diff options
author | Jan Engelhardt <jengelh@medozas.de> | 2008-10-08 05:35:18 -0400 |
---|---|---|
committer | Patrick McHardy <kaber@trash.net> | 2008-10-08 05:35:18 -0400 |
commit | c2df73de246ae75705af8ceed4f385b261dea108 (patch) | |
tree | 9372e24e1569cf83f592ea93f899909c391ddad1 /net/ipv4 | |
parent | aba0d34800d7f56493b4d5548cc06498a4d69124 (diff) |
netfilter: xtables: use "if" blocks in Kconfig
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'net/ipv4')
-rw-r--r-- | net/ipv4/netfilter/Kconfig | 36 |
1 files changed, 16 insertions, 20 deletions
diff --git a/net/ipv4/netfilter/Kconfig b/net/ipv4/netfilter/Kconfig index 087b82906848..3816e1dc9295 100644 --- a/net/ipv4/netfilter/Kconfig +++ b/net/ipv4/netfilter/Kconfig | |||
@@ -61,10 +61,11 @@ config IP_NF_IPTABLES | |||
61 | 61 | ||
62 | To compile it as a module, choose M here. If unsure, say N. | 62 | To compile it as a module, choose M here. If unsure, say N. |
63 | 63 | ||
64 | if IP_NF_IPTABLES | ||
65 | |||
64 | # The matches. | 66 | # The matches. |
65 | config IP_NF_MATCH_ADDRTYPE | 67 | config IP_NF_MATCH_ADDRTYPE |
66 | tristate '"addrtype" address type match support' | 68 | tristate '"addrtype" address type match support' |
67 | depends on IP_NF_IPTABLES | ||
68 | depends on NETFILTER_ADVANCED | 69 | depends on NETFILTER_ADVANCED |
69 | help | 70 | help |
70 | This option allows you to match what routing thinks of an address, | 71 | This option allows you to match what routing thinks of an address, |
@@ -75,7 +76,6 @@ config IP_NF_MATCH_ADDRTYPE | |||
75 | 76 | ||
76 | config IP_NF_MATCH_AH | 77 | config IP_NF_MATCH_AH |
77 | tristate '"ah" match support' | 78 | tristate '"ah" match support' |
78 | depends on IP_NF_IPTABLES | ||
79 | depends on NETFILTER_ADVANCED | 79 | depends on NETFILTER_ADVANCED |
80 | help | 80 | help |
81 | This match extension allows you to match a range of SPIs | 81 | This match extension allows you to match a range of SPIs |
@@ -85,7 +85,6 @@ config IP_NF_MATCH_AH | |||
85 | 85 | ||
86 | config IP_NF_MATCH_ECN | 86 | config IP_NF_MATCH_ECN |
87 | tristate '"ecn" match support' | 87 | tristate '"ecn" match support' |
88 | depends on IP_NF_IPTABLES | ||
89 | depends on NETFILTER_ADVANCED | 88 | depends on NETFILTER_ADVANCED |
90 | help | 89 | help |
91 | This option adds a `ECN' match, which allows you to match against | 90 | This option adds a `ECN' match, which allows you to match against |
@@ -95,7 +94,6 @@ config IP_NF_MATCH_ECN | |||
95 | 94 | ||
96 | config IP_NF_MATCH_TTL | 95 | config IP_NF_MATCH_TTL |
97 | tristate '"ttl" match support' | 96 | tristate '"ttl" match support' |
98 | depends on IP_NF_IPTABLES | ||
99 | depends on NETFILTER_ADVANCED | 97 | depends on NETFILTER_ADVANCED |
100 | help | 98 | help |
101 | This adds CONFIG_IP_NF_MATCH_TTL option, which enabled the user | 99 | This adds CONFIG_IP_NF_MATCH_TTL option, which enabled the user |
@@ -106,7 +104,6 @@ config IP_NF_MATCH_TTL | |||
106 | # `filter', generic and specific targets | 104 | # `filter', generic and specific targets |
107 | config IP_NF_FILTER | 105 | config IP_NF_FILTER |
108 | tristate "Packet filtering" | 106 | tristate "Packet filtering" |
109 | depends on IP_NF_IPTABLES | ||
110 | default m if NETFILTER_ADVANCED=n | 107 | default m if NETFILTER_ADVANCED=n |
111 | help | 108 | help |
112 | Packet filtering defines a table `filter', which has a series of | 109 | Packet filtering defines a table `filter', which has a series of |
@@ -128,7 +125,6 @@ config IP_NF_TARGET_REJECT | |||
128 | 125 | ||
129 | config IP_NF_TARGET_LOG | 126 | config IP_NF_TARGET_LOG |
130 | tristate "LOG target support" | 127 | tristate "LOG target support" |
131 | depends on IP_NF_IPTABLES | ||
132 | default m if NETFILTER_ADVANCED=n | 128 | default m if NETFILTER_ADVANCED=n |
133 | help | 129 | help |
134 | This option adds a `LOG' target, which allows you to create rules in | 130 | This option adds a `LOG' target, which allows you to create rules in |
@@ -138,7 +134,6 @@ config IP_NF_TARGET_LOG | |||
138 | 134 | ||
139 | config IP_NF_TARGET_ULOG | 135 | config IP_NF_TARGET_ULOG |
140 | tristate "ULOG target support" | 136 | tristate "ULOG target support" |
141 | depends on IP_NF_IPTABLES | ||
142 | default m if NETFILTER_ADVANCED=n | 137 | default m if NETFILTER_ADVANCED=n |
143 | ---help--- | 138 | ---help--- |
144 | 139 | ||
@@ -159,7 +154,7 @@ config IP_NF_TARGET_ULOG | |||
159 | # NAT + specific targets: nf_conntrack | 154 | # NAT + specific targets: nf_conntrack |
160 | config NF_NAT | 155 | config NF_NAT |
161 | tristate "Full NAT" | 156 | tristate "Full NAT" |
162 | depends on IP_NF_IPTABLES && NF_CONNTRACK_IPV4 | 157 | depends on NF_CONNTRACK_IPV4 |
163 | default m if NETFILTER_ADVANCED=n | 158 | default m if NETFILTER_ADVANCED=n |
164 | help | 159 | help |
165 | The Full NAT option allows masquerading, port forwarding and other | 160 | The Full NAT option allows masquerading, port forwarding and other |
@@ -254,44 +249,43 @@ config NF_NAT_PROTO_SCTP | |||
254 | 249 | ||
255 | config NF_NAT_FTP | 250 | config NF_NAT_FTP |
256 | tristate | 251 | tristate |
257 | depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT | 252 | depends on NF_CONNTRACK && NF_NAT |
258 | default NF_NAT && NF_CONNTRACK_FTP | 253 | default NF_NAT && NF_CONNTRACK_FTP |
259 | 254 | ||
260 | config NF_NAT_IRC | 255 | config NF_NAT_IRC |
261 | tristate | 256 | tristate |
262 | depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT | 257 | depends on NF_CONNTRACK && NF_NAT |
263 | default NF_NAT && NF_CONNTRACK_IRC | 258 | default NF_NAT && NF_CONNTRACK_IRC |
264 | 259 | ||
265 | config NF_NAT_TFTP | 260 | config NF_NAT_TFTP |
266 | tristate | 261 | tristate |
267 | depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT | 262 | depends on NF_CONNTRACK && NF_NAT |
268 | default NF_NAT && NF_CONNTRACK_TFTP | 263 | default NF_NAT && NF_CONNTRACK_TFTP |
269 | 264 | ||
270 | config NF_NAT_AMANDA | 265 | config NF_NAT_AMANDA |
271 | tristate | 266 | tristate |
272 | depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT | 267 | depends on NF_CONNTRACK && NF_NAT |
273 | default NF_NAT && NF_CONNTRACK_AMANDA | 268 | default NF_NAT && NF_CONNTRACK_AMANDA |
274 | 269 | ||
275 | config NF_NAT_PPTP | 270 | config NF_NAT_PPTP |
276 | tristate | 271 | tristate |
277 | depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT | 272 | depends on NF_CONNTRACK && NF_NAT |
278 | default NF_NAT && NF_CONNTRACK_PPTP | 273 | default NF_NAT && NF_CONNTRACK_PPTP |
279 | select NF_NAT_PROTO_GRE | 274 | select NF_NAT_PROTO_GRE |
280 | 275 | ||
281 | config NF_NAT_H323 | 276 | config NF_NAT_H323 |
282 | tristate | 277 | tristate |
283 | depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT | 278 | depends on NF_CONNTRACK && NF_NAT |
284 | default NF_NAT && NF_CONNTRACK_H323 | 279 | default NF_NAT && NF_CONNTRACK_H323 |
285 | 280 | ||
286 | config NF_NAT_SIP | 281 | config NF_NAT_SIP |
287 | tristate | 282 | tristate |
288 | depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT | 283 | depends on NF_CONNTRACK && NF_NAT |
289 | default NF_NAT && NF_CONNTRACK_SIP | 284 | default NF_NAT && NF_CONNTRACK_SIP |
290 | 285 | ||
291 | # mangle + specific targets | 286 | # mangle + specific targets |
292 | config IP_NF_MANGLE | 287 | config IP_NF_MANGLE |
293 | tristate "Packet mangling" | 288 | tristate "Packet mangling" |
294 | depends on IP_NF_IPTABLES | ||
295 | default m if NETFILTER_ADVANCED=n | 289 | default m if NETFILTER_ADVANCED=n |
296 | help | 290 | help |
297 | This option adds a `mangle' table to iptables: see the man page for | 291 | This option adds a `mangle' table to iptables: see the man page for |
@@ -346,7 +340,6 @@ config IP_NF_TARGET_TTL | |||
346 | # raw + specific targets | 340 | # raw + specific targets |
347 | config IP_NF_RAW | 341 | config IP_NF_RAW |
348 | tristate 'raw table support (required for NOTRACK/TRACE)' | 342 | tristate 'raw table support (required for NOTRACK/TRACE)' |
349 | depends on IP_NF_IPTABLES | ||
350 | depends on NETFILTER_ADVANCED | 343 | depends on NETFILTER_ADVANCED |
351 | help | 344 | help |
352 | This option adds a `raw' table to iptables. This table is the very | 345 | This option adds a `raw' table to iptables. This table is the very |
@@ -359,7 +352,6 @@ config IP_NF_RAW | |||
359 | # security table for MAC policy | 352 | # security table for MAC policy |
360 | config IP_NF_SECURITY | 353 | config IP_NF_SECURITY |
361 | tristate "Security table" | 354 | tristate "Security table" |
362 | depends on IP_NF_IPTABLES | ||
363 | depends on SECURITY | 355 | depends on SECURITY |
364 | depends on NETFILTER_ADVANCED | 356 | depends on NETFILTER_ADVANCED |
365 | help | 357 | help |
@@ -368,6 +360,8 @@ config IP_NF_SECURITY | |||
368 | 360 | ||
369 | If unsure, say N. | 361 | If unsure, say N. |
370 | 362 | ||
363 | endif # IP_NF_IPTABLES | ||
364 | |||
371 | # ARP tables | 365 | # ARP tables |
372 | config IP_NF_ARPTABLES | 366 | config IP_NF_ARPTABLES |
373 | tristate "ARP tables support" | 367 | tristate "ARP tables support" |
@@ -380,9 +374,10 @@ config IP_NF_ARPTABLES | |||
380 | 374 | ||
381 | To compile it as a module, choose M here. If unsure, say N. | 375 | To compile it as a module, choose M here. If unsure, say N. |
382 | 376 | ||
377 | if IP_NF_ARPTABLES | ||
378 | |||
383 | config IP_NF_ARPFILTER | 379 | config IP_NF_ARPFILTER |
384 | tristate "ARP packet filtering" | 380 | tristate "ARP packet filtering" |
385 | depends on IP_NF_ARPTABLES | ||
386 | help | 381 | help |
387 | ARP packet filtering defines a table `filter', which has a series of | 382 | ARP packet filtering defines a table `filter', which has a series of |
388 | rules for simple ARP packet filtering at local input and | 383 | rules for simple ARP packet filtering at local input and |
@@ -393,10 +388,11 @@ config IP_NF_ARPFILTER | |||
393 | 388 | ||
394 | config IP_NF_ARP_MANGLE | 389 | config IP_NF_ARP_MANGLE |
395 | tristate "ARP payload mangling" | 390 | tristate "ARP payload mangling" |
396 | depends on IP_NF_ARPTABLES | ||
397 | help | 391 | help |
398 | Allows altering the ARP packet payload: source and destination | 392 | Allows altering the ARP packet payload: source and destination |
399 | hardware and network addresses. | 393 | hardware and network addresses. |
400 | 394 | ||
395 | endif # IP_NF_ARPTABLES | ||
396 | |||
401 | endmenu | 397 | endmenu |
402 | 398 | ||