_RELATED;
-		} else {
-			pr_debug("nf_conntrack_in: new packet for %p\n", ct);
-			*ctinfo = IP_CT_NEW;
-		}
-	}
-	skb->nfct = &ct->ct_general;
-	skb->nfctinfo = *ctinfo;
-	return ct;
-}
-
-
-unsigned int
-rtl_nf_conntrack_in(struct net *net, unsigned int dataoff, unsigned int hooknum,
-		struct sk_buff *skb)
-{
-	struct nf_conn *ct;
-	enum ip_conntrack_info ctinfo;
-	struct nf_conntrack_l3proto *l3proto;
-	struct nf_conntrack_l4proto *l4proto;
-	int set_reply = 0;
-	enum ip_conntrack_dir dir;
-	const struct tcphdr *th;
-	struct tcphdr _tcph;
-	unsigned int index;
-
-
-	/* Previously seen (loopback or untracked)?  Ignore. */
-	if (skb->nfct) {
-		NF_CT_STAT_INC_ATOMIC(net, ignore);
-		return NF_ACCEPT;
-	}
-
-
-	/* rcu_read_lock()ed by nf_hook_slow */
-	l3proto = rcu_dereference(nf_ct_l3protos[PF_INET]);
-
-	l4proto = rcu_dereference(nf_ct_protos[PF_INET][IPPROTO_TCP]);
-
-	ct = rtl_resolve_normal_ct(net, skb, dataoff, PF_INET, IPPROTO_TCP,
-			       l3proto, l4proto, &set_reply, &ctinfo);
-
-	if (!ct) {
-		/* Not valid part of a connection */
-		return NF_ACCEPT;
-	}
-
-	if (IS_ERR(ct)) {
-		/* Too stressed to deal. */
-		return NF_DROP;
-	}
-
-	NF_CT_ASSERT(skb->nfct);
-	
-
-	th = skb_header_pointer(skb, dataoff, sizeof(_tcph), &_tcph);
-	BUG_ON(th == NULL);
-
-	dir = CTINFO2DIR(ctinfo);
-
-	index = rtl_spi_get_conntrack_index(th);
-
-	NF_CT_ASSERT(skb->nfct);
-
-	if (!tcp_in_window(ct, &ct->proto.tcp, dir, index,
-			   skb, dataoff, th, PF_INET)) {
-		return NF_DROP;
-	}
-	return NF_ACCEPT;
-
-}
-#endif
-
-
-#if	defined(CONFIG_RTL_HARDWARE_NAT)
-/*2007-12-19*/
- int syn_asic_arp(struct neighbour *n, int add)
-{
-#ifdef CONFIG_RTL_LAYERED_DRIVER_L3
-	u32 arp_ip = htonl(*((u32 *)n->primary_key));
-	int rc;
-	
-	rc = add? rtl865x_addArp(arp_ip, (void *)n->ha): rtl865x_delArp(arp_ip);
-#endif
-	return 0;
-}
-
-#if defined(CONFIG_RTL_MULTIPLE_WAN)
-int rtl_get_ps_arp_mapping(u32 ip, void *arp_entry_tmp)
-{
-	rtl865x_arpMapping_entry_t *arp_entry;
-	struct neighbour *dst_n;
-	struct net_device *wanDev;
-	wanDev=rtl865x_getWanDev();
-
-	if(wanDev == NULL)
-		return FAILED;
-
-	arp_entry = (rtl865x_arpMapping_entry_t*)arp_entry_tmp;
-
-	dst_n = neigh_lookup(&arp_tbl,&ip,wanDev);
-	dev_put(wanDev);
-	if(dst_n != NULL)
-	{
-		arp_entry->ip = ip;
-		memcpy(arp_entry->mac.octet,dst_n->ha,ETHER_ADDR_LEN);
-		return SUCCESS;
-	}
-
-	return FAILED;
-}
-#endif
-
-#if defined(CONFIG_RTL_IPTABLES_RULE_2_ACL) || defined(CONFIG_RTL_HARDWARE_NAT)
-/*get the chain number of the ipt_entry*/
-static int get_hookNum(struct ipt_entry *e, unsigned char *base, const unsigned int valid_hooks,const unsigned int *hook_entries)
-{
-	int h;
-	unsigned int offset = 0;
-	int hook_num = -1;
-
-	offset = (void *)e - (void *)base;	
-	for(h = 0; h < NF_INET_NUMHOOKS; h++)
-	{		
-		if(!(valid_hooks & (1 << h)))
-			continue;
-		
-		if(offset >= hook_entries[h])
-			hook_num = h;		
-	}
-
-	return hook_num;
-}
-#endif
-
-#ifdef CONFIG_RTL_HARDWARE_NAT  
-rtl_masq_if rtl_masq_info[RTL_MULTIPLE_WAN_NUM];
-
-rtl_masq_if *rtl_get_masq_info_by_devName(const char* name)
-{
-	int i;	
-	if(name == NULL)
-		return NULL;
-	
-	for(i = 0; i < RTL_MULTIPLE_WAN_NUM;i++)
-	{
-		if(rtl_masq_info[i].valid == 1 &&strcmp(rtl_masq_info[i].ifName,name) == 0)
-			return &rtl_masq_info[i];
-	}
-	
-	return NULL;
-}
-
-int rtl_add_masq_info(const char *name,int ipAddr)
-{
-	int i;
-	if(strlen(name) >=IFNAMSIZ || ipAddr ==0)
-		return FAILED;
-	
-	for(i = 0; i < RTL_MULTIPLE_WAN_NUM;i++)
-	{
-		if(rtl_masq_info[i].valid == 0)
-			break;
-	}
-
-	if(i == RTL_MULTIPLE_WAN_NUM)
-		return FAILED;
-
-	rtl_masq_info[i].valid = 1;
-	rtl_masq_info[i].ipAddr = ipAddr;
-	memcpy(rtl_masq_info[i].ifName,name,strlen(name));
-	rtl_masq_info[i].ifName[strlen(name)] ='\0';
-	return SUCCESS;	
-}
-
-int rtl_init_masq_info(void)
-{
-	int i;
-	for(i = 0; i < RTL_MULTIPLE_WAN_NUM;i++)
-	{
-		memset(&rtl_masq_info[i],0,sizeof(rtl_masq_if));
-	}
-	
-	return SUCCESS;
-}
-
-/* Performance critical */
-static inline struct ipt_entry *
-get_entry(void *base, unsigned int offset)
-{
-	return (struct ipt_entry *)(base + offset);
-}
-
-#ifdef CONFIG_NETFILTER_DEBUG
-#define IP_NF_ASSERT(x)						\
-do {								\
-	if (!(x))						\
-		printk("IP_NF_ASSERT: %s:%s:%u\n",		\
-		       __func__, __FILE__, __LINE__);	\
-} while(0)
-#else
-#define IP_NF_ASSERT(x)
-#endif
-
-static int rtl_get_masquerade_netif(struct xt_table_info *private,struct ipt_entry *masq_entry)
-{
-	void *table_base;
-	struct ipt_entry *e, *back;
-	struct ipt_entry_target *t;
-	struct net_device *dev;
-	char masq_name[IFNAMSIZ]={'\0'};
-	
-	if(masq_entry && masq_entry->ip.outiface[0] !='\0')
-	{			
-		memcpy(masq_name, masq_entry->ip.outiface, IFNAMSIZ);
-		//return 0;
-	}
-	else	
-	{
-		table_base = private->entries[smp_processor_id()];
-		e = get_entry(table_base, private->hook_entry[NF_INET_POST_ROUTING]);		
-		back = get_entry(table_base, private->underflow[NF_INET_POST_ROUTING]);		
-		
-		//clear masq_name;
-		memset(masq_name,0,IFNAMSIZ);		
-		while(e)
-		{
-		
-			if(e == masq_entry)
-				break;
-			
-			//record the entry's outif name
-			if(e->ip.outiface[0] !='\0')
-				memcpy(masq_name,e->ip.outiface,IFNAMSIZ);
-
-			//target
-			t = ipt_get_target(e);
-			IP_NF_ASSERT(t->u.kernel.target);
-
-
-			//if error target
-			if(strcmp(t->u.kernel.target->name, "ERROR") == 0)
-			{
-				memset(masq_name,0,IFNAMSIZ);
-				break;
-			}
-			
-			/* Standard target? */
-			if (!t->u.kernel.target->target) 
-			{
-				int v;
-				v = ((struct ipt_standard_target *)t)->verdict;				
-				
-				if (v < 0 )
-				{
-					if(v == IPT_RETURN)
-					{
-						e = back;
-						back = get_entry(table_base, back->comefrom);						
-					}
-					else
-					{
-						e = (void *)e + e->next_offset;
-					}
-
-					continue;				
-				}
-
-				//jump ?
-				if (table_base + v != (void *)e + e->next_offset
-				    && !(e->ip.flags & IPT_F_GOTO)) {
-					/* Save old back ptr in next entry */
-					struct ipt_entry *next
-						= (void *)e + e->next_offset;
-					next->comefrom
-						= (void *)back - table_base;
-					/* set back pointer to next entry */
-					back = next;
-				}
-				e = get_entry(table_base, v);
-				continue;
-			} 
-			
-			/*user define target?*/
-			e = (void *)e + e->next_offset;
-		}		
-		
-	}
-
-	if(masq_name[0] !='\0')
-	{
-		struct in_ifaddr *ina;
-		dev = __dev_get_by_name(&init_net,masq_name);
-		if ((dev)&&(dev->ip_ptr)) 
-		{ 		
-				
-			ina=(struct in_ifaddr *)(((struct in_device *)(dev->ip_ptr))->ifa_list);
-			if (ina!=NULL) 
-			{
-				rtl_add_masq_info(masq_name,ina->ifa_local);
-			}
-		}
-	}
-		
-
-	return 0;
-}
-
-static int rtl_check_for_masquerade_entry(struct ipt_entry *e,  
-	unsigned char *base,
-	const char *name,
-	unsigned int size,
-	const unsigned int valid_hooks,
-	const unsigned int *hook_entries,
-	struct xt_table_info *private)
-{
-	struct ipt_entry_target *t;
-	unsigned int hook;
-	int ret = 0;
-	
-	t = ipt_get_target(e);	
-	if ( !t) 
-	{		
-		goto err;
-	}
-
-	hook = get_hookNum(e,base,valid_hooks,hook_entries);		
-	if ((hook == NF_INET_POST_ROUTING) &&
-		((strcmp(t->u.kernel.target->name, "MASQUERADE") == 0))) 
-		{			
-			rtl_get_masquerade_netif(private,e);	
-		}
- err:	
-	return ret;
-}
-
-int rtl_check_for_extern_ip(const char *name,
-		unsigned int valid_hooks,
-		struct xt_table_info *newinfo,
-		void *entry0,
-		unsigned int size,
-		unsigned int number,
-		const unsigned int *hook_entries,
-		const unsigned int *underflows)
-{
-	int i;
-	IPT_ENTRY_ITERATE(entry0, size,rtl_check_for_masquerade_entry, entry0,name,size,valid_hooks,hook_entries,newinfo);
-
-	//found masq entry
-	for(i = 0; i < RTL_MULTIPLE_WAN_NUM;i++)
-	{
-		if(rtl_masq_info[i].valid == 1 && rtl_masq_info[i].ipAddr)
-		{
-			rtl865x_addIp(0,rtl_masq_info[i].ipAddr,IP_TYPE_NAPT);
-		}
-	}
-	
-	return 0;
-}
-
- int rtl_flush_extern_ip(void)
-{
-	int i;
-	for(i = 0; i < RTL_MULTIPLE_WAN_NUM;i++)
-	{
-		if(rtl_masq_info[i].valid == 1)
-		{
-			//delete....
-			rtl865x_delIp(rtl_masq_info[i].ipAddr);
-		}
-	}
-	
-	return SUCCESS;
-}
-
-int32 rtl_update_ip_tables(char *name,  unsigned long event, struct in_ifaddr *ina)
-{
-	rtl_masq_if *entry;
-	
-	/*2007-12-19*/
-	#ifdef CONFIG_HARDWARE_NAT_DEBUG
-		/*2007-12-19*/
-		printk("%s:%d\n",__FUNCTION__,__LINE__);
-	#endif	
-	if (ina==NULL)
-		return SUCCESS;
-	
-	entry = rtl_get_masq_info_by_devName(name);
-	if (entry!=NULL)
-	{
-		if (event == NETDEV_UP ) 
-		{
-			rtl865x_addIp(0,(u32)(ina->ifa_local),IP_TYPE_NAPT);
-			//update the ip address
-			entry->ipAddr = ina->ifa_local;
-		}
-		else if(event == NETDEV_DOWN) 
-		{				
-			if(rtl865x_delIp(ina->ifa_local)==SUCCESS)
-			{
-				rtl865x_nat_init();
-			}
-		}
-	}
-
-	return SUCCESS;
-}
-
-int32 rtl_fn_insert(struct fib_table *tb, struct fib_config *cfg, struct fib_info *fi)
-{
-	int rc;
-	unsigned int ipDst, ipMask, ipGw;
-	unsigned int srcIp,srcMask;
-	struct net_device *netif;
-	char *dev_t;
-	
-	/*2007-12-19*/
-	if ((tb->tb_id == RT_TABLE_MAIN) && (gHwNatEnabled !=0)) {
-		if(cfg->fc_oif) {
-			netif = __dev_get_by_index(&init_net,cfg->fc_oif);
-		} else {
-			netif=NULL;
-		}
-
-		dev_t	= (netif)? netif->name: NULL;
-		ipDst =  cfg->fc_dst ;
-		ipMask = inet_make_mask(cfg->fc_dst_len);
-		ipGw = cfg->fc_gw;
-		rtl865x_getDevIpAndNetmask(netif,&srcIp,&srcMask);
-		if (!ipDst || (!MULTICAST(ipDst) && !LOOPBACK(ipDst) && (ipDst != 0xffffffff))) 
-		{ 
-			#ifdef CONFIG_RTL_LAYERED_DRIVER_L3
-			//printk("-------------------%s(%d)\n",__FUNCTION__,__LINE__);
-			rc = rtl865x_addRoute(ipDst,ipMask,ipGw,dev_t,srcIp);
-			//printk("-------------------%s(%d),rc(%d)\n",__FUNCTION__,__LINE__,rc);
-			#endif
-	        	#ifdef CONFIG_HARDWARE_NAT_DEBUG
-			/*2007-12-19*/
-			printk("%s:%d:(%s): dst:%u.%u.%u.%u/%u, gw:%u.%u.%u.%u, dev: %s, errno=%d\n", 
-				__FUNCTION__,__LINE__,"add_rt",  NIPQUAD(ipDst), cfg->fc_dst_len, NIPQUAD(ipGw), dev_t? dev_t: "null", rc
-		);
-		#endif
-
-		}
-	}
-
-	return SUCCESS;
-}
-
-int32 rtl_fn_delete(struct fib_table *tb, struct fib_config *cfg)
-{
-	int rc;
-	unsigned int ipDst, ipMask;
-	
-	/*2007-12-19*/
-	if (tb->tb_id == RT_TABLE_MAIN) {
-		ipDst = cfg->fc_dst;
-		ipMask =  inet_make_mask(cfg->fc_dst_len);
-		
-		if (!ipDst || (!MULTICAST(ipDst) && !LOOPBACK(ipDst) && (ipDst != 0xffffffff))) { 
-			rc = 0;
-			#ifdef CONFIG_RTL_LAYERED_DRIVER_L3
-			rc = rtl865x_delRoute(ipDst, ipMask);
-			#endif
-		}
-	}
-
-	return SUCCESS;
-}
-
-int32 rtl_fn_flush(int	 fz_order, int idx, u32 tb_id, u32 fn_key)
-{
-	int rc;
-	unsigned int ipDst, ipMask;
-	/*2007-12-19*/
-	if (tb_id==RT_TABLE_MAIN) {			
-		ipDst =fn_key;
-		ipMask = inet_make_mask(fz_order);
-
-		if (!ipDst || (!MULTICAST(ipDst) && !LOOPBACK(ipDst) && (ipDst != 0xffffffff))) { 
-			rc = 0;
-			#ifdef CONFIG_RTL_LAYERED_DRIVER_L3
-			rc = rtl865x_delRoute(ipDst, ipMask);
-			#endif
-		}
-	}
-
-	return SUCCESS;
-}
-
-int32 rtl_ip_vs_conn_expire_check(struct ip_vs_conn *cp)
-{
-	u_int32_t timeval;
-	rtl865x_napt_entry rtl865xNaptEntry;
-
-/*   chhuang:
-	printk("ip_vs_conn_expire: c:(%u.%u.%u.%u:%d), v:(%u.%u.%u.%u:%d), \n\td:(%u.%u.%u.%u:%d), p:(%x), f: %x, s: %x\n",
-			NIPQUAD(cp->caddr), cp->cport, NIPQUAD(cp->vaddr), cp->vport, NIPQUAD(cp->daddr), cp->dport, 
-			cp->protocol, cp->flags, cp->state);
-*/
-	if (cp->hw_acc) {
-		rtl865xNaptEntry.protocol=((cp->protocol==IPPROTO_TCP)? 1: 0);
-		rtl865xNaptEntry.intIp=cp->daddr.ip;
-		rtl865xNaptEntry.intPort=cp->dport;
-		rtl865xNaptEntry.extIp=cp->vaddr.ip;
-		rtl865xNaptEntry.extPort=cp->vport;
-		rtl865xNaptEntry.remIp=cp->caddr.ip;
-		rtl865xNaptEntry.remPort=cp->cport;
-
-		timeval = rtl865x_naptSync(&rtl865xNaptEntry, 0);
-		
-		if (timeval > 0 && (cp->protocol==IPPROTO_UDP))
-		{
-			cp->timer.expires = jiffies + (timeval)*HZ;
-			add_timer(&cp->timer);
-			#ifdef CONFIG_HARDWARE_NAT_DEBUG
-			/*2007-12-19*/
-			printk("%s:%d:(%s): expired time = %d\n %s (%u.%u.%u.%u:%u -> %u.%u.%u.%u:%u) g:(%u.%u.%u.%u:%u)\n",
-					__FUNCTION__,__LINE__,"poll_nat", timeval, (cp->protocol==IPPROTO_TCP)? "tcp": "udp",
-					NIPQUAD(cp->daddr), cp->dport, NIPQUAD(cp->caddr), cp->cport, 
-					NIPQUAD(cp->vaddr), cp->vport
-			);
-			#endif
-		
-			return FAILED;
-		}
-	}
-
-	return SUCCESS;
-}
-
-
-int32 rtl_ip_vs_conn_expire_check_delete(struct ip_vs_conn *cp)
-{
-	rtl865x_napt_entry rtl865xNaptEntry;
-
-	if (cp->hw_acc) {
-		int rc;
-
-		rtl865xNaptEntry.protocol=((cp->protocol==IPPROTO_TCP)? 1: 0);
-		rtl865xNaptEntry.intIp=cp->daddr.ip;
-		rtl865xNaptEntry.intPort=cp->dport;
-		rtl865xNaptEntry.extIp=cp->vaddr.ip;
-		rtl865xNaptEntry.extPort=cp->vport;
-		rtl865xNaptEntry.remIp=cp->caddr.ip;
-		rtl865xNaptEntry.remPort=cp->cport;
-
-		rc = rtl865x_delNaptConnection(&rtl865xNaptEntry);
-		
-		#ifdef CONFIG_HARDWARE_NAT_DEBUG
-		/*2007-12-19*/
-		printk("%s:%d:(%s): errno=%d\n %s (%u.%u.%u.%u:%u -> %u.%u.%u.%u:%u) g:(%u.%u.%u.%u:%u)\n",
-			__FUNCTION__,__LINE__,"del_nat", rc, (cp->protocol==IPPROTO_TCP)? "tcp": "udp",
-			NIPQUAD(cp->daddr.ip), cp->dport, NIPQUAD(cp->caddr.ip), cp->cport,
-			NIPQUAD(cp->vaddr.ip), cp->vport
-		);
-		#endif
-	}
-
-	return SUCCESS;
-}
-
-int32 rtl_tcp_state_transition_check(struct ip_vs_conn *cp, int direction, const struct sk_buff *skb, struct ip_vs_protocol *pp)
-{
-	#if defined(CONFIG_RTL_HW_QOS_SUPPORT)
-	uint32			ret;
-	struct net_device	*lanDev, *wanDev;
-	#endif
-
-	#if defined(CONFIG_RTL_LAYERED_DRIVER_L4)
-	rtl865x_napt_entry rtl865xNaptEntry;
-	rtl865x_priority rtl865xPrio;
-	rtl865x_qos_mark rtl865xQosMark;
-	#endif
-
-	/*2007-12-19*/
-	/*
-	printk("ip_vs_set_state: c:(%u.%u.%u.%u:%d), v:(%u.%u.%u.%u:%d), \n\td:(%u.%u.%u.%u:%d), p:(%x), f: %x, s: %x, master: %s\n\tapp_data: %x, app: %x\n",
-		NIPQUAD(cp->caddr), cp->cport, NIPQUAD(cp->vaddr), cp->vport, NIPQUAD(cp->daddr), cp->dport, cp->protocol, cp->flags, cp->state, 
-		cp->control? "yes": "no", cp->app_data, cp->app);
-	*/
-	#if 0
-	if (!cp->hw_acc && !cp->app &&
-		cp->state==IP_VS_S_ESTABLISHED) 
-	#else
-	if (!cp->hw_acc && !cp->app &&
-		cp->state==IP_VS_TCP_S_ESTABLISHED) 
-	#endif
-	{
-		int rc;
-		rc = 0;
-
-		#if defined(CONFIG_RTL_HW_QOS_SUPPORT)
-		if (NULL!=skb)
-		{
-			rtl865xNaptEntry.protocol=RTL865X_PROTOCOL_TCP;
-			rtl865xNaptEntry.intIp=cp->daddr.ip;
-			rtl865xNaptEntry.intPort=cp->dport;
-			rtl865xNaptEntry.extIp=cp->vaddr.ip;
-			rtl865xNaptEntry.extPort=cp->vport;
-			rtl865xNaptEntry.remIp=cp->caddr.ip;
-			rtl865xNaptEntry.remPort=cp->cport;
-
-			rtl865xQosMark.downlinkMark=0;	//Initial
-			rtl865xQosMark.uplinkMark=0;	//Initial
-			ret=rtl_qosGetSkbMarkByNaptEntry(&rtl865xNaptEntry, &rtl865xQosMark, skb);
-		
-			lanDev=rtl865x_getLanDev();
-			wanDev=rtl865x_getWanDev();
-			rtl865xPrio.downlinkPrio=rtl_qosGetPriorityByMark(lanDev->name, rtl865xQosMark.downlinkMark);
-			rtl865xPrio.uplinkPrio=rtl_qosGetPriorityByMark(wanDev->name, rtl865xQosMark.uplinkMark);
-
-			if(lanDev)
-				dev_put(lanDev);
-
-			if(wanDev)
-				dev_put(wanDev);
-		}else
-		#endif
-		{
-			rtl865xPrio.downlinkPrio=0;
-			rtl865xPrio.uplinkPrio=0;
-		}
-		
-		#if defined(CONFIG_RTL_LAYERED_DRIVER_L4)
-		rtl865xNaptEntry.protocol=RTL865X_PROTOCOL_TCP;
-		rtl865xNaptEntry.intIp=cp->daddr.ip;
-		rtl865xNaptEntry.intPort=cp->dport;
-		rtl865xNaptEntry.extIp=cp->vaddr.ip;
-		rtl865xNaptEntry.extPort=cp->vport;
-		rtl865xNaptEntry.remIp=cp->caddr.ip;
-		rtl865xNaptEntry.remPort=cp->cport;
-		rc = rtl865x_addNaptConnection(&rtl865xNaptEntry, &rtl865xPrio);
-		#endif
-		if (!rc)
-			cp->hw_acc = 1;
-		#ifdef CONFIG_HARDWARE_NAT_DEBUG
-		/*2007-12-19*/
-		printk("%s:%d:(%s): errno=%d\n %s (%u.%u.%u.%u:%u -> %u.%u.%u.%u:%u) g:(%u.%u.%u.%u:%u)\n",
-				__FUNCTION__,__LINE__,"add_nat", rc, "tcp", NIPQUAD(cp->daddr), cp->dport,
-				NIPQUAD(cp->caddr), cp->cport, NIPQUAD(cp->vaddr), cp->vport
-		);
-		#endif
-	}
-}
-
-int32 rtl_udp_state_transition_check(struct ip_vs_conn *cp, int direction, const struct sk_buff *skb, struct ip_vs_protocol *pp)
-{
-	#if defined(CONFIG_RTL_HW_QOS_SUPPORT)
-	uint32 ret;
-	struct net_device	*lanDev, *wanDev;
-	#endif
-	#if defined(CONFIG_RTL_LAYERED_DRIVER_L4)
-	rtl865x_napt_entry rtl865xNaptEntry;
-	rtl865x_priority rtl865xPrio;
-	rtl865x_qos_mark rtl865xQosMark;
-	#endif
-
-	/*2007-12-19*/
-	if (!cp->hw_acc && !cp->app) 
-	{
-		int rc;
-		rc = 0;
-		#if defined(CONFIG_RTL_HW_QOS_SUPPORT)
-		if (NULL!=skb)
-		{
-			rtl865xNaptEntry.protocol=RTL865X_PROTOCOL_UDP;
-			rtl865xNaptEntry.intIp=cp->daddr.ip;
-			rtl865xNaptEntry.intPort=cp->dport;
-			rtl865xNaptEntry.extIp=cp->vaddr.ip;
-			rtl865xNaptEntry.extPort=cp->vport;
-			rtl865xNaptEntry.remIp=cp->caddr.ip;
-			rtl865xNaptEntry.remPort=cp->cport;
-
-			rtl865xQosMark.downlinkMark=0;	//Initial
-			rtl865xQosMark.uplinkMark=0;	//Initial
-			ret=rtl_qosGetSkbMarkByNaptEntry(&rtl865xNaptEntry, &rtl865xQosMark, skb);
-			
-			lanDev=rtl865x_getLanDev();
-			wanDev=rtl865x_getWanDev();
-			rtl865xPrio.downlinkPrio=rtl_qosGetPriorityByMark(lanDev->name, rtl865xQosMark.downlinkMark);
-			rtl865xPrio.uplinkPrio=rtl_qosGetPriorityByMark(wanDev->name, rtl865xQosMark.uplinkMark);
-
-			if(lanDev)
-				dev_put(lanDev);
-
-			if(wanDev)
-				dev_put(wanDev);
-		} else
-		#endif
-		{
-			rtl865xPrio.downlinkPrio=0;
-			rtl865xPrio.uplinkPrio=0;
-		}
-		
-		#if defined(CONFIG_RTL_LAYERED_DRIVER_L4)
-		rtl865xNaptEntry.protocol=RTL865X_PROTOCOL_UDP;
-		rtl865xNaptEntry.intIp=cp->daddr.ip;
-		rtl865xNaptEntry.intPort=cp->dport;
-		rtl865xNaptEntry.extIp=cp->vaddr.ip;
-		rtl865xNaptEntry.extPort=cp->vport;
-		rtl865xNaptEntry.remIp=cp->caddr.ip;
-		rtl865xNaptEntry.remPort=cp->cport;
-
-		rc = rtl865x_addNaptConnection(&rtl865xNaptEntry, &rtl865xPrio);
-		#endif
-		if (!rc)
-			cp->hw_acc = 1;
-		#ifdef CONFIG_HARDWARE_NAT_DEBUG
-		/*2007-12-19*/
-		printk("%s:%d:(%s): errno=%d\n %s (%u.%u.%u.%u:%u -> %u.%u.%u.%u:%u) g:(%u.%u.%u.%u:%u)\n",
-				__FUNCTION__,__LINE__,"add_nat", rc, "udp", NIPQUAD(cp->daddr), cp->dport,
-				NIPQUAD(cp->caddr), cp->cport, NIPQUAD(cp->vaddr), cp->vport
-		);
-		#endif
-	}
-}
-
-#endif 
-#endif
-
-#if defined(CONFIG_PROC_FS) && defined(CONFIG_RTL_NF_CONNTRACK_GARBAGE_NEW)
-static struct proc_dir_entry *proc_gc_overflow_timout=NULL;
-static int gc_overflow_timout_read_proc(char *page, char **start, off_t off,
-		     int count, int *eof, void *data)
-{
-      int len;
-
-      len = sprintf(page, "rtl_gc_overflow_timout(%d), HZ(%d)\n", rtl_gc_overflow_timout, HZ);
-
-      if (len <= off+count) *eof = 1;
-      *start = page + off;
-      len -= off;
-      if (len>count) len = count;
-      if (len<0) len = 0;
-      return len;
-}
-
-static int gc_overflow_timout_write_proc(struct file *file, const char *buffer,
-		      unsigned long count, void *data)
-{
-	uint32 tmpBuf[32];
-	
-      if (count < 2) 
-	    return -EFAULT;
-
-      if (buffer && !copy_from_user(tmpBuf, buffer, count)) {
-	    tmpBuf[count-1]=0;
-	    rtl_gc_overflow_timout=simple_strtol((const char *)tmpBuf, NULL, 0);
-	
-	    return count;
-      }
-      return -EFAULT;
-}
-
-void gc_overflow_timout_proc_init(void)
-{
-	proc_gc_overflow_timout = create_proc_entry("gc_overflow_timout", 0, NULL);
-	if (proc_gc_overflow_timout) {
-		proc_gc_overflow_timout->read_proc = gc_overflow_timout_read_proc;
-		proc_gc_overflow_timout->write_proc = gc_overflow_timout_write_proc;
-	}
-}
-#endif
-
-
diff --git a/target/linux/realtek/files/net/rtl/features/98/rtl_ps_hooks.c b/target/linux/realtek/files/net/rtl/features/98/rtl_ps_hooks.c
deleted file mode 100644
index 609c349da..000000000
--- a/target/linux/realtek/files/net/rtl/features/98/rtl_ps_hooks.c
+++ /dev/null
@@ -1,819 +0,0 @@
-#include <linux/types.h>
-#include <linux/netfilter.h>
-#include <linux/module.h>
-#include <linux/skbuff.h>
-#include <linux/moduleparam.h>
-#include <linux/notifier.h>
-#include <linux/kernel.h>
-#include <linux/netdevice.h>
-#include <linux/ip.h>
-#include <linux/tcp.h>
-#include <linux/inetdevice.h>
-
-#include <net/ip_fib.h>
-#include <net/netfilter/nf_nat.h>
-#include <net/netfilter/nf_conntrack.h>
-#include <net/netfilter/nf_conntrack_core.h>
-#include <net/netfilter/nf_nat_protocol.h>
-#include <net/ip_vs.h>
-#include <linux/ip_vs.h>
-
-#include <net/rtl/rtl_types.h>
-#include <net/rtl/fastpath/fastpath_core.h>
-#include <net/rtl/features/rtl_features.h>
-#include <net/rtl/features/rtl_ps_hooks.h>
-
-#ifdef CONFIG_RTL_LAYERED_DRIVER_L3
-#include <net/rtl/rtl865x_ppp.h>
-#include <net/rtl/rtl865x_route_api.h>
-#include <net/rtl/rtl865x_arp_api.h>
-#endif
-
-#if defined(CONFIG_RTL_HW_QOS_SUPPORT) && defined(CONFIG_RTL_HARDWARE_NAT)
-#include <net/rtl/rtl865x_netif.h>
-#include <net/rtl/rtl865x_outputQueue.h>
-#endif
-
-#ifdef CONFIG_BRIDGE
-#include <bridge/br_private.h>
-#endif
-
-#ifdef CONFIG_RTL_HARDWARE_NAT 
-//#define CONFIG_HARDWARE_NAT_DEBUG
-#ifdef CONFIG_RTL_LAYERED_DRIVER_L3
-#include <net/rtl/rtl865x_ppp.h>
-#include <net/rtl/rtl865x_route_api.h>
-#endif
-//unsigned int ldst, lmask, wdst, wmask;
-extern int gHwNatEnabled;
-#endif
-
-#ifdef CONFIG_RTL_HARDWARE_NAT 
-/*2007-12-19*/
-#ifdef CONFIG_RTL_LAYERED_DRIVER_L3
-#include <net/rtl/rtl865x_ip_api.h>
-#endif
-#ifdef CONFIG_RTL_LAYERED_DRIVER_L4
-#include <net/rtl/rtl865x_nat.h>
-#endif
-extern char masq_if[];
-extern unsigned int hw_napt_ip;
-#endif
-
-#if defined(CONFIG_RTL_IPTABLES_FAST_PATH) && defined(CONFIG_FAST_PATH_MODULE)
-enum LR_RESULT (*FastPath_hook5)( ipaddr_t ip, ether_addr_t* mac, enum ARP_FLAGS flags )=NULL;
-enum LR_RESULT (*FastPath_hook7)( ipaddr_t ip )=NULL;
-enum LR_RESULT (*FastPath_hook8)( ipaddr_t ip, ether_addr_t* mac, enum ARP_FLAGS flags )=NULL;
-EXPORT_SYMBOL(FastPath_hook8);      
-EXPORT_SYMBOL(FastPath_hook7);        
-EXPORT_SYMBOL(FastPath_hook5);  
-#endif
-
-
-int32 rtl_nf_conntrack_in_hooks(rtl_nf_conntrack_inso_s *info)
-{
-	#if !defined(IMPROVE_QOS) && defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-	rtl_fpAddConnCache(info->ct, info->skb);
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_nf_conntrack_death_by_timeout_hooks(rtl_nf_conntrack_inso_s *info)
-{
-	int	ret;
-
-	ret = RTL_PS_HOOKS_CONTINUE;
-	#if defined(CONFIG_RTL_IPTABLES_FAST_PATH) || defined(CONFIG_RTL_HARDWARE_NAT)
-	if (rtl_connCache_timer_update(info->ct)==SUCCESS) {
-		ret = RTL_PS_HOOKS_RETURN;
-	}
-	#endif
-
-	return ret;
-}
-
-int32 rtl_nf_conntrack_destroy_hooks(rtl_nf_conntrack_inso_s *info)
-{
-	#if defined(CONFIG_RTL_IPTABLES_FAST_PATH) || defined(CONFIG_RTL_HARDWARE_NAT)
-	rtl_delConnCache(info->ct);
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_nf_conntrack_confirm_hooks(rtl_nf_conntrack_inso_s *info)
-{
-	#if defined(CONFIG_RTL_NF_CONNTRACK_GARBAGE_NEW)
-	rtl_connGC_addList(info->skb, info->ct);
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_nf_init_conntrack_hooks(rtl_nf_conntrack_inso_s *info)
-{
-
-	#if defined(CONFIG_RTL_NF_CONNTRACK_GARBAGE_NEW)
-	INIT_LIST_HEAD(&info->ct->state_tuple);
-	#endif
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-
-int32 rtl_nf_conntrack_init_hooks(void)
-{
-	#if defined(CONFIG_RTL_NF_CONNTRACK_GARBAGE_NEW)
-	rtl_nf_conn_GC_init();
-	#endif
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_tcp_packet_hooks(rtl_nf_conntrack_inso_s *info)
-{
-	#if defined(CONFIG_RTL_HARDWARE_NAT)
-	if (info->new_state==TCP_CONNTRACK_LAST_ACK) {
-		rtl865x_handle_nat(info->ct, 0, NULL);
-	}
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_nf_nat_packet_hooks(rtl_nf_conntrack_inso_s *info)
-{
-	#if (defined(IMPROVE_QOS) && defined(CONFIG_RTL_IPTABLES_FAST_PATH)) || defined(CONFIG_RTL_HARDWARE_NAT)
-	rtl_addConnCache(info->ct, info->skb);
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_nat_init_hooks(void)
-{
-	rtl_nat_init();
-	#if defined(CONFIG_NET_SCHED)
-	rtl_qos_init();
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_nat_cleanup_hooks(void)
-{
-	#if defined(CONFIG_NET_SCHED)
-	rtl_qos_cleanup();
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_fn_hash_insert_hooks(struct fib_table *tb, struct fib_config *cfg, struct fib_info *fi)
-{
-#if defined( CONFIG_RTL_IPTABLES_FAST_PATH)
-	#if defined(CONFIG_FAST_PATH_MODULE)
-	if(FastPath_hook3!=NULL)
-	{
-		FastPath_hook3(cfg->fc_dst? cfg->fc_dst: 0, inet_make_mask(cfg->fc_dst_len),cfg->fc_gw ? cfg->fc_gw : 0, (uint8 *)fi->fib_dev->name, RT_NONE);
-	}
-	#else
-	rtk_addRoute(cfg->fc_dst? cfg->fc_dst: 0, inet_make_mask(cfg->fc_dst_len),cfg->fc_gw ? cfg->fc_gw : 0, (uint8 *)fi->fib_dev->name, RT_NONE);
-	#endif
-#endif
-
-
-	#if defined(CONFIG_RTL_HARDWARE_NAT)
-	rtl_fn_insert(tb, cfg, fi);
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_fn_hash_delete_hooks(struct fib_table *tb, struct fib_config *cfg)
-{
-	#if defined(CONFIG_RTK_IPTABLES_FAST_PATH)
-	#ifdef CONFIG_FAST_PATH_MODULE
-	if(FastPath_hook1!=NULL)
-	{
-		FastPath_hook1(cfg->fc_dst? cfg->fc_dst : 0, inet_make_mask(cfg->fc_dst_len));
-	}
-	#else
-	rtk_delRoute(cfg->fc_dst? cfg->fc_dst : 0, inet_make_mask(cfg->fc_dst_len));
-	#endif
-	#endif
-
-	#if defined(CONFIG_RTL_HARDWARE_NAT)
-	rtl_fn_delete(tb, cfg);
-	#endif
-	
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-
-int32 rtl_fn_flush_list_hooks(int	 fz_order, int idx, u32 tb_id, u32 fn_key)
-{
-	#if defined(CONFIG_RTL_HARDWARE_NAT)
-	rtl_fn_flush(fz_order, idx, tb_id, fn_key);
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_fn_hash_replace_hooks(struct fib_table *tb, struct fib_config *cfg, struct fib_info *fi)
-{
-#if defined( CONFIG_RTL_IPTABLES_FAST_PATH)
-	#if defined(CONFIG_FAST_PATH_MODULE)
-	if(FastPath_hook2!=NULL)
-	{
-		FastPath_hook2(cfg->fc_dst? cfg->fc_dst: 0, inet_make_mask(cfg->fc_dst_len),cfg->fc_gw ? cfg->fc_gw : 0, (uint8 *)fi->fib_dev->name, RT_NONE);
-	}
-	#else
-	rtk_modifyRoute(cfg->fc_dst? cfg->fc_dst: 0, inet_make_mask(cfg->fc_dst_len),cfg->fc_gw ? cfg->fc_gw : 0, (uint8 *)fi->fib_dev->name, RT_NONE);
-	#endif
-#endif
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_dev_queue_xmit_hooks(struct sk_buff *skb, struct net_device *dev)
-{
-	#if defined( CONFIG_RTL_IPTABLES_FAST_PATH)
-	rtl_fp_dev_queue_xmit_check(skb, dev);
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_dev_hard_start_xmit_hooks(struct sk_buff *skb, struct net_device *dev, struct netdev_queue *txq)
-{
-	#if defined( CONFIG_RTL_IPTABLES_FAST_PATH)
-	rtl_fp_dev_hard_start_xmit_check(skb, dev, txq);
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_netif_receive_skb_hooks(struct sk_buff *skb)
-{
-	int	ret;
-
-	#if defined(CONFIG_RTL_FAST_BRIDGE)
-	if(skb->dev->br_port && (rtl_fast_br_forwarding(skb)==RTL_FAST_BR_SUCCESS)) {
-		ret = RTL_PS_HOOKS_RETURN;
-	} else
-	#endif
-	#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-	if (FastPath_Enter(&skb)== NET_RX_DROP) {
-		ret = RTL_PS_HOOKS_RETURN;
-	} else
-	#endif
-	{
-		ret = RTL_PS_HOOKS_CONTINUE;
-	}
-
-	return ret;
-}
-
-int32 rtl_br_dev_queue_push_xmit_before_xmit_hooks(struct sk_buff *skb)
-{
-	#if defined(CONFIG_RTL_FAST_BRIDGE)
-	rtl_fb_add_br_entry(skb);
-	#endif
-	
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-
-int32 rtl_neigh_forced_gc_hooks(struct neigh_table *tbl, struct neighbour *n)
-{
-	#if defined(CONFIG_RTL_HARDWARE_NAT) && defined(CONFIG_RTL_LAYERED_DRIVER) && defined(CONFIG_RTL_LAYERED_DRIVER_L3)
-	syn_asic_arp(n,  0);
-	#endif
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_neigh_flush_dev_hooks(struct neigh_table *tbl, struct net_device *dev, struct neighbour *n)
-{
-	#if (defined(CONFIG_RTL_HARDWARE_NAT) && defined(CONFIG_RTL_LAYERED_DRIVER) && defined(CONFIG_RTL_LAYERED_DRIVER_L3)) || defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-	if (n->nud_state & NUD_VALID) {
-	#if defined(CONFIG_RTL_HARDWARE_NAT) && defined(CONFIG_RTL_LAYERED_DRIVER) && defined(CONFIG_RTL_LAYERED_DRIVER_L3)
-	syn_asic_arp(n,  0);
-	#endif
-
-	#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-		#ifdef CONFIG_FAST_PATH_MODULE
-		if(FastPath_hook7!=NULL) {
-			FastPath_hook7(*(u32*)n->primary_key);
-		}
-		#else
-		rtk_delArp(*(u32*)n->primary_key);
-		#endif
-	#endif
-	}
-	#endif
-	
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_neigh_destroy_hooks(struct neighbour *n)
-{
-	#if defined(CONFIG_RTL_HARDWARE_NAT) && defined(CONFIG_RTL_LAYERED_DRIVER) && defined(CONFIG_RTL_LAYERED_DRIVER_L3)
-	 syn_asic_arp(n,  0);
-	#endif
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_neigh_connect_hooks(struct neighbour *neigh)
-{
-	#if defined(CONFIG_RTL_HARDWARE_NAT) && defined(CONFIG_RTL_LAYERED_DRIVER) && defined(CONFIG_RTL_LAYERED_DRIVER_L3)
-	if (neigh->nud_state & NUD_REACHABLE) {
-		syn_asic_arp(neigh,  1);
-	}
-	#endif
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_neigh_update_hooks(struct neighbour *neigh, const u8 *lladdr, uint8 old)
-{
-	#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-	if (old & NUD_VALID) {
-		#ifdef CONFIG_FAST_PATH_MODULE
-		if(FastPath_hook8!=NULL) {
-			FastPath_hook8(*(u32*)neigh->primary_key, (ether_addr_t*)lladdr, ARP_NONE);
-		}
-		#else
-		rtk_modifyArp(*(u32*)neigh->primary_key, (ether_addr_t*)lladdr, ARP_NONE);
-		#endif			
-	}
-	#endif
-
-	#if defined(CONFIG_RTL_HARDWARE_NAT) && defined(CONFIG_RTL_LAYERED_DRIVER) && defined(CONFIG_RTL_LAYERED_DRIVER_L3)
-	syn_asic_arp(neigh,  1);
-	#endif
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_neigh_update_post_hooks(struct neighbour *neigh, const u8 *lladdr, uint8 old)
-{
-	#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-	if ((neigh->nud_state & NUD_VALID) && !(old & NUD_VALID)) {
-		#if	defined(CONFIG_FAST_PATH_MODULE)
-		if(FastPath_hook5!=NULL)
-		{
-			FastPath_hook5(*(u32*)neigh->primary_key, (ether_addr_t*)neigh->ha, ARP_NONE);
-		}
-		#else
-		rtk_addArp(*(u32*)neigh->primary_key, (ether_addr_t*)neigh->ha, ARP_NONE);
-		#endif
-	} else if ((old & NUD_VALID) && !(neigh->nud_state & NUD_VALID)) {
-		#if	defined(CONFIG_FAST_PATH_MODULE)
-		if(FastPath_hook7!=NULL)
-		{
-			FastPath_hook7(*(u32*)neigh->primary_key);
-		}
-		#else
-		rtk_delArp(*(u32*)neigh->primary_key);
-		#endif
-	}
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-static __inline__ int neigh_max_probes(struct neighbour *n)
-{
-	struct neigh_parms *p = n->parms;
-	return (n->nud_state & NUD_PROBE ?
-		p->ucast_probes :
-		p->ucast_probes + p->app_probes + p->mcast_probes);
-}
-
-int32  rtl_neigh_periodic_timer_hooks(struct neighbour *n,  unsigned int  refresh)
-{
-	int	ret;
-
-	if (!(n->nud_state & NUD_VALID))
-		return RTL_PS_HOOKS_CONTINUE;
-	
-	ret = RTL_PS_HOOKS_CONTINUE;
-	#if defined(CONFIG_RTL_HARDWARE_NAT) && defined(CONFIG_RTL_LAYERED_DRIVER)  && defined(CONFIG_RTL_LAYERED_DRIVER_L3)
-	if (rtl865x_arpSync(htonl(*((u32 *)n->primary_key)), refresh)>0) {
-		n->used = jiffies;
-		n->dead=0;
-		ret = RTL_PS_HOOKS_BREAK;
-	}
-	else 
-	#endif
-
-	#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-	{
-		#ifdef CONFIG_FAST_PATH_MODULE
-		if(FastPath_hook7!=NULL)
-		{
-			FastPath_hook7(*(u32*)n->primary_key);
-		}
-		#else
-		rtk_delArp(*(u32*)n->primary_key);
-		#endif
-	}
-	#endif
-
-	return ret;
-}
-
-int32 rtl_neigh_timer_handler_pre_update_hooks(struct neighbour *neigh, unsigned state)
-{
-	#if defined(CONFIG_RTL_HARDWARE_NAT) && defined(CONFIG_RTL_LAYERED_DRIVER)  && defined(CONFIG_RTL_LAYERED_DRIVER_L3)
-	int32	tval;
-	#endif
-	
-	if (state & NUD_REACHABLE) {
-		#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-		if (neigh->nud_state & NUD_VALID) {
-			#ifdef CONFIG_FAST_PATH_MODULE
-			if(FastPath_hook7!=NULL)
-			{
-				FastPath_hook7(*(u32*)neigh->primary_key);
-			}
-			#else
-			rtk_delArp(*(u32*)neigh->primary_key);
-			#endif
-		}
-		#endif
-
-		#if defined(CONFIG_RTL_HARDWARE_NAT) && defined(CONFIG_RTL_LAYERED_DRIVER)  && defined(CONFIG_RTL_LAYERED_DRIVER_L3)
-		tval = rtl865x_arpSync(htonl(*((u32 *)neigh->primary_key)), 0);
-		if (tval > 0) 
-		{
-			neigh->confirmed = jiffies;
-		}
-		#if 0
-		printk("%s:%d: ip:%u.%u.%u.%u, mac:%x:%x:%x:%x:%x:%x, tval is %d\n",
-		__FUNCTION__,__LINE__,NIPQUAD(htonl(*((u32 *)neigh->primary_key))), neigh->ha[0], neigh->ha[1], 
-		neigh->ha[2], neigh->ha[3], neigh->ha[4], neigh->ha[5],tval);
-		#endif
-		#endif
-
-	} else if (state & NUD_DELAY) {
-		#if defined(CONFIG_RTL_HARDWARE_NAT) && defined(CONFIG_RTL_LAYERED_DRIVER)  && defined(CONFIG_RTL_LAYERED_DRIVER_L3)
-		tval = rtl865x_arpSync(htonl(*((u32 *)neigh->primary_key)), 0);
-		if (tval > 0) 
-		{
-			neigh->confirmed = jiffies;
-		}
-		#if 0
-		printk("%s:%d: ip:%u.%u.%u.%u, mac:%x:%x:%x:%x:%x:%x, tval is %d",
-		__FUNCTION__,__LINE__,NIPQUAD(htonl(*((u32 *)neigh->primary_key))), neigh->ha[0], neigh->ha[1], 
-		neigh->ha[2], neigh->ha[3], neigh->ha[4], neigh->ha[5],tval);
-		#endif
-		#endif
-	}
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_neigh_timer_handler_during_update_hooks(struct neighbour *neigh, unsigned state)
-{
-	#if defined(CONFIG_RTL_HARDWARE_NAT) && defined(CONFIG_RTL_LAYERED_DRIVER)  && defined(CONFIG_RTL_LAYERED_DRIVER_L3)
-	if ((neigh->nud_state & (NUD_INCOMPLETE | NUD_PROBE)) &&
-	    atomic_read(&neigh->probes) >= neigh_max_probes(neigh)) {
-		if (neigh->nud_state & NUD_VALID) {
-			/*delete asic arp entry*/
-			syn_asic_arp(neigh, 0);
-			#if 0
-			printk("%s:%d: ip:%u.%u.%u.%u, mac:%x:%x:%x:%x:%x:%x\n", 
-			__FUNCTION__,__LINE__,NIPQUAD(htonl(*((u32 *)neigh->primary_key))), neigh->ha[0], neigh->ha[1], 
-			neigh->ha[2], neigh->ha[3], neigh->ha[4],neigh->ha[5]);
-			#endif
-		}
-	}
-	#endif
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_neigh_timer_handler_post_update_hooks(struct neighbour *neigh, unsigned state)
-{
-	#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-	if ((neigh->nud_state & NUD_VALID) && !(state & NUD_VALID)) {
-		#ifdef CONFIG_FAST_PATH_MODULE
-		if(FastPath_hook5!=NULL)
-		{
-			FastPath_hook5(*(u32*)neigh->primary_key, (ether_addr_t*)neigh->ha, ARP_NONE);
-		}
-		#else
-		rtk_addArp(*(u32*)neigh->primary_key, (ether_addr_t*)neigh->ha, ARP_NONE);
-		#endif
-	} else if ((state & NUD_VALID) && !(neigh->nud_state & NUD_VALID)) {
-		#ifdef CONFIG_FAST_PATH_MODULE
-		if(FastPath_hook7!=NULL)
-		{
-			FastPath_hook7(*(u32*)neigh->primary_key);
-		}
-		#else
-		rtk_delArp(*(u32*)neigh->primary_key);
-		#endif
-	}
-	#endif
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl___neigh_event_send_pre_hooks(struct neighbour *neigh, struct sk_buff *skb)
-{
-	#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-	if (!(neigh->nud_state & (NUD_STALE | NUD_INCOMPLETE))) {
-		if (neigh->nud_state & NUD_VALID) {
-			#if	defined(CONFIG_FAST_PATH_MODULE)
-			if(FastPath_hook7!=NULL) {
-				FastPath_hook7(*(u32*)neigh->primary_key);
-			}
-			#else
-			rtk_delArp(*(u32*)neigh->primary_key);
-			#endif
-		}
-	}
-	#endif
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl___neigh_event_send_post_hooks(struct neighbour *neigh, struct sk_buff *skb)
-{
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_neigh_init_hooks(void)
-{
-	#if defined(CONFIG_RTL_MULTIPLE_WAN)
-	rtl_set_callback_for_ps_arp(rtl_get_ps_arp_mapping);
-	#endif
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-#if defined(CONFIG_BRIDGE)
-int32 rtl___br_fdb_get_timeout_hooks(struct net_bridge *br, struct net_bridge_fdb_entry *fdb, const unsigned char *addr)
-{
-	#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-	if (rtl_br_fdb_time_update((void*)br, (void*)fdb, addr)==FAILED) {
-		return RTL_PS_HOOKS_BREAK;
-	}
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-#endif
-
-int32 rtl_masq_device_event_hooks(struct notifier_block *this, struct net_device *dev,  unsigned long event)
-{
-	#if defined(CONFIG_RTL_HARDWARE_NAT)
-	if (dev!=NULL && dev->ip_ptr!=NULL)
-		rtl_update_ip_tables(dev->name, event, (struct in_ifaddr *)(((struct in_device *)(dev->ip_ptr))->ifa_list));
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-
- int32 rtl_masq_inet_event_hooks(struct notifier_block *this, unsigned long event, void *ptr)
- {
-	#if defined(CONFIG_RTL_HARDWARE_NAT)
-	struct in_ifaddr *ina;
-
-	ina = (struct in_ifaddr*)ptr;
-
-	#ifdef CONFIG_HARDWARE_NAT_DEBUG
-	/*2007-12-19*/
-	printk("%s:%d\n",__FUNCTION__,__LINE__);
-	printk("ptr->ifa_dev->dev->name is %s\n", ina->ifa_dev->dev->name);
-	#endif
-
-	rtl_update_ip_tables(ina->ifa_dev->dev->name, event, ina);
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
- }
-
-
-int32 rtl_translate_table_hooks(const char *name,
-		unsigned int valid_hooks,
-		struct xt_table_info *newinfo,
-		void *entry0,
-		unsigned int size,
-		unsigned int number,
-		const unsigned int *hook_entries,
-		const unsigned int *underflows)
-{
-#if defined(CONFIG_RTL_HARDWARE_NAT)	
-	//hyking:check masquerade and add ip
-	if(strcmp(name,"nat") == 0)
-	{
-		rtl_flush_extern_ip();
-		rtl_init_masq_info();	
-		rtl_check_for_extern_ip(name,valid_hooks,newinfo,entry0,size,number,hook_entries,underflows);
-	}
-#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-int32 rtl_ip_tables_init_hooks(void)
-{
-	#if defined(CONFIG_RTL_HARDWARE_NAT)
-	rtl_init_masq_info();
-	#endif
-	
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-
-int32 rtl_ip_vs_conn_expire_hooks1(struct ip_vs_conn *cp)
-{
-	int32	ret;
-
-	ret = RTL_PS_HOOKS_CONTINUE;
-	#if defined(CONFIG_RTL_HARDWARE_NAT)
-	if (FAILED==rtl_ip_vs_conn_expire_check(cp)) {
-		ret = RTL_PS_HOOKS_RETURN;
-	}
-	#endif
-
-	return ret;
-}
-
-int32 rtl_ip_vs_conn_expire_hooks2(struct ip_vs_conn *cp)
-{
-	#if defined(CONFIG_RTL_HARDWARE_NAT)
-	rtl_ip_vs_conn_expire_check_delete(cp);
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
- 
-#if defined(CONFIG_IP_VS_PROTO_TCP)
-int32 rtl_tcp_state_transition_hooks(struct ip_vs_conn *cp, int direction, const struct sk_buff *skb, struct ip_vs_protocol *pp)
-{
-	#if defined(CONFIG_RTL_HARDWARE_NAT)
-	rtl_tcp_state_transition_check(cp, direction, skb, pp);
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-#endif
-
-#if defined(CONFIG_IP_VS_PROTO_UDP)
-int32 rtl_udp_state_transition_hooks(struct ip_vs_conn *cp, int direction, const struct sk_buff *skb, struct ip_vs_protocol *pp)
-{
-	#if defined(CONFIG_RTL_HARDWARE_NAT)
-	rtl_udp_state_transition_check(cp, direction, skb, pp);
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-#endif
-
-#ifdef CONFIG_PROC_FS
-int rtl_ct_seq_show_hooks(struct seq_file *s, struct nf_conn *ct)
-{
-	//hyking add for hw use
-	#if defined(CONFIG_RTL_HARDWARE_NAT)
-	struct nf_conn_nat *nat;
-	char *state[2]={"Hardware","software"};
-
-	nat = nfct_nat(ct);
-	if(seq_printf(s,"[%s] ",nat->hw_acc?state[0]:state[1]) != 0)
-		return RTL_PS_HOOKS_BREAK;		
-	#endif
-	return RTL_PS_HOOKS_CONTINUE;
-}
-#endif
-
-#if defined(CONFIG_RTL_NF_CONNTRACK_GARBAGE_NEW)
-//When do garbage collection and dst cache overflow, should not do garbage collection for rtl_gc_overflow_timout(default 3s)
-//Note: rtl_gc_overflow_timout can be modified by user via /proc/gc_overflow_timout
-unsigned long rtl_gc_overflow_timout=3*HZ;
-static unsigned long rtl_gc_overflow_timeout=0;
-#endif
-
-//Before do garbage collection, do rtl_dst_alloc_gc_pre_check_hooks
-int32 rtl_dst_alloc_gc_pre_check_hooks(struct dst_ops * ops)
-{
-#if defined(CONFIG_RTL_NF_CONNTRACK_GARBAGE_NEW)
-	if((rtl_gc_overflow_timeout > 0)&& time_after_eq(rtl_gc_overflow_timeout, jiffies)){
-		return RTL_PS_HOOKS_RETURN;
-	}
-#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-//After do garbage collection and dst cache overflow, do rtl_dst_alloc_gc_post_check1_hooks
-int32 rtl_dst_alloc_gc_post_check1_hooks(struct dst_ops * ops)
-{
-#if defined(CONFIG_RTL_NF_CONNTRACK_GARBAGE_NEW)
-	rtl_gc_overflow_timeout=jiffies+rtl_gc_overflow_timout;
-#endif
-	
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-//After [do garbage collection and dst cache not overflow] and dst alloc success, do rtl_dst_alloc_gc_post_check2_hooks
-int32 rtl_dst_alloc_gc_post_check2_hooks(struct dst_ops * ops, struct dst_entry * dst)
-{
-#if defined(CONFIG_RTL_NF_CONNTRACK_GARBAGE_NEW)
-	rtl_gc_overflow_timeout=0;
-#endif
-	
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-#if defined(CONFIG_RTL_NF_CONNTRACK_GARBAGE_NEW)
-// hooks in clean_from_lists at rtl_nf_connGC.c
-int32 clean_from_lists_hooks(struct nf_conn *ct, struct net *net)
-{
-	#if defined(CONFIG_RTL_IPTABLES_FAST_PATH) || defined(CONFIG_RTL_HARDWARE_NAT)
-		rtl_delConnCache(ct);
-	#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-// hooks in __nf_ct_refresh_acct_proto at rtl_nf_connGC.c
-int32 __nf_ct_refresh_acct_proto_hooks(struct nf_conn *ct, 
-					enum ip_conntrack_info ctinfo,
-					const struct sk_buff *skb, 
-					int do_acct,
-					int *event)
-{
-#ifdef CONFIG_IP_NF_CT_ACCT
-	if (do_acct) {
-		ct->counters[CTINFO2DIR(ctinfo)].packets++;
-		ct->counters[CTINFO2DIR(ctinfo)].bytes += 
-						ntohs(skb->nh.iph->tot_len);
-		if ((ct->counters[CTINFO2DIR(ctinfo)].packets & 0x80000000)
-		    || (ct->counters[CTINFO2DIR(ctinfo)].bytes & 0x80000000))
-			*event |= IPCT_COUNTER_FILLING;
-	}
-#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-// hooks1 in __drop_one_conntrack_process at rtl_nf_connGC.c
-int32 __drop_one_conntrack_process_hooks1(struct nf_conn* ct, int dropPrioIdx, int factor, int checkFlags, int tcpUdpState)
-{
-#if defined(CONFIG_RTL_IPTABLES_FAST_PATH) || defined(CONFIG_RTL_HARDWARE_NAT)
-	if (checkFlags==TRUE && drop_priority[dropPrioIdx].state==tcpUdpState) {
-		#if defined(CONFIG_RTL_IPTABLES_FAST_PATH)
-		if (FAILED==rtl_fpTimer_update(ct)) {
-			read_unlock_bh(&nf_conntrack_lock);
-			rtl_death_action(ct);
-			return RTL_PS_HOOKS_RETURN;
-		}
-		#endif
-
-		#if defined(CONFIG_RTL_HARDWARE_NAT)
-		if (FAILED==rtl_hwnat_timer_update(ct)) {
-			read_unlock_bh(&nf_conntrack_lock);
-			rtl_death_action(ct);
-			return RTL_PS_HOOKS_RETURN;
-		}
-		#endif
-	}
-
-#if (HZ==100)
-	if (((ct->timeout.expires - jiffies) >> (factor+7))<=drop_priority[dropPrioIdx].threshold)
-#elif (HZ==1000)
-	if (((ct->timeout.expires - jiffies) >> (factor+10))<=drop_priority[dropPrioIdx].threshold)
-#else
-	#error "Please Check the HZ defination."
-#endif
-	{
-		read_unlock_bh(&nf_conntrack_lock);
-		rtl_death_action(ct);
-		return RTL_PS_HOOKS_RETURN;
-	}
-
-	return RTL_PS_HOOKS_CONTINUE;
-#else
-	return RTL_PS_HOOKS_BREAK;
-#endif
-}
-
-// hooks2 in __drop_one_conntrack_process at rtl_nf_connGC.c
-int32 __drop_one_conntrack_process_hooks2(struct nf_conn* ct, int dropPrioIdx, int factor, int checkFlags, int tcpUdpState)
-{
-#if defined(CONFIG_RTL_IPTABLES_FAST_PATH) || defined(CONFIG_RTL_HARDWARE_NAT)
-	add_timer(&ct->timeout);
-#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-
-// hooks in rtl_nf_conn_GC_init at rtl_nf_connGC.c
-int32 rtl_nf_conn_GC_init_hooks(void)
-{
-#if defined(CONFIG_PROC_FS)
-	gc_overflow_timout_proc_init();
-#endif
-
-	return RTL_PS_HOOKS_CONTINUE;
-}
-#endif
-