diff --git a/qca-nss-ecm/patches/0018-ecm-limit-fw-12.2.patch b/qca-nss-ecm/patches/0018-ecm-limit-fw-12.2.patch
new file mode 100644
index 0000000..296ef34
--- /dev/null
+++ b/qca-nss-ecm/patches/0018-ecm-limit-fw-12.2.patch
@@ -0,0 +1,33 @@
+--- b/frontends/nss/ecm_nss_non_ported_ipv4.c
++++ a/frontends/nss/ecm_nss_non_ported_ipv4.c
+@@ -852,14 +852,6 @@
+ #else
+ 			rule_invalid = true;
+ 			DEBUG_TRACE("%px: PPTP - unsupported\n", feci);
+-#endif
+-			break;
+-		case ECM_DB_IFACE_TYPE_RAWIP:
+-#ifdef ECM_INTERFACE_RAWIP_ENABLE
+-			nircm->valid_flags |= NSS_IPV4_RULE_CREATE_RAWIP_VALID;
+-#else
+-			rule_invalid = true;
+-			DEBUG_TRACE("%px: RAWIP - unsupported\n", feci);
+ #endif
+ 			break;
+ 		default:
+@@ -1069,14 +1061,6 @@
+ #else
+ 			rule_invalid = true;
+ 			DEBUG_TRACE("%px: IPSEC - unsupported\n", feci);
+-#endif
+-			break;
+-		case ECM_DB_IFACE_TYPE_RAWIP:
+-#ifdef ECM_INTERFACE_RAWIP_ENABLE
+-			nircm->valid_flags |= NSS_IPV4_RULE_CREATE_RAWIP_VALID;
+-#else
+-			rule_invalid = true;
+-			DEBUG_TRACE("%px: RAWIP - unsupported\n", feci);
+ #endif
+ 			break;
+ 		default:
+