diff options
| author | Yasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp> | 2005-11-14 18:26:58 -0500 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2005-11-14 18:26:58 -0500 |
| commit | 9bdf87d90bbd1a3e3183ac116a6a9d861f32baca (patch) | |
| tree | d8d5c1d527e71d2c28a33a7610fc991248336f67 | |
| parent | 47d4305bf2275f82a51fa025257c2c1996356d6b (diff) | |
[NETFILTER]: cleanup IPv6 Netfilter Kconfig
This removes linux 2.4 configs in comments as TODO lists.
And this also move the entry of nf_conntrack to top like IPv4 Netfilter
Kconfig.
Based on original patch by Krzysztof Piotr Oledzki <ole@ans.pl>.
Signed-off-by: Yasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp>
Signed-off-by: Harald Welte <laforge@netfilter.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
| -rw-r--r-- | net/ipv6/netfilter/Kconfig | 50 |
1 files changed, 14 insertions, 36 deletions
diff --git a/net/ipv6/netfilter/Kconfig b/net/ipv6/netfilter/Kconfig index 971ba60bf6e9..060d61202412 100644 --- a/net/ipv6/netfilter/Kconfig +++ b/net/ipv6/netfilter/Kconfig | |||
| @@ -5,10 +5,20 @@ | |||
| 5 | menu "IPv6: Netfilter Configuration (EXPERIMENTAL)" | 5 | menu "IPv6: Netfilter Configuration (EXPERIMENTAL)" |
| 6 | depends on INET && IPV6 && NETFILTER && EXPERIMENTAL | 6 | depends on INET && IPV6 && NETFILTER && EXPERIMENTAL |
| 7 | 7 | ||
| 8 | #tristate 'Connection tracking (required for masq/NAT)' CONFIG_IP6_NF_CONNTRACK | 8 | config NF_CONNTRACK_IPV6 |
| 9 | #if [ "$CONFIG_IP6_NF_CONNTRACK" != "n" ]; then | 9 | tristate "IPv6 support for new connection tracking (EXPERIMENTAL)" |
| 10 | # dep_tristate ' FTP protocol support' CONFIG_IP6_NF_FTP $CONFIG_IP6_NF_CONNTRACK | 10 | depends on EXPERIMENTAL && NF_CONNTRACK |
| 11 | #fi | 11 | ---help--- |
| 12 | Connection tracking keeps a record of what packets have passed | ||
| 13 | through your machine, in order to figure out how they are related | ||
| 14 | into connections. | ||
| 15 | |||
| 16 | This is IPv6 support on Layer 3 independent connection tracking. | ||
| 17 | Layer 3 independent connection tracking is experimental scheme | ||
| 18 | which generalize ip_conntrack to support other layer 3 protocols. | ||
| 19 | |||
| 20 | To compile it as a module, choose M here. If unsure, say N. | ||
| 21 | |||
| 12 | config IP6_NF_QUEUE | 22 | config IP6_NF_QUEUE |
| 13 | tristate "IP6 Userspace queueing via NETLINK (OBSOLETE)" | 23 | tristate "IP6 Userspace queueing via NETLINK (OBSOLETE)" |
| 14 | ---help--- | 24 | ---help--- |
| @@ -114,7 +124,6 @@ config IP6_NF_MATCH_OWNER | |||
| 114 | 124 | ||
| 115 | To compile it as a module, choose M here. If unsure, say N. | 125 | To compile it as a module, choose M here. If unsure, say N. |
| 116 | 126 | ||
| 117 | # dep_tristate ' MAC address match support' CONFIG_IP6_NF_MATCH_MAC $CONFIG_IP6_NF_IPTABLES | ||
| 118 | config IP6_NF_MATCH_MARK | 127 | config IP6_NF_MATCH_MARK |
| 119 | tristate "netfilter MARK match support" | 128 | tristate "netfilter MARK match support" |
| 120 | depends on IP6_NF_IPTABLES | 129 | depends on IP6_NF_IPTABLES |
| @@ -170,15 +179,6 @@ config IP6_NF_MATCH_PHYSDEV | |||
| 170 | 179 | ||
| 171 | To compile it as a module, choose M here. If unsure, say N. | 180 | To compile it as a module, choose M here. If unsure, say N. |
| 172 | 181 | ||
| 173 | # dep_tristate ' Multiple port match support' CONFIG_IP6_NF_MATCH_MULTIPORT $CONFIG_IP6_NF_IPTABLES | ||
| 174 | # dep_tristate ' TOS match support' CONFIG_IP6_NF_MATCH_TOS $CONFIG_IP6_NF_IPTABLES | ||
| 175 | # if [ "$CONFIG_IP6_NF_CONNTRACK" != "n" ]; then | ||
| 176 | # dep_tristate ' Connection state match support' CONFIG_IP6_NF_MATCH_STATE $CONFIG_IP6_NF_CONNTRACK $CONFIG_IP6_NF_IPTABLES | ||
| 177 | # fi | ||
| 178 | # if [ "$CONFIG_EXPERIMENTAL" = "y" ]; then | ||
| 179 | # dep_tristate ' Unclean match support (EXPERIMENTAL)' CONFIG_IP6_NF_MATCH_UNCLEAN $CONFIG_IP6_NF_IPTABLES | ||
| 180 | # dep_tristate ' Owner match support (EXPERIMENTAL)' CONFIG_IP6_NF_MATCH_OWNER $CONFIG_IP6_NF_IPTABLES | ||
| 181 | # fi | ||
| 182 | # The targets | 182 | # The targets |
| 183 | config IP6_NF_FILTER | 183 | config IP6_NF_FILTER |
| 184 | tristate "Packet filtering" | 184 | tristate "Packet filtering" |
| @@ -220,12 +220,6 @@ config IP6_NF_TARGET_NFQUEUE | |||
| 220 | 220 | ||
| 221 | To compile it as a module, choose M here. If unsure, say N. | 221 | To compile it as a module, choose M here. If unsure, say N. |
| 222 | 222 | ||
| 223 | # if [ "$CONFIG_IP6_NF_FILTER" != "n" ]; then | ||
| 224 | # dep_tristate ' REJECT target support' CONFIG_IP6_NF_TARGET_REJECT $CONFIG_IP6_NF_FILTER | ||
| 225 | # if [ "$CONFIG_EXPERIMENTAL" = "y" ]; then | ||
| 226 | # dep_tristate ' MIRROR target support (EXPERIMENTAL)' CONFIG_IP6_NF_TARGET_MIRROR $CONFIG_IP6_NF_FILTER | ||
| 227 | # fi | ||
| 228 | # fi | ||
| 229 | config IP6_NF_MANGLE | 223 | config IP6_NF_MANGLE |
| 230 | tristate "Packet mangling" | 224 | tristate "Packet mangling" |
| 231 | depends on IP6_NF_IPTABLES | 225 | depends on IP6_NF_IPTABLES |
| @@ -236,7 +230,6 @@ config IP6_NF_MANGLE | |||
| 236 | 230 | ||
| 237 | To compile it as a module, choose M here. If unsure, say N. | 231 | To compile it as a module, choose M here. If unsure, say N. |
| 238 | 232 | ||
| 239 | # dep_tristate ' TOS target support' CONFIG_IP6_NF_TARGET_TOS $CONFIG_IP_NF_MANGLE | ||
| 240 | config IP6_NF_TARGET_MARK | 233 | config IP6_NF_TARGET_MARK |
| 241 | tristate "MARK target support" | 234 | tristate "MARK target support" |
| 242 | depends on IP6_NF_MANGLE | 235 | depends on IP6_NF_MANGLE |
| @@ -266,7 +259,6 @@ config IP6_NF_TARGET_HL | |||
| 266 | 259 | ||
| 267 | To compile it as a module, choose M here. If unsure, say N. | 260 | To compile it as a module, choose M here. If unsure, say N. |
| 268 | 261 | ||
| 269 | #dep_tristate ' LOG target support' CONFIG_IP6_NF_TARGET_LOG $CONFIG_IP6_NF_IPTABLES | ||
| 270 | config IP6_NF_RAW | 262 | config IP6_NF_RAW |
| 271 | tristate 'raw table support (required for TRACE)' | 263 | tristate 'raw table support (required for TRACE)' |
| 272 | depends on IP6_NF_IPTABLES | 264 | depends on IP6_NF_IPTABLES |
| @@ -278,19 +270,5 @@ config IP6_NF_RAW | |||
| 278 | If you want to compile it as a module, say M here and read | 270 | If you want to compile it as a module, say M here and read |
| 279 | <file:Documentation/modules.txt>. If unsure, say `N'. | 271 | <file:Documentation/modules.txt>. If unsure, say `N'. |
| 280 | 272 | ||
| 281 | config NF_CONNTRACK_IPV6 | ||
| 282 | tristate "IPv6 support for new connection tracking (EXPERIMENTAL)" | ||
| 283 | depends on EXPERIMENTAL && NF_CONNTRACK | ||
| 284 | ---help--- | ||
| 285 | Connection tracking keeps a record of what packets have passed | ||
| 286 | through your machine, in order to figure out how they are related | ||
| 287 | into connections. | ||
| 288 | |||
| 289 | This is IPv6 support on Layer 3 independent connection tracking. | ||
| 290 | Layer 3 independent connection tracking is experimental scheme | ||
| 291 | which generalize ip_conntrack to support other layer 3 protocols. | ||
| 292 | |||
| 293 | To compile it as a module, choose M here. If unsure, say N. | ||
| 294 | |||
| 295 | endmenu | 273 | endmenu |
| 296 | 274 | ||
