1
0

Config.in.netfilter.ebt 8.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229
  1. config ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  2. tristate 'Ethernet Bridge tables (ebtables) support'
  3. select ADK_KERNEL_BRIDGE_NETFILTER
  4. help
  5. ebtables is a general, extensible frame/packet identification
  6. framework. Say 'Y' or 'M' here if you want to do Ethernet
  7. filtering/NAT/brouting on the Ethernet bridge.
  8. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_BROUTE
  9. tristate "ebt: broute table support"
  10. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  11. help
  12. The ebtables broute table is used to define rules that decide between
  13. bridging and routing frames, giving Linux the functionality of a
  14. brouter. See the man page for ebtables(8) and examples on the ebtables
  15. website.
  16. To compile it as a module, choose M here. If unsure, say N.
  17. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_T_FILTER
  18. tristate "ebt: filter table support"
  19. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  20. help
  21. The ebtables filter table is used to define frame filtering rules at
  22. local input, forwarding and local output. See the man page for
  23. ebtables(8).
  24. To compile it as a module, choose M here. If unsure, say N.
  25. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_T_NAT
  26. tristate "ebt: nat table support"
  27. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  28. help
  29. The ebtables nat table is used to define rules that alter the MAC
  30. source address (MAC SNAT) or the MAC destination address (MAC DNAT).
  31. See the man page for ebtables(8).
  32. To compile it as a module, choose M here. If unsure, say N.
  33. #
  34. # matches
  35. #
  36. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_802_3
  37. tristate "ebt: 802.3 filter support"
  38. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  39. help
  40. This option adds matching support for 802.3 Ethernet frames.
  41. To compile it as a module, choose M here. If unsure, say N.
  42. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_AMONG
  43. tristate "ebt: among filter support"
  44. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  45. help
  46. This option adds the among match, which allows matching the MAC source
  47. and/or destination address on a list of addresses. Optionally,
  48. MAC/IP address pairs can be matched, f.e. for anti-spoofing rules.
  49. To compile it as a module, choose M here. If unsure, say N.
  50. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_ARP
  51. tristate "ebt: ARP filter support"
  52. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  53. help
  54. This option adds the ARP match, which allows ARP and RARP header field
  55. filtering.
  56. To compile it as a module, choose M here. If unsure, say N.
  57. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_IP
  58. tristate "ebt: IP filter support"
  59. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  60. help
  61. This option adds the IP match, which allows basic IP header field
  62. filtering.
  63. To compile it as a module, choose M here. If unsure, say N.
  64. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_IP6
  65. tristate "ebt: IP6 filter support"
  66. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES && ADK_KPACKAGE_KMOD_IPV6
  67. help
  68. This option adds the IP6 match, which allows basic IPV6 header field
  69. filtering.
  70. To compile it as a module, choose M here. If unsure, say N.
  71. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_LIMIT
  72. tristate "ebt: limit match support"
  73. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  74. help
  75. This option adds the limit match, which allows you to control
  76. the rate at which a rule can be matched. This match is the
  77. equivalent of the iptables limit match.
  78. If you want to compile it as a module, say M here and read
  79. <file:Documentation/kbuild/modules.txt>. If unsure, say `N'.
  80. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_MARK
  81. tristate "ebt: mark filter support"
  82. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  83. help
  84. This option adds the mark match, which allows matching frames based on
  85. the 'nfmark' value in the frame. This can be set by the mark target.
  86. This value is the same as the one used in the iptables mark match and
  87. target.
  88. To compile it as a module, choose M here. If unsure, say N.
  89. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_PKTTYPE
  90. tristate "ebt: packet type filter support"
  91. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  92. help
  93. This option adds the packet type match, which allows matching on the
  94. type of packet based on its Ethernet "class" (as determined by
  95. the generic networking code): broadcast, multicast,
  96. for this host alone or for another host.
  97. To compile it as a module, choose M here. If unsure, say N.
  98. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_STP
  99. tristate "ebt: STP filter support"
  100. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  101. help
  102. This option adds the Spanning Tree Protocol match, which
  103. allows STP header field filtering.
  104. To compile it as a module, choose M here. If unsure, say N.
  105. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_VLAN
  106. tristate "ebt: 802.1Q VLAN filter support"
  107. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  108. help
  109. This option adds the 802.1Q vlan match, which allows the filtering of
  110. 802.1Q vlan fields.
  111. To compile it as a module, choose M here. If unsure, say N.
  112. #
  113. # targets
  114. #
  115. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_ARPREPLY
  116. tristate "ebt: arp reply target support"
  117. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  118. help
  119. This option adds the arp reply target, which allows
  120. automatically sending arp replies to arp requests.
  121. To compile it as a module, choose M here. If unsure, say N.
  122. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_DNAT
  123. tristate "ebt: dnat target support"
  124. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  125. help
  126. This option adds the MAC DNAT target, which allows altering the MAC
  127. destination address of frames.
  128. To compile it as a module, choose M here. If unsure, say N.
  129. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_MARK_T
  130. tristate "ebt: mark target support"
  131. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  132. help
  133. This option adds the mark target, which allows marking frames by
  134. setting the 'nfmark' value in the frame.
  135. This value is the same as the one used in the iptables mark match and
  136. target.
  137. To compile it as a module, choose M here. If unsure, say N.
  138. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_REDIRECT
  139. tristate "ebt: redirect target support"
  140. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  141. help
  142. This option adds the MAC redirect target, which allows altering the MAC
  143. destination address of a frame to that of the device it arrived on.
  144. To compile it as a module, choose M here. If unsure, say N.
  145. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_SNAT
  146. tristate "ebt: snat target support"
  147. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  148. help
  149. This option adds the MAC SNAT target, which allows altering the MAC
  150. source address of frames.
  151. To compile it as a module, choose M here. If unsure, say N.
  152. #
  153. # watchers
  154. #
  155. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_LOG
  156. tristate "ebt: log support"
  157. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  158. help
  159. This option adds the log watcher, that you can use in any rule
  160. in any ebtables table. It records info about the frame header
  161. to the syslog.
  162. To compile it as a module, choose M here. If unsure, say N.
  163. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_ULOG
  164. tristate "ebt: ulog support (OBSOLETE)"
  165. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  166. help
  167. This option enables the old bridge-specific "ebt_ulog" implementation
  168. which has been obsoleted by the new "nfnetlink_log" code (see
  169. CONFIG_NETFILTER_NETLINK_LOG).
  170. This option adds the ulog watcher, that you can use in any rule
  171. in any ebtables table. The packet is passed to a userspace
  172. logging daemon using netlink multicast sockets. This differs
  173. from the log watcher in the sense that the complete packet is
  174. sent to userspace instead of a descriptive text and that
  175. netlink multicast sockets are used instead of the syslog.
  176. To compile it as a module, choose M here. If unsure, say N.
  177. config ADK_KPACKAGE_KMOD_BRIDGE_EBT_NFLOG
  178. tristate "ebt: nflog support"
  179. depends on ADK_KPACKAGE_KMOD_BRIDGE_NF_EBTABLES
  180. help
  181. This option enables the nflog watcher, which allows to LOG
  182. messages through the netfilter logging API, which can use
  183. either the old LOG target, the old ULOG target or nfnetlink_log
  184. as backend.
  185. This option adds the nflog watcher, that you can use in any rule
  186. in any ebtables table.
  187. To compile it as a module, choose M here. If unsure, say N.