diff -urN linux-2.6.23.17-orig/net/netfilter/Kconfig linux-2.6.23.17/net/netfilter/Kconfig
--- linux-2.6.23.17-orig/net/netfilter/Kconfig	2011-01-28 11:32:51.362860000 +0800
+++ linux-2.6.23.17/net/netfilter/Kconfig	2011-02-15 14:38:56.868476000 +0800
@@ -762,6 +762,20 @@
 
 	  To compile it as a module, choose M here.  If unsure, say N.
 
+config NETFILTER_XT_MATCH_TIME
+	tristate '"time" match support'
+	depends on NETFILTER_XTABLES
+	help
+	  This option adds a "time" match, which allows you to match based on
+	  the packet arrival time (at the machine which netfilter is running)
+	  on) or departure time/date (for locally generated packets).
+
+	  If you say Y here, try `iptables -m time --help` for
+	  more information.
+
+	  If you want to compile it as a module, say M here.
+	  If unsure, say N.
+
 config NETFILTER_XT_MATCH_U32
 	tristate '"u32" match support'
 	depends on NETFILTER_XTABLES
diff -urN linux-2.6.23.17-orig/net/netfilter/Makefile linux-2.6.23.17/net/netfilter/Makefile
--- linux-2.6.23.17-orig/net/netfilter/Makefile	2011-01-28 11:32:51.362860000 +0800
+++ linux-2.6.23.17/net/netfilter/Makefile	2011-02-15 14:36:55.470736000 +0800
@@ -86,3 +86,4 @@
 obj-$(CONFIG_NETFILTER_XT_MATCH_HASHLIMIT) += xt_hashlimit.o
 obj-$(CONFIG_NETFILTER_XT_MATCH_PORTSCAN) += xt_portscan.o
 obj-$(CONFIG_NETFILTER_XT_MATCH_WEBSTR) += xt_webstr.o
+obj-$(CONFIG_NETFILTER_XT_MATCH_TIME) += xt_time.o
