mirror of
https://github.com/torvalds/linux.git
synced 2024-11-11 22:51:42 +00:00
netfilter: ebtables: make BRIDGE_NF_EBTABLES a menuconfig option
Signed-off-by: Jan Engelhardt <jengelh@medozas.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
This commit is contained in:
parent
2203eb4760
commit
20f3c56f4d
@ -2,22 +2,21 @@
|
|||||||
# Bridge netfilter configuration
|
# Bridge netfilter configuration
|
||||||
#
|
#
|
||||||
|
|
||||||
menu "Bridge: Netfilter Configuration"
|
menuconfig BRIDGE_NF_EBTABLES
|
||||||
depends on BRIDGE && BRIDGE_NETFILTER
|
|
||||||
|
|
||||||
config BRIDGE_NF_EBTABLES
|
|
||||||
tristate "Ethernet Bridge tables (ebtables) support"
|
tristate "Ethernet Bridge tables (ebtables) support"
|
||||||
select NETFILTER_XTABLES
|
select NETFILTER_XTABLES
|
||||||
help
|
help
|
||||||
ebtables is a general, extensible frame/packet identification
|
ebtables is a general, extensible frame/packet identification
|
||||||
framework. Say 'Y' or 'M' here if you want to do Ethernet
|
framework. Say 'Y' or 'M' here if you want to do Ethernet
|
||||||
filtering/NAT/brouting on the Ethernet bridge.
|
filtering/NAT/brouting on the Ethernet bridge.
|
||||||
|
|
||||||
|
if BRIDGE_NF_EBTABLES
|
||||||
|
|
||||||
#
|
#
|
||||||
# tables
|
# tables
|
||||||
#
|
#
|
||||||
config BRIDGE_EBT_BROUTE
|
config BRIDGE_EBT_BROUTE
|
||||||
tristate "ebt: broute table support"
|
tristate "ebt: broute table support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
The ebtables broute table is used to define rules that decide between
|
The ebtables broute table is used to define rules that decide between
|
||||||
bridging and routing frames, giving Linux the functionality of a
|
bridging and routing frames, giving Linux the functionality of a
|
||||||
@ -28,7 +27,6 @@ config BRIDGE_EBT_BROUTE
|
|||||||
|
|
||||||
config BRIDGE_EBT_T_FILTER
|
config BRIDGE_EBT_T_FILTER
|
||||||
tristate "ebt: filter table support"
|
tristate "ebt: filter table support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
The ebtables filter table is used to define frame filtering rules at
|
The ebtables filter table is used to define frame filtering rules at
|
||||||
local input, forwarding and local output. See the man page for
|
local input, forwarding and local output. See the man page for
|
||||||
@ -38,7 +36,6 @@ config BRIDGE_EBT_T_FILTER
|
|||||||
|
|
||||||
config BRIDGE_EBT_T_NAT
|
config BRIDGE_EBT_T_NAT
|
||||||
tristate "ebt: nat table support"
|
tristate "ebt: nat table support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
The ebtables nat table is used to define rules that alter the MAC
|
The ebtables nat table is used to define rules that alter the MAC
|
||||||
source address (MAC SNAT) or the MAC destination address (MAC DNAT).
|
source address (MAC SNAT) or the MAC destination address (MAC DNAT).
|
||||||
@ -50,7 +47,6 @@ config BRIDGE_EBT_T_NAT
|
|||||||
#
|
#
|
||||||
config BRIDGE_EBT_802_3
|
config BRIDGE_EBT_802_3
|
||||||
tristate "ebt: 802.3 filter support"
|
tristate "ebt: 802.3 filter support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option adds matching support for 802.3 Ethernet frames.
|
This option adds matching support for 802.3 Ethernet frames.
|
||||||
|
|
||||||
@ -58,7 +54,6 @@ config BRIDGE_EBT_802_3
|
|||||||
|
|
||||||
config BRIDGE_EBT_AMONG
|
config BRIDGE_EBT_AMONG
|
||||||
tristate "ebt: among filter support"
|
tristate "ebt: among filter support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option adds the among match, which allows matching the MAC source
|
This option adds the among match, which allows matching the MAC source
|
||||||
and/or destination address on a list of addresses. Optionally,
|
and/or destination address on a list of addresses. Optionally,
|
||||||
@ -68,7 +63,6 @@ config BRIDGE_EBT_AMONG
|
|||||||
|
|
||||||
config BRIDGE_EBT_ARP
|
config BRIDGE_EBT_ARP
|
||||||
tristate "ebt: ARP filter support"
|
tristate "ebt: ARP filter support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option adds the ARP match, which allows ARP and RARP header field
|
This option adds the ARP match, which allows ARP and RARP header field
|
||||||
filtering.
|
filtering.
|
||||||
@ -77,7 +71,6 @@ config BRIDGE_EBT_ARP
|
|||||||
|
|
||||||
config BRIDGE_EBT_IP
|
config BRIDGE_EBT_IP
|
||||||
tristate "ebt: IP filter support"
|
tristate "ebt: IP filter support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option adds the IP match, which allows basic IP header field
|
This option adds the IP match, which allows basic IP header field
|
||||||
filtering.
|
filtering.
|
||||||
@ -95,7 +88,6 @@ config BRIDGE_EBT_IP6
|
|||||||
|
|
||||||
config BRIDGE_EBT_LIMIT
|
config BRIDGE_EBT_LIMIT
|
||||||
tristate "ebt: limit match support"
|
tristate "ebt: limit match support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option adds the limit match, which allows you to control
|
This option adds the limit match, which allows you to control
|
||||||
the rate at which a rule can be matched. This match is the
|
the rate at which a rule can be matched. This match is the
|
||||||
@ -106,7 +98,6 @@ config BRIDGE_EBT_LIMIT
|
|||||||
|
|
||||||
config BRIDGE_EBT_MARK
|
config BRIDGE_EBT_MARK
|
||||||
tristate "ebt: mark filter support"
|
tristate "ebt: mark filter support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option adds the mark match, which allows matching frames based on
|
This option adds the mark match, which allows matching frames based on
|
||||||
the 'nfmark' value in the frame. This can be set by the mark target.
|
the 'nfmark' value in the frame. This can be set by the mark target.
|
||||||
@ -117,7 +108,6 @@ config BRIDGE_EBT_MARK
|
|||||||
|
|
||||||
config BRIDGE_EBT_PKTTYPE
|
config BRIDGE_EBT_PKTTYPE
|
||||||
tristate "ebt: packet type filter support"
|
tristate "ebt: packet type filter support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option adds the packet type match, which allows matching on the
|
This option adds the packet type match, which allows matching on the
|
||||||
type of packet based on its Ethernet "class" (as determined by
|
type of packet based on its Ethernet "class" (as determined by
|
||||||
@ -128,7 +118,6 @@ config BRIDGE_EBT_PKTTYPE
|
|||||||
|
|
||||||
config BRIDGE_EBT_STP
|
config BRIDGE_EBT_STP
|
||||||
tristate "ebt: STP filter support"
|
tristate "ebt: STP filter support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option adds the Spanning Tree Protocol match, which
|
This option adds the Spanning Tree Protocol match, which
|
||||||
allows STP header field filtering.
|
allows STP header field filtering.
|
||||||
@ -137,7 +126,6 @@ config BRIDGE_EBT_STP
|
|||||||
|
|
||||||
config BRIDGE_EBT_VLAN
|
config BRIDGE_EBT_VLAN
|
||||||
tristate "ebt: 802.1Q VLAN filter support"
|
tristate "ebt: 802.1Q VLAN filter support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option adds the 802.1Q vlan match, which allows the filtering of
|
This option adds the 802.1Q vlan match, which allows the filtering of
|
||||||
802.1Q vlan fields.
|
802.1Q vlan fields.
|
||||||
@ -157,7 +145,6 @@ config BRIDGE_EBT_ARPREPLY
|
|||||||
|
|
||||||
config BRIDGE_EBT_DNAT
|
config BRIDGE_EBT_DNAT
|
||||||
tristate "ebt: dnat target support"
|
tristate "ebt: dnat target support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option adds the MAC DNAT target, which allows altering the MAC
|
This option adds the MAC DNAT target, which allows altering the MAC
|
||||||
destination address of frames.
|
destination address of frames.
|
||||||
@ -166,7 +153,6 @@ config BRIDGE_EBT_DNAT
|
|||||||
|
|
||||||
config BRIDGE_EBT_MARK_T
|
config BRIDGE_EBT_MARK_T
|
||||||
tristate "ebt: mark target support"
|
tristate "ebt: mark target support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option adds the mark target, which allows marking frames by
|
This option adds the mark target, which allows marking frames by
|
||||||
setting the 'nfmark' value in the frame.
|
setting the 'nfmark' value in the frame.
|
||||||
@ -177,7 +163,6 @@ config BRIDGE_EBT_MARK_T
|
|||||||
|
|
||||||
config BRIDGE_EBT_REDIRECT
|
config BRIDGE_EBT_REDIRECT
|
||||||
tristate "ebt: redirect target support"
|
tristate "ebt: redirect target support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option adds the MAC redirect target, which allows altering the MAC
|
This option adds the MAC redirect target, which allows altering the MAC
|
||||||
destination address of a frame to that of the device it arrived on.
|
destination address of a frame to that of the device it arrived on.
|
||||||
@ -186,7 +171,6 @@ config BRIDGE_EBT_REDIRECT
|
|||||||
|
|
||||||
config BRIDGE_EBT_SNAT
|
config BRIDGE_EBT_SNAT
|
||||||
tristate "ebt: snat target support"
|
tristate "ebt: snat target support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option adds the MAC SNAT target, which allows altering the MAC
|
This option adds the MAC SNAT target, which allows altering the MAC
|
||||||
source address of frames.
|
source address of frames.
|
||||||
@ -197,7 +181,6 @@ config BRIDGE_EBT_SNAT
|
|||||||
#
|
#
|
||||||
config BRIDGE_EBT_LOG
|
config BRIDGE_EBT_LOG
|
||||||
tristate "ebt: log support"
|
tristate "ebt: log support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option adds the log watcher, that you can use in any rule
|
This option adds the log watcher, that you can use in any rule
|
||||||
in any ebtables table. It records info about the frame header
|
in any ebtables table. It records info about the frame header
|
||||||
@ -207,7 +190,6 @@ config BRIDGE_EBT_LOG
|
|||||||
|
|
||||||
config BRIDGE_EBT_ULOG
|
config BRIDGE_EBT_ULOG
|
||||||
tristate "ebt: ulog support (OBSOLETE)"
|
tristate "ebt: ulog support (OBSOLETE)"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option enables the old bridge-specific "ebt_ulog" implementation
|
This option enables the old bridge-specific "ebt_ulog" implementation
|
||||||
which has been obsoleted by the new "nfnetlink_log" code (see
|
which has been obsoleted by the new "nfnetlink_log" code (see
|
||||||
@ -224,7 +206,6 @@ config BRIDGE_EBT_ULOG
|
|||||||
|
|
||||||
config BRIDGE_EBT_NFLOG
|
config BRIDGE_EBT_NFLOG
|
||||||
tristate "ebt: nflog support"
|
tristate "ebt: nflog support"
|
||||||
depends on BRIDGE_NF_EBTABLES
|
|
||||||
help
|
help
|
||||||
This option enables the nflog watcher, which allows to LOG
|
This option enables the nflog watcher, which allows to LOG
|
||||||
messages through the netfilter logging API, which can use
|
messages through the netfilter logging API, which can use
|
||||||
@ -236,4 +217,4 @@ config BRIDGE_EBT_NFLOG
|
|||||||
|
|
||||||
To compile it as a module, choose M here. If unsure, say N.
|
To compile it as a module, choose M here. If unsure, say N.
|
||||||
|
|
||||||
endmenu
|
endif # BRIDGE_NF_EBTABLES
|
||||||
|
Loading…
Reference in New Issue
Block a user