aboutsummaryrefslogtreecommitdiffstats
path: root/net/ipv4
diff options
context:
space:
mode:
Diffstat (limited to 'net/ipv4')
-rw-r--r--net/ipv4/netfilter/Kconfig78
1 files changed, 39 insertions, 39 deletions
diff --git a/net/ipv4/netfilter/Kconfig b/net/ipv4/netfilter/Kconfig
index 07757ac8d5d8..087b82906848 100644
--- a/net/ipv4/netfilter/Kconfig
+++ b/net/ipv4/netfilter/Kconfig
@@ -62,15 +62,16 @@ config IP_NF_IPTABLES
62 To compile it as a module, choose M here. If unsure, say N. 62 To compile it as a module, choose M here. If unsure, say N.
63 63
64# The matches. 64# The matches.
65config IP_NF_MATCH_ECN 65config IP_NF_MATCH_ADDRTYPE
66 tristate '"ecn" match support' 66 tristate '"addrtype" address type match support'
67 depends on IP_NF_IPTABLES 67 depends on IP_NF_IPTABLES
68 depends on NETFILTER_ADVANCED 68 depends on NETFILTER_ADVANCED
69 help 69 help
70 This option adds a `ECN' match, which allows you to match against 70 This option allows you to match what routing thinks of an address,
71 the IPv4 and TCP header ECN fields. 71 eg. UNICAST, LOCAL, BROADCAST, ...
72 72
73 To compile it as a module, choose M here. If unsure, say N. 73 If you want to compile it as a module, say M here and read
74 <file:Documentation/kbuild/modules.txt>. If unsure, say `N'.
74 75
75config IP_NF_MATCH_AH 76config IP_NF_MATCH_AH
76 tristate '"ah" match support' 77 tristate '"ah" match support'
@@ -82,26 +83,25 @@ config IP_NF_MATCH_AH
82 83
83 To compile it as a module, choose M here. If unsure, say N. 84 To compile it as a module, choose M here. If unsure, say N.
84 85
85config IP_NF_MATCH_TTL 86config IP_NF_MATCH_ECN
86 tristate '"ttl" match support' 87 tristate '"ecn" match support'
87 depends on IP_NF_IPTABLES 88 depends on IP_NF_IPTABLES
88 depends on NETFILTER_ADVANCED 89 depends on NETFILTER_ADVANCED
89 help 90 help
90 This adds CONFIG_IP_NF_MATCH_TTL option, which enabled the user 91 This option adds a `ECN' match, which allows you to match against
91 to match packets by their TTL value. 92 the IPv4 and TCP header ECN fields.
92 93
93 To compile it as a module, choose M here. If unsure, say N. 94 To compile it as a module, choose M here. If unsure, say N.
94 95
95config IP_NF_MATCH_ADDRTYPE 96config IP_NF_MATCH_TTL
96 tristate '"addrtype" address type match support' 97 tristate '"ttl" match support'
97 depends on IP_NF_IPTABLES 98 depends on IP_NF_IPTABLES
98 depends on NETFILTER_ADVANCED 99 depends on NETFILTER_ADVANCED
99 help 100 help
100 This option allows you to match what routing thinks of an address, 101 This adds CONFIG_IP_NF_MATCH_TTL option, which enabled the user
101 eg. UNICAST, LOCAL, BROADCAST, ... 102 to match packets by their TTL value.
102 103
103 If you want to compile it as a module, say M here and read 104 To compile it as a module, choose M here. If unsure, say N.
104 <file:Documentation/kbuild/modules.txt>. If unsure, say `N'.
105 105
106# `filter', generic and specific targets 106# `filter', generic and specific targets
107config IP_NF_FILTER 107config IP_NF_FILTER
@@ -186,26 +186,26 @@ config IP_NF_TARGET_MASQUERADE
186 186
187 To compile it as a module, choose M here. If unsure, say N. 187 To compile it as a module, choose M here. If unsure, say N.
188 188
189config IP_NF_TARGET_REDIRECT 189config IP_NF_TARGET_NETMAP
190 tristate "REDIRECT target support" 190 tristate "NETMAP target support"
191 depends on NF_NAT 191 depends on NF_NAT
192 depends on NETFILTER_ADVANCED 192 depends on NETFILTER_ADVANCED
193 help 193 help
194 REDIRECT is a special case of NAT: all incoming connections are 194 NETMAP is an implementation of static 1:1 NAT mapping of network
195 mapped onto the incoming interface's address, causing the packets to 195 addresses. It maps the network address part, while keeping the host
196 come to the local machine instead of passing through. This is 196 address part intact.
197 useful for transparent proxies.
198 197
199 To compile it as a module, choose M here. If unsure, say N. 198 To compile it as a module, choose M here. If unsure, say N.
200 199
201config IP_NF_TARGET_NETMAP 200config IP_NF_TARGET_REDIRECT
202 tristate "NETMAP target support" 201 tristate "REDIRECT target support"
203 depends on NF_NAT 202 depends on NF_NAT
204 depends on NETFILTER_ADVANCED 203 depends on NETFILTER_ADVANCED
205 help 204 help
206 NETMAP is an implementation of static 1:1 NAT mapping of network 205 REDIRECT is a special case of NAT: all incoming connections are
207 addresses. It maps the network address part, while keeping the host 206 mapped onto the incoming interface's address, causing the packets to
208 address part intact. 207 come to the local machine instead of passing through. This is
208 useful for transparent proxies.
209 209
210 To compile it as a module, choose M here. If unsure, say N. 210 To compile it as a module, choose M here. If unsure, say N.
211 211
@@ -300,6 +300,19 @@ config IP_NF_MANGLE
300 300
301 To compile it as a module, choose M here. If unsure, say N. 301 To compile it as a module, choose M here. If unsure, say N.
302 302
303config IP_NF_TARGET_CLUSTERIP
304 tristate "CLUSTERIP target support (EXPERIMENTAL)"
305 depends on IP_NF_MANGLE && EXPERIMENTAL
306 depends on NF_CONNTRACK_IPV4
307 depends on NETFILTER_ADVANCED
308 select NF_CONNTRACK_MARK
309 help
310 The CLUSTERIP target allows you to build load-balancing clusters of
311 network servers without having a dedicated load-balancing
312 router/server/switch.
313
314 To compile it as a module, choose M here. If unsure, say N.
315
303config IP_NF_TARGET_ECN 316config IP_NF_TARGET_ECN
304 tristate "ECN target support" 317 tristate "ECN target support"
305 depends on IP_NF_MANGLE 318 depends on IP_NF_MANGLE
@@ -330,19 +343,6 @@ config IP_NF_TARGET_TTL
330 343
331 To compile it as a module, choose M here. If unsure, say N. 344 To compile it as a module, choose M here. If unsure, say N.
332 345
333config IP_NF_TARGET_CLUSTERIP
334 tristate "CLUSTERIP target support (EXPERIMENTAL)"
335 depends on IP_NF_MANGLE && EXPERIMENTAL
336 depends on NF_CONNTRACK_IPV4
337 depends on NETFILTER_ADVANCED
338 select NF_CONNTRACK_MARK
339 help
340 The CLUSTERIP target allows you to build load-balancing clusters of
341 network servers without having a dedicated load-balancing
342 router/server/switch.
343
344 To compile it as a module, choose M here. If unsure, say N.
345
346# raw + specific targets 346# raw + specific targets
347config IP_NF_RAW 347config IP_NF_RAW
348 tristate 'raw table support (required for NOTRACK/TRACE)' 348 tristate 'raw table support (required for NOTRACK/TRACE)'