diff options
Diffstat (limited to 'net/netfilter/Kconfig')
-rw-r--r-- | net/netfilter/Kconfig | 83 |
1 files changed, 70 insertions, 13 deletions
diff --git a/net/netfilter/Kconfig b/net/netfilter/Kconfig index c19b214ffd5..fefa514b991 100644 --- a/net/netfilter/Kconfig +++ b/net/netfilter/Kconfig | |||
@@ -356,6 +356,55 @@ config NETFILTER_NETLINK_QUEUE_CT | |||
356 | If this option is enabled, NFQUEUE can include Connection Tracking | 356 | If this option is enabled, NFQUEUE can include Connection Tracking |
357 | information together with the packet is the enqueued via NFNETLINK. | 357 | information together with the packet is the enqueued via NFNETLINK. |
358 | 358 | ||
359 | config NF_NAT | ||
360 | tristate | ||
361 | |||
362 | config NF_NAT_NEEDED | ||
363 | bool | ||
364 | depends on NF_NAT | ||
365 | default y | ||
366 | |||
367 | config NF_NAT_PROTO_DCCP | ||
368 | tristate | ||
369 | depends on NF_NAT && NF_CT_PROTO_DCCP | ||
370 | default NF_NAT && NF_CT_PROTO_DCCP | ||
371 | |||
372 | config NF_NAT_PROTO_UDPLITE | ||
373 | tristate | ||
374 | depends on NF_NAT && NF_CT_PROTO_UDPLITE | ||
375 | default NF_NAT && NF_CT_PROTO_UDPLITE | ||
376 | |||
377 | config NF_NAT_PROTO_SCTP | ||
378 | tristate | ||
379 | default NF_NAT && NF_CT_PROTO_SCTP | ||
380 | depends on NF_NAT && NF_CT_PROTO_SCTP | ||
381 | select LIBCRC32C | ||
382 | |||
383 | config NF_NAT_AMANDA | ||
384 | tristate | ||
385 | depends on NF_CONNTRACK && NF_NAT | ||
386 | default NF_NAT && NF_CONNTRACK_AMANDA | ||
387 | |||
388 | config NF_NAT_FTP | ||
389 | tristate | ||
390 | depends on NF_CONNTRACK && NF_NAT | ||
391 | default NF_NAT && NF_CONNTRACK_FTP | ||
392 | |||
393 | config NF_NAT_IRC | ||
394 | tristate | ||
395 | depends on NF_CONNTRACK && NF_NAT | ||
396 | default NF_NAT && NF_CONNTRACK_IRC | ||
397 | |||
398 | config NF_NAT_SIP | ||
399 | tristate | ||
400 | depends on NF_CONNTRACK && NF_NAT | ||
401 | default NF_NAT && NF_CONNTRACK_SIP | ||
402 | |||
403 | config NF_NAT_TFTP | ||
404 | tristate | ||
405 | depends on NF_CONNTRACK && NF_NAT | ||
406 | default NF_NAT && NF_CONNTRACK_TFTP | ||
407 | |||
359 | endif # NF_CONNTRACK | 408 | endif # NF_CONNTRACK |
360 | 409 | ||
361 | # transparent proxy support | 410 | # transparent proxy support |
@@ -599,6 +648,16 @@ config NETFILTER_XT_TARGET_MARK | |||
599 | (e.g. when running oldconfig). It selects | 648 | (e.g. when running oldconfig). It selects |
600 | CONFIG_NETFILTER_XT_MARK (combined mark/MARK module). | 649 | CONFIG_NETFILTER_XT_MARK (combined mark/MARK module). |
601 | 650 | ||
651 | config NETFILTER_XT_TARGET_NETMAP | ||
652 | tristate '"NETMAP" target support' | ||
653 | depends on NF_NAT | ||
654 | ---help--- | ||
655 | NETMAP is an implementation of static 1:1 NAT mapping of network | ||
656 | addresses. It maps the network address part, while keeping the host | ||
657 | address part intact. | ||
658 | |||
659 | To compile it as a module, choose M here. If unsure, say N. | ||
660 | |||
602 | config NETFILTER_XT_TARGET_NFLOG | 661 | config NETFILTER_XT_TARGET_NFLOG |
603 | tristate '"NFLOG" target support' | 662 | tristate '"NFLOG" target support' |
604 | default m if NETFILTER_ADVANCED=n | 663 | default m if NETFILTER_ADVANCED=n |
@@ -621,19 +680,6 @@ config NETFILTER_XT_TARGET_NFQUEUE | |||
621 | 680 | ||
622 | To compile it as a module, choose M here. If unsure, say N. | 681 | To compile it as a module, choose M here. If unsure, say N. |
623 | 682 | ||
624 | config NETFILTER_XT_TARGET_NOTRACK | ||
625 | tristate '"NOTRACK" target support' | ||
626 | depends on IP_NF_RAW || IP6_NF_RAW | ||
627 | depends on NF_CONNTRACK | ||
628 | help | ||
629 | The NOTRACK target allows a select rule to specify | ||
630 | which packets *not* to enter the conntrack/NAT | ||
631 | subsystem with all the consequences (no ICMP error tracking, | ||
632 | no protocol helpers for the selected packets). | ||
633 | |||
634 | If you want to compile it as a module, say M here and read | ||
635 | <file:Documentation/kbuild/modules.txt>. If unsure, say `N'. | ||
636 | |||
637 | config NETFILTER_XT_TARGET_RATEEST | 683 | config NETFILTER_XT_TARGET_RATEEST |
638 | tristate '"RATEEST" target support' | 684 | tristate '"RATEEST" target support' |
639 | depends on NETFILTER_ADVANCED | 685 | depends on NETFILTER_ADVANCED |
@@ -644,6 +690,17 @@ config NETFILTER_XT_TARGET_RATEEST | |||
644 | 690 | ||
645 | To compile it as a module, choose M here. If unsure, say N. | 691 | To compile it as a module, choose M here. If unsure, say N. |
646 | 692 | ||
693 | config NETFILTER_XT_TARGET_REDIRECT | ||
694 | tristate "REDIRECT target support" | ||
695 | depends on NF_NAT | ||
696 | ---help--- | ||
697 | REDIRECT is a special case of NAT: all incoming connections are | ||
698 | mapped onto the incoming interface's address, causing the packets to | ||
699 | come to the local machine instead of passing through. This is | ||
700 | useful for transparent proxies. | ||
701 | |||
702 | To compile it as a module, choose M here. If unsure, say N. | ||
703 | |||
647 | config NETFILTER_XT_TARGET_TEE | 704 | config NETFILTER_XT_TARGET_TEE |
648 | tristate '"TEE" - packet cloning to alternate destination' | 705 | tristate '"TEE" - packet cloning to alternate destination' |
649 | depends on NETFILTER_ADVANCED | 706 | depends on NETFILTER_ADVANCED |