aboutsummaryrefslogtreecommitdiffstats
path: root/net/bridge
diff options
context:
space:
mode:
authorJan Engelhardt <jengelh@medozas.de>2008-10-08 05:35:17 -0400
committerPatrick McHardy <kaber@trash.net>2008-10-08 05:35:17 -0400
commit20f3c56f4d7c76bcb66050f3364aa8da110f5bbd (patch)
tree944d02cf339772eaa33f095a0cba2edbe12df91d /net/bridge
parent2203eb47603b01b15a4b1d5b1c7886da96158e74 (diff)
netfilter: ebtables: make BRIDGE_NF_EBTABLES a menuconfig option
Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'net/bridge')
-rw-r--r--net/bridge/netfilter/Kconfig29
1 files changed, 5 insertions, 24 deletions
diff --git a/net/bridge/netfilter/Kconfig b/net/bridge/netfilter/Kconfig
index e7c197ffb2f4..366d3e9d51f8 100644
--- a/net/bridge/netfilter/Kconfig
+++ b/net/bridge/netfilter/Kconfig
@@ -2,22 +2,21 @@
2# Bridge netfilter configuration 2# Bridge netfilter configuration
3# 3#
4 4
5menu "Bridge: Netfilter Configuration" 5menuconfig BRIDGE_NF_EBTABLES
6 depends on BRIDGE && BRIDGE_NETFILTER
7
8config BRIDGE_NF_EBTABLES
9 tristate "Ethernet Bridge tables (ebtables) support" 6 tristate "Ethernet Bridge tables (ebtables) support"
10 select NETFILTER_XTABLES 7 select NETFILTER_XTABLES
11 help 8 help
12 ebtables is a general, extensible frame/packet identification 9 ebtables is a general, extensible frame/packet identification
13 framework. Say 'Y' or 'M' here if you want to do Ethernet 10 framework. Say 'Y' or 'M' here if you want to do Ethernet
14 filtering/NAT/brouting on the Ethernet bridge. 11 filtering/NAT/brouting on the Ethernet bridge.
12
13if BRIDGE_NF_EBTABLES
14
15# 15#
16# tables 16# tables
17# 17#
18config BRIDGE_EBT_BROUTE 18config BRIDGE_EBT_BROUTE
19 tristate "ebt: broute table support" 19 tristate "ebt: broute table support"
20 depends on BRIDGE_NF_EBTABLES
21 help 20 help
22 The ebtables broute table is used to define rules that decide between 21 The ebtables broute table is used to define rules that decide between
23 bridging and routing frames, giving Linux the functionality of a 22 bridging and routing frames, giving Linux the functionality of a
@@ -28,7 +27,6 @@ config BRIDGE_EBT_BROUTE
28 27
29config BRIDGE_EBT_T_FILTER 28config BRIDGE_EBT_T_FILTER
30 tristate "ebt: filter table support" 29 tristate "ebt: filter table support"
31 depends on BRIDGE_NF_EBTABLES
32 help 30 help
33 The ebtables filter table is used to define frame filtering rules at 31 The ebtables filter table is used to define frame filtering rules at
34 local input, forwarding and local output. See the man page for 32 local input, forwarding and local output. See the man page for
@@ -38,7 +36,6 @@ config BRIDGE_EBT_T_FILTER
38 36
39config BRIDGE_EBT_T_NAT 37config BRIDGE_EBT_T_NAT
40 tristate "ebt: nat table support" 38 tristate "ebt: nat table support"
41 depends on BRIDGE_NF_EBTABLES
42 help 39 help
43 The ebtables nat table is used to define rules that alter the MAC 40 The ebtables nat table is used to define rules that alter the MAC
44 source address (MAC SNAT) or the MAC destination address (MAC DNAT). 41 source address (MAC SNAT) or the MAC destination address (MAC DNAT).
@@ -50,7 +47,6 @@ config BRIDGE_EBT_T_NAT
50# 47#
51config BRIDGE_EBT_802_3 48config BRIDGE_EBT_802_3
52 tristate "ebt: 802.3 filter support" 49 tristate "ebt: 802.3 filter support"
53 depends on BRIDGE_NF_EBTABLES
54 help 50 help
55 This option adds matching support for 802.3 Ethernet frames. 51 This option adds matching support for 802.3 Ethernet frames.
56 52
@@ -58,7 +54,6 @@ config BRIDGE_EBT_802_3
58 54
59config BRIDGE_EBT_AMONG 55config BRIDGE_EBT_AMONG
60 tristate "ebt: among filter support" 56 tristate "ebt: among filter support"
61 depends on BRIDGE_NF_EBTABLES
62 help 57 help
63 This option adds the among match, which allows matching the MAC source 58 This option adds the among match, which allows matching the MAC source
64 and/or destination address on a list of addresses. Optionally, 59 and/or destination address on a list of addresses. Optionally,
@@ -68,7 +63,6 @@ config BRIDGE_EBT_AMONG
68 63
69config BRIDGE_EBT_ARP 64config BRIDGE_EBT_ARP
70 tristate "ebt: ARP filter support" 65 tristate "ebt: ARP filter support"
71 depends on BRIDGE_NF_EBTABLES
72 help 66 help
73 This option adds the ARP match, which allows ARP and RARP header field 67 This option adds the ARP match, which allows ARP and RARP header field
74 filtering. 68 filtering.
@@ -77,7 +71,6 @@ config BRIDGE_EBT_ARP
77 71
78config BRIDGE_EBT_IP 72config BRIDGE_EBT_IP
79 tristate "ebt: IP filter support" 73 tristate "ebt: IP filter support"
80 depends on BRIDGE_NF_EBTABLES
81 help 74 help
82 This option adds the IP match, which allows basic IP header field 75 This option adds the IP match, which allows basic IP header field
83 filtering. 76 filtering.
@@ -95,7 +88,6 @@ config BRIDGE_EBT_IP6
95 88
96config BRIDGE_EBT_LIMIT 89config BRIDGE_EBT_LIMIT
97 tristate "ebt: limit match support" 90 tristate "ebt: limit match support"
98 depends on BRIDGE_NF_EBTABLES
99 help 91 help
100 This option adds the limit match, which allows you to control 92 This option adds the limit match, which allows you to control
101 the rate at which a rule can be matched. This match is the 93 the rate at which a rule can be matched. This match is the
@@ -106,7 +98,6 @@ config BRIDGE_EBT_LIMIT
106 98
107config BRIDGE_EBT_MARK 99config BRIDGE_EBT_MARK
108 tristate "ebt: mark filter support" 100 tristate "ebt: mark filter support"
109 depends on BRIDGE_NF_EBTABLES
110 help 101 help
111 This option adds the mark match, which allows matching frames based on 102 This option adds the mark match, which allows matching frames based on
112 the 'nfmark' value in the frame. This can be set by the mark target. 103 the 'nfmark' value in the frame. This can be set by the mark target.
@@ -117,7 +108,6 @@ config BRIDGE_EBT_MARK
117 108
118config BRIDGE_EBT_PKTTYPE 109config BRIDGE_EBT_PKTTYPE
119 tristate "ebt: packet type filter support" 110 tristate "ebt: packet type filter support"
120 depends on BRIDGE_NF_EBTABLES
121 help 111 help
122 This option adds the packet type match, which allows matching on the 112 This option adds the packet type match, which allows matching on the
123 type of packet based on its Ethernet "class" (as determined by 113 type of packet based on its Ethernet "class" (as determined by
@@ -128,7 +118,6 @@ config BRIDGE_EBT_PKTTYPE
128 118
129config BRIDGE_EBT_STP 119config BRIDGE_EBT_STP
130 tristate "ebt: STP filter support" 120 tristate "ebt: STP filter support"
131 depends on BRIDGE_NF_EBTABLES
132 help 121 help
133 This option adds the Spanning Tree Protocol match, which 122 This option adds the Spanning Tree Protocol match, which
134 allows STP header field filtering. 123 allows STP header field filtering.
@@ -137,7 +126,6 @@ config BRIDGE_EBT_STP
137 126
138config BRIDGE_EBT_VLAN 127config BRIDGE_EBT_VLAN
139 tristate "ebt: 802.1Q VLAN filter support" 128 tristate "ebt: 802.1Q VLAN filter support"
140 depends on BRIDGE_NF_EBTABLES
141 help 129 help
142 This option adds the 802.1Q vlan match, which allows the filtering of 130 This option adds the 802.1Q vlan match, which allows the filtering of
143 802.1Q vlan fields. 131 802.1Q vlan fields.
@@ -157,7 +145,6 @@ config BRIDGE_EBT_ARPREPLY
157 145
158config BRIDGE_EBT_DNAT 146config BRIDGE_EBT_DNAT
159 tristate "ebt: dnat target support" 147 tristate "ebt: dnat target support"
160 depends on BRIDGE_NF_EBTABLES
161 help 148 help
162 This option adds the MAC DNAT target, which allows altering the MAC 149 This option adds the MAC DNAT target, which allows altering the MAC
163 destination address of frames. 150 destination address of frames.
@@ -166,7 +153,6 @@ config BRIDGE_EBT_DNAT
166 153
167config BRIDGE_EBT_MARK_T 154config BRIDGE_EBT_MARK_T
168 tristate "ebt: mark target support" 155 tristate "ebt: mark target support"
169 depends on BRIDGE_NF_EBTABLES
170 help 156 help
171 This option adds the mark target, which allows marking frames by 157 This option adds the mark target, which allows marking frames by
172 setting the 'nfmark' value in the frame. 158 setting the 'nfmark' value in the frame.
@@ -177,7 +163,6 @@ config BRIDGE_EBT_MARK_T
177 163
178config BRIDGE_EBT_REDIRECT 164config BRIDGE_EBT_REDIRECT
179 tristate "ebt: redirect target support" 165 tristate "ebt: redirect target support"
180 depends on BRIDGE_NF_EBTABLES
181 help 166 help
182 This option adds the MAC redirect target, which allows altering the MAC 167 This option adds the MAC redirect target, which allows altering the MAC
183 destination address of a frame to that of the device it arrived on. 168 destination address of a frame to that of the device it arrived on.
@@ -186,7 +171,6 @@ config BRIDGE_EBT_REDIRECT
186 171
187config BRIDGE_EBT_SNAT 172config BRIDGE_EBT_SNAT
188 tristate "ebt: snat target support" 173 tristate "ebt: snat target support"
189 depends on BRIDGE_NF_EBTABLES
190 help 174 help
191 This option adds the MAC SNAT target, which allows altering the MAC 175 This option adds the MAC SNAT target, which allows altering the MAC
192 source address of frames. 176 source address of frames.
@@ -197,7 +181,6 @@ config BRIDGE_EBT_SNAT
197# 181#
198config BRIDGE_EBT_LOG 182config BRIDGE_EBT_LOG
199 tristate "ebt: log support" 183 tristate "ebt: log support"
200 depends on BRIDGE_NF_EBTABLES
201 help 184 help
202 This option adds the log watcher, that you can use in any rule 185 This option adds the log watcher, that you can use in any rule
203 in any ebtables table. It records info about the frame header 186 in any ebtables table. It records info about the frame header
@@ -207,7 +190,6 @@ config BRIDGE_EBT_LOG
207 190
208config BRIDGE_EBT_ULOG 191config BRIDGE_EBT_ULOG
209 tristate "ebt: ulog support (OBSOLETE)" 192 tristate "ebt: ulog support (OBSOLETE)"
210 depends on BRIDGE_NF_EBTABLES
211 help 193 help
212 This option enables the old bridge-specific "ebt_ulog" implementation 194 This option enables the old bridge-specific "ebt_ulog" implementation
213 which has been obsoleted by the new "nfnetlink_log" code (see 195 which has been obsoleted by the new "nfnetlink_log" code (see
@@ -224,7 +206,6 @@ config BRIDGE_EBT_ULOG
224 206
225config BRIDGE_EBT_NFLOG 207config BRIDGE_EBT_NFLOG
226 tristate "ebt: nflog support" 208 tristate "ebt: nflog support"
227 depends on BRIDGE_NF_EBTABLES
228 help 209 help
229 This option enables the nflog watcher, which allows to LOG 210 This option enables the nflog watcher, which allows to LOG
230 messages through the netfilter logging API, which can use 211 messages through the netfilter logging API, which can use
@@ -236,4 +217,4 @@ config BRIDGE_EBT_NFLOG
236 217
237 To compile it as a module, choose M here. If unsure, say N. 218 To compile it as a module, choose M here. If unsure, say N.
238 219
239endmenu 220endif # BRIDGE_NF_EBTABLES