diff options
author | Jan Engelhardt <jengelh@medozas.de> | 2008-10-08 05:35:17 -0400 |
---|---|---|
committer | Patrick McHardy <kaber@trash.net> | 2008-10-08 05:35:17 -0400 |
commit | 20f3c56f4d7c76bcb66050f3364aa8da110f5bbd (patch) | |
tree | 944d02cf339772eaa33f095a0cba2edbe12df91d /net/bridge | |
parent | 2203eb47603b01b15a4b1d5b1c7886da96158e74 (diff) |
netfilter: ebtables: make BRIDGE_NF_EBTABLES a menuconfig option
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'net/bridge')
-rw-r--r-- | net/bridge/netfilter/Kconfig | 29 |
1 files changed, 5 insertions, 24 deletions
diff --git a/net/bridge/netfilter/Kconfig b/net/bridge/netfilter/Kconfig index e7c197ffb2f4..366d3e9d51f8 100644 --- a/net/bridge/netfilter/Kconfig +++ b/net/bridge/netfilter/Kconfig | |||
@@ -2,22 +2,21 @@ | |||
2 | # Bridge netfilter configuration | 2 | # Bridge netfilter configuration |
3 | # | 3 | # |
4 | 4 | ||
5 | menu "Bridge: Netfilter Configuration" | 5 | menuconfig BRIDGE_NF_EBTABLES |
6 | depends on BRIDGE && BRIDGE_NETFILTER | ||
7 | |||
8 | config BRIDGE_NF_EBTABLES | ||
9 | tristate "Ethernet Bridge tables (ebtables) support" | 6 | tristate "Ethernet Bridge tables (ebtables) support" |
10 | select NETFILTER_XTABLES | 7 | select NETFILTER_XTABLES |
11 | help | 8 | help |
12 | ebtables is a general, extensible frame/packet identification | 9 | ebtables is a general, extensible frame/packet identification |
13 | framework. Say 'Y' or 'M' here if you want to do Ethernet | 10 | framework. Say 'Y' or 'M' here if you want to do Ethernet |
14 | filtering/NAT/brouting on the Ethernet bridge. | 11 | filtering/NAT/brouting on the Ethernet bridge. |
12 | |||
13 | if BRIDGE_NF_EBTABLES | ||
14 | |||
15 | # | 15 | # |
16 | # tables | 16 | # tables |
17 | # | 17 | # |
18 | config BRIDGE_EBT_BROUTE | 18 | config BRIDGE_EBT_BROUTE |
19 | tristate "ebt: broute table support" | 19 | tristate "ebt: broute table support" |
20 | depends on BRIDGE_NF_EBTABLES | ||
21 | help | 20 | help |
22 | The ebtables broute table is used to define rules that decide between | 21 | The ebtables broute table is used to define rules that decide between |
23 | bridging and routing frames, giving Linux the functionality of a | 22 | bridging and routing frames, giving Linux the functionality of a |
@@ -28,7 +27,6 @@ config BRIDGE_EBT_BROUTE | |||
28 | 27 | ||
29 | config BRIDGE_EBT_T_FILTER | 28 | config BRIDGE_EBT_T_FILTER |
30 | tristate "ebt: filter table support" | 29 | tristate "ebt: filter table support" |
31 | depends on BRIDGE_NF_EBTABLES | ||
32 | help | 30 | help |
33 | The ebtables filter table is used to define frame filtering rules at | 31 | The ebtables filter table is used to define frame filtering rules at |
34 | local input, forwarding and local output. See the man page for | 32 | local input, forwarding and local output. See the man page for |
@@ -38,7 +36,6 @@ config BRIDGE_EBT_T_FILTER | |||
38 | 36 | ||
39 | config BRIDGE_EBT_T_NAT | 37 | config BRIDGE_EBT_T_NAT |
40 | tristate "ebt: nat table support" | 38 | tristate "ebt: nat table support" |
41 | depends on BRIDGE_NF_EBTABLES | ||
42 | help | 39 | help |
43 | The ebtables nat table is used to define rules that alter the MAC | 40 | The ebtables nat table is used to define rules that alter the MAC |
44 | source address (MAC SNAT) or the MAC destination address (MAC DNAT). | 41 | source address (MAC SNAT) or the MAC destination address (MAC DNAT). |
@@ -50,7 +47,6 @@ config BRIDGE_EBT_T_NAT | |||
50 | # | 47 | # |
51 | config BRIDGE_EBT_802_3 | 48 | config BRIDGE_EBT_802_3 |
52 | tristate "ebt: 802.3 filter support" | 49 | tristate "ebt: 802.3 filter support" |
53 | depends on BRIDGE_NF_EBTABLES | ||
54 | help | 50 | help |
55 | This option adds matching support for 802.3 Ethernet frames. | 51 | This option adds matching support for 802.3 Ethernet frames. |
56 | 52 | ||
@@ -58,7 +54,6 @@ config BRIDGE_EBT_802_3 | |||
58 | 54 | ||
59 | config BRIDGE_EBT_AMONG | 55 | config BRIDGE_EBT_AMONG |
60 | tristate "ebt: among filter support" | 56 | tristate "ebt: among filter support" |
61 | depends on BRIDGE_NF_EBTABLES | ||
62 | help | 57 | help |
63 | This option adds the among match, which allows matching the MAC source | 58 | This option adds the among match, which allows matching the MAC source |
64 | and/or destination address on a list of addresses. Optionally, | 59 | and/or destination address on a list of addresses. Optionally, |
@@ -68,7 +63,6 @@ config BRIDGE_EBT_AMONG | |||
68 | 63 | ||
69 | config BRIDGE_EBT_ARP | 64 | config BRIDGE_EBT_ARP |
70 | tristate "ebt: ARP filter support" | 65 | tristate "ebt: ARP filter support" |
71 | depends on BRIDGE_NF_EBTABLES | ||
72 | help | 66 | help |
73 | This option adds the ARP match, which allows ARP and RARP header field | 67 | This option adds the ARP match, which allows ARP and RARP header field |
74 | filtering. | 68 | filtering. |
@@ -77,7 +71,6 @@ config BRIDGE_EBT_ARP | |||
77 | 71 | ||
78 | config BRIDGE_EBT_IP | 72 | config BRIDGE_EBT_IP |
79 | tristate "ebt: IP filter support" | 73 | tristate "ebt: IP filter support" |
80 | depends on BRIDGE_NF_EBTABLES | ||
81 | help | 74 | help |
82 | This option adds the IP match, which allows basic IP header field | 75 | This option adds the IP match, which allows basic IP header field |
83 | filtering. | 76 | filtering. |
@@ -95,7 +88,6 @@ config BRIDGE_EBT_IP6 | |||
95 | 88 | ||
96 | config BRIDGE_EBT_LIMIT | 89 | config BRIDGE_EBT_LIMIT |
97 | tristate "ebt: limit match support" | 90 | tristate "ebt: limit match support" |
98 | depends on BRIDGE_NF_EBTABLES | ||
99 | help | 91 | help |
100 | This option adds the limit match, which allows you to control | 92 | This option adds the limit match, which allows you to control |
101 | the rate at which a rule can be matched. This match is the | 93 | the rate at which a rule can be matched. This match is the |
@@ -106,7 +98,6 @@ config BRIDGE_EBT_LIMIT | |||
106 | 98 | ||
107 | config BRIDGE_EBT_MARK | 99 | config BRIDGE_EBT_MARK |
108 | tristate "ebt: mark filter support" | 100 | tristate "ebt: mark filter support" |
109 | depends on BRIDGE_NF_EBTABLES | ||
110 | help | 101 | help |
111 | This option adds the mark match, which allows matching frames based on | 102 | This option adds the mark match, which allows matching frames based on |
112 | the 'nfmark' value in the frame. This can be set by the mark target. | 103 | the 'nfmark' value in the frame. This can be set by the mark target. |
@@ -117,7 +108,6 @@ config BRIDGE_EBT_MARK | |||
117 | 108 | ||
118 | config BRIDGE_EBT_PKTTYPE | 109 | config BRIDGE_EBT_PKTTYPE |
119 | tristate "ebt: packet type filter support" | 110 | tristate "ebt: packet type filter support" |
120 | depends on BRIDGE_NF_EBTABLES | ||
121 | help | 111 | help |
122 | This option adds the packet type match, which allows matching on the | 112 | This option adds the packet type match, which allows matching on the |
123 | type of packet based on its Ethernet "class" (as determined by | 113 | type of packet based on its Ethernet "class" (as determined by |
@@ -128,7 +118,6 @@ config BRIDGE_EBT_PKTTYPE | |||
128 | 118 | ||
129 | config BRIDGE_EBT_STP | 119 | config BRIDGE_EBT_STP |
130 | tristate "ebt: STP filter support" | 120 | tristate "ebt: STP filter support" |
131 | depends on BRIDGE_NF_EBTABLES | ||
132 | help | 121 | help |
133 | This option adds the Spanning Tree Protocol match, which | 122 | This option adds the Spanning Tree Protocol match, which |
134 | allows STP header field filtering. | 123 | allows STP header field filtering. |
@@ -137,7 +126,6 @@ config BRIDGE_EBT_STP | |||
137 | 126 | ||
138 | config BRIDGE_EBT_VLAN | 127 | config BRIDGE_EBT_VLAN |
139 | tristate "ebt: 802.1Q VLAN filter support" | 128 | tristate "ebt: 802.1Q VLAN filter support" |
140 | depends on BRIDGE_NF_EBTABLES | ||
141 | help | 129 | help |
142 | This option adds the 802.1Q vlan match, which allows the filtering of | 130 | This option adds the 802.1Q vlan match, which allows the filtering of |
143 | 802.1Q vlan fields. | 131 | 802.1Q vlan fields. |
@@ -157,7 +145,6 @@ config BRIDGE_EBT_ARPREPLY | |||
157 | 145 | ||
158 | config BRIDGE_EBT_DNAT | 146 | config BRIDGE_EBT_DNAT |
159 | tristate "ebt: dnat target support" | 147 | tristate "ebt: dnat target support" |
160 | depends on BRIDGE_NF_EBTABLES | ||
161 | help | 148 | help |
162 | This option adds the MAC DNAT target, which allows altering the MAC | 149 | This option adds the MAC DNAT target, which allows altering the MAC |
163 | destination address of frames. | 150 | destination address of frames. |
@@ -166,7 +153,6 @@ config BRIDGE_EBT_DNAT | |||
166 | 153 | ||
167 | config BRIDGE_EBT_MARK_T | 154 | config BRIDGE_EBT_MARK_T |
168 | tristate "ebt: mark target support" | 155 | tristate "ebt: mark target support" |
169 | depends on BRIDGE_NF_EBTABLES | ||
170 | help | 156 | help |
171 | This option adds the mark target, which allows marking frames by | 157 | This option adds the mark target, which allows marking frames by |
172 | setting the 'nfmark' value in the frame. | 158 | setting the 'nfmark' value in the frame. |
@@ -177,7 +163,6 @@ config BRIDGE_EBT_MARK_T | |||
177 | 163 | ||
178 | config BRIDGE_EBT_REDIRECT | 164 | config BRIDGE_EBT_REDIRECT |
179 | tristate "ebt: redirect target support" | 165 | tristate "ebt: redirect target support" |
180 | depends on BRIDGE_NF_EBTABLES | ||
181 | help | 166 | help |
182 | This option adds the MAC redirect target, which allows altering the MAC | 167 | This option adds the MAC redirect target, which allows altering the MAC |
183 | destination address of a frame to that of the device it arrived on. | 168 | destination address of a frame to that of the device it arrived on. |
@@ -186,7 +171,6 @@ config BRIDGE_EBT_REDIRECT | |||
186 | 171 | ||
187 | config BRIDGE_EBT_SNAT | 172 | config BRIDGE_EBT_SNAT |
188 | tristate "ebt: snat target support" | 173 | tristate "ebt: snat target support" |
189 | depends on BRIDGE_NF_EBTABLES | ||
190 | help | 174 | help |
191 | This option adds the MAC SNAT target, which allows altering the MAC | 175 | This option adds the MAC SNAT target, which allows altering the MAC |
192 | source address of frames. | 176 | source address of frames. |
@@ -197,7 +181,6 @@ config BRIDGE_EBT_SNAT | |||
197 | # | 181 | # |
198 | config BRIDGE_EBT_LOG | 182 | config BRIDGE_EBT_LOG |
199 | tristate "ebt: log support" | 183 | tristate "ebt: log support" |
200 | depends on BRIDGE_NF_EBTABLES | ||
201 | help | 184 | help |
202 | This option adds the log watcher, that you can use in any rule | 185 | This option adds the log watcher, that you can use in any rule |
203 | in any ebtables table. It records info about the frame header | 186 | in any ebtables table. It records info about the frame header |
@@ -207,7 +190,6 @@ config BRIDGE_EBT_LOG | |||
207 | 190 | ||
208 | config BRIDGE_EBT_ULOG | 191 | config BRIDGE_EBT_ULOG |
209 | tristate "ebt: ulog support (OBSOLETE)" | 192 | tristate "ebt: ulog support (OBSOLETE)" |
210 | depends on BRIDGE_NF_EBTABLES | ||
211 | help | 193 | help |
212 | This option enables the old bridge-specific "ebt_ulog" implementation | 194 | This option enables the old bridge-specific "ebt_ulog" implementation |
213 | which has been obsoleted by the new "nfnetlink_log" code (see | 195 | which has been obsoleted by the new "nfnetlink_log" code (see |
@@ -224,7 +206,6 @@ config BRIDGE_EBT_ULOG | |||
224 | 206 | ||
225 | config BRIDGE_EBT_NFLOG | 207 | config BRIDGE_EBT_NFLOG |
226 | tristate "ebt: nflog support" | 208 | tristate "ebt: nflog support" |
227 | depends on BRIDGE_NF_EBTABLES | ||
228 | help | 209 | help |
229 | This option enables the nflog watcher, which allows to LOG | 210 | This option enables the nflog watcher, which allows to LOG |
230 | messages through the netfilter logging API, which can use | 211 | messages through the netfilter logging API, which can use |
@@ -236,4 +217,4 @@ config BRIDGE_EBT_NFLOG | |||
236 | 217 | ||
237 | To compile it as a module, choose M here. If unsure, say N. | 218 | To compile it as a module, choose M here. If unsure, say N. |
238 | 219 | ||
239 | endmenu | 220 | endif # BRIDGE_NF_EBTABLES |