|
@@ -1,6 +1,5 @@
|
|
|
config ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
- prompt 'Ethernet Bridge tables support'
|
|
|
- tristate
|
|
|
+ tristate 'Ethernet Bridge tables support'
|
|
|
select ADK_KERNEL_BRIDGE_NETFILTER
|
|
|
default n
|
|
|
help
|
|
@@ -9,8 +8,7 @@ config ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
filtering/NAT/brouting on the Ethernet bridge.
|
|
|
|
|
|
config ADK_KERNEL_BRIDGE_EBT_BROUTE
|
|
|
- prompt "broute table support"
|
|
|
- tristate
|
|
|
+ tristate "broute table support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
@@ -22,8 +20,7 @@ config ADK_KERNEL_BRIDGE_EBT_BROUTE
|
|
|
To compile it as a module, choose M here. If unsure, say N.
|
|
|
|
|
|
config ADK_KERNEL_BRIDGE_EBT_T_FILTER
|
|
|
- prompt "filter table support"
|
|
|
- tristate
|
|
|
+ tristate "filter table support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
@@ -34,8 +31,7 @@ config ADK_KERNEL_BRIDGE_EBT_T_FILTER
|
|
|
To compile it as a module, choose M here. If unsure, say N.
|
|
|
|
|
|
config ADK_KERNEL_BRIDGE_EBT_T_NAT
|
|
|
- prompt "nat table support"
|
|
|
- tristate
|
|
|
+ tristate "nat table support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
@@ -43,23 +39,18 @@ config ADK_KERNEL_BRIDGE_EBT_T_NAT
|
|
|
source address (MAC SNAT) or the MAC destination address (MAC DNAT).
|
|
|
See the man page for ebtables(8).
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
#
|
|
|
# matches
|
|
|
#
|
|
|
config ADK_KERNEL_BRIDGE_EBT_802_3
|
|
|
- prompt "802.3 filter support"
|
|
|
- tristate
|
|
|
+ tristate "802.3 filter support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
|
This option adds matching support for 802.3 Ethernet frames.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
-
|
|
|
config ADK_KERNEL_BRIDGE_EBT_AMONG
|
|
|
- prompt "among filter support"
|
|
|
- tristate
|
|
|
+ tristate "among filter support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
@@ -67,44 +58,32 @@ config ADK_KERNEL_BRIDGE_EBT_AMONG
|
|
|
and/or destination address on a list of addresses. Optionally,
|
|
|
MAC/IP address pairs can be matched, f.e. for anti-spoofing rules.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
-
|
|
|
config ADK_KERNEL_BRIDGE_EBT_ARP
|
|
|
- prompt "ARP filter support"
|
|
|
- tristate
|
|
|
+ tristate "ARP filter support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
|
This option adds the ARP match, which allows ARP and RARP header field
|
|
|
filtering.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
-
|
|
|
config ADK_KERNEL_BRIDGE_EBT_IP
|
|
|
- prompt "IP filter support"
|
|
|
- tristate
|
|
|
+ tristate "IP filter support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
|
This option adds the IP match, which allows basic IP header field
|
|
|
filtering.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
-
|
|
|
config ADK_KERNEL_BRIDGE_EBT_IP6
|
|
|
- prompt "IP6 filter support"
|
|
|
- tristate
|
|
|
+ tristate "IP6 filter support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES && ADK_KERNEL_IPV6
|
|
|
default n
|
|
|
help
|
|
|
This option adds the IP6 match, which allows basic IPV6 header field
|
|
|
filtering.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
-
|
|
|
config ADK_KERNEL_BRIDGE_EBT_LIMIT
|
|
|
- prompt "limit match support"
|
|
|
- tristate
|
|
|
+ tristate "limit match support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
@@ -112,12 +91,8 @@ config ADK_KERNEL_BRIDGE_EBT_LIMIT
|
|
|
the rate at which a rule can be matched. This match is the
|
|
|
equivalent of the iptables limit match.
|
|
|
|
|
|
- If you want to compile it as a module, say M here and read
|
|
|
- <file:Documentation/kbuild/modules.txt>. If unsure, say `N'.
|
|
|
-
|
|
|
config ADK_KERNEL_BRIDGE_EBT_MARK
|
|
|
- prompt "mark filter support"
|
|
|
- tristate
|
|
|
+ tristate "mark filter support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
@@ -126,11 +101,8 @@ config ADK_KERNEL_BRIDGE_EBT_MARK
|
|
|
This value is the same as the one used in the iptables mark match and
|
|
|
target.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
-
|
|
|
config ADK_KERNEL_BRIDGE_EBT_PKTTYPE
|
|
|
- prompt "packet type filter support"
|
|
|
- tristate
|
|
|
+ tristate "packet type filter support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
@@ -139,57 +111,43 @@ config ADK_KERNEL_BRIDGE_EBT_PKTTYPE
|
|
|
the generic networking code): broadcast, multicast,
|
|
|
for this host alone or for another host.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
-
|
|
|
config ADK_KERNEL_BRIDGE_EBT_STP
|
|
|
- prompt "STP filter support"
|
|
|
- tristate
|
|
|
+ tristate "STP filter support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
|
This option adds the Spanning Tree Protocol match, which
|
|
|
allows STP header field filtering.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
-
|
|
|
config ADK_KERNEL_BRIDGE_EBT_VLAN
|
|
|
- prompt "802.1Q VLAN filter support"
|
|
|
- tristate
|
|
|
+ tristate "802.1Q VLAN filter support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
|
This option adds the 802.1Q vlan match, which allows the filtering of
|
|
|
802.1Q vlan fields.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
#
|
|
|
# targets
|
|
|
#
|
|
|
config ADK_KERNEL_BRIDGE_EBT_ARPREPLY
|
|
|
- prompt "arp reply target support"
|
|
|
- tristate
|
|
|
+ tristate "arp reply target support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
|
This option adds the arp reply target, which allows
|
|
|
automatically sending arp replies to arp requests.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
-
|
|
|
config ADK_KERNEL_BRIDGE_EBT_DNAT
|
|
|
- prompt "dnat target support"
|
|
|
- tristate
|
|
|
+ tristate "dnat target support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
|
This option adds the MAC DNAT target, which allows altering the MAC
|
|
|
destination address of frames.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
-
|
|
|
config ADK_KERNEL_BRIDGE_EBT_MARK_T
|
|
|
- prompt "mark target support"
|
|
|
- tristate
|
|
|
+ tristate "mark target support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
@@ -198,35 +156,27 @@ config ADK_KERNEL_BRIDGE_EBT_MARK_T
|
|
|
This value is the same as the one used in the iptables mark match and
|
|
|
target.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
-
|
|
|
config ADK_KERNEL_BRIDGE_EBT_REDIRECT
|
|
|
- prompt "redirect target support"
|
|
|
- tristate
|
|
|
+ tristate "redirect target support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
|
This option adds the MAC redirect target, which allows altering the MAC
|
|
|
destination address of a frame to that of the device it arrived on.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
-
|
|
|
config ADK_KERNEL_BRIDGE_EBT_SNAT
|
|
|
- prompt "snat target support"
|
|
|
- tristate
|
|
|
+ tristate "snat target support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
|
This option adds the MAC SNAT target, which allows altering the MAC
|
|
|
source address of frames.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
#
|
|
|
# watchers
|
|
|
#
|
|
|
config ADK_KERNEL_BRIDGE_EBT_LOG
|
|
|
- prompt "log support"
|
|
|
- tristate
|
|
|
+ tristate "log support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
@@ -234,11 +184,8 @@ config ADK_KERNEL_BRIDGE_EBT_LOG
|
|
|
in any ebtables table. It records info about the frame header
|
|
|
to the syslog.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
-
|
|
|
config ADK_KERNEL_BRIDGE_EBT_ULOG
|
|
|
- prompt "ulog support"
|
|
|
- tristate
|
|
|
+ tristate "ulog support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
@@ -253,11 +200,8 @@ config ADK_KERNEL_BRIDGE_EBT_ULOG
|
|
|
sent to userspace instead of a descriptive text and that
|
|
|
netlink multicast sockets are used instead of the syslog.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
-
|
|
|
config ADK_KERNEL_BRIDGE_EBT_NFLOG
|
|
|
- prompt "nflog support"
|
|
|
- tristate
|
|
|
+ tristate "nflog support"
|
|
|
depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
|
|
|
default n
|
|
|
help
|
|
@@ -269,5 +213,3 @@ config ADK_KERNEL_BRIDGE_EBT_NFLOG
|
|
|
This option adds the nflog watcher, that you can use in any rule
|
|
|
in any ebtables table.
|
|
|
|
|
|
- To compile it as a module, choose M here. If unsure, say N.
|
|
|
-
|