zte's code,first commit

Change-Id: I9a04da59e459a9bc0d67f101f700d9d7dc8d681b
diff --git a/ap/app/iptables/extensions/libxt_NOTRACK.c b/ap/app/iptables/extensions/libxt_NOTRACK.c
new file mode 100755
index 0000000..ef26654
--- /dev/null
+++ b/ap/app/iptables/extensions/libxt_NOTRACK.c
@@ -0,0 +1,46 @@
+/* Shared library add-on to iptables to add NOTRACK target support. */
+#include <stdio.h>
+#include <string.h>
+#include <stdlib.h>
+#include <getopt.h>
+
+#include <xtables.h>
+#include <linux/netfilter/x_tables.h>
+
+static void NOTRACK_help(void)
+{
+	printf("NOTRACK target takes no options\n");
+}
+
+static int
+NOTRACK_parse(int c, char **argv, int invert, unsigned int *flags,
+              const void *entry, struct xt_entry_target **target)
+{
+	return 0;
+}
+
+static struct xtables_target notrack_target = {
+	.family		= NFPROTO_IPV4,
+	.name		= "NOTRACK",
+	.version	= XTABLES_VERSION,
+	.size		= XT_ALIGN(0),
+	.userspacesize	= XT_ALIGN(0),
+	.help		= NOTRACK_help,
+	.parse		= NOTRACK_parse,
+};
+
+static struct xtables_target notrack_target6 = {
+	.family		= NFPROTO_IPV6,
+	.name		= "NOTRACK",
+	.version	= XTABLES_VERSION,
+	.size		= XT_ALIGN(0),
+	.userspacesize	= XT_ALIGN(0),
+	.help		= NOTRACK_help,
+	.parse		= NOTRACK_parse,
+};
+
+void _init(void)
+{
+	xtables_register_target(&notrack_target);
+	xtables_register_target(&notrack_target6);
+}