diff options
Diffstat (limited to 'target/linux/config/Config.in.netfilter.ip4')
| -rw-r--r-- | target/linux/config/Config.in.netfilter.ip4 | 84 |
1 files changed, 43 insertions, 41 deletions
diff --git a/target/linux/config/Config.in.netfilter.ip4 b/target/linux/config/Config.in.netfilter.ip4 index d26e61b8e..a29c212cd 100644 --- a/target/linux/config/Config.in.netfilter.ip4 +++ b/target/linux/config/Config.in.netfilter.ip4 @@ -1,27 +1,11 @@ -config ADK_KERNEL_NF_CONNTRACK_IPV4 - prompt 'IPv4 connection tracking support (required for NAT)' +config ADK_KERNEL_NF_NAT tristate - select ADK_KERNEL_NF_CONNTRACK - select ADK_KERNEL_NETFILTER_XT_MATCH_CONNTRACK - default m if ADK_PACKAGE_IPTABLES - default n - help - Connection tracking keeps a record of what packets have passed - through your machine, in order to figure out how they are related - into connections. - -config ADK_KERNEL_IP_NF_CT_ACCT - bool 'Connection tracking flow accounting' - depends on ADK_KERNEL_NF_CONNTRACK - help - If this option is enabled, the connection tracking code will - keep per-flow packet and byte counters. - Those counters can be used for flow-based accounting or the - `connbytes' match. +config ADK_KERNEL_NF_NAT_IPV4 + tristate config ADK_KERNEL_IP_NF_IPTABLES - tristate 'IP tables support (required for filtering/masq/NAT)' + tristate 'IP tables support' select ADK_KERNEL_NETFILTER_XTABLES default m if ADK_PACKAGE_IPTABLES default n @@ -32,33 +16,56 @@ config ADK_KERNEL_IP_NF_IPTABLES either of those. config ADK_KERNEL_IP_NF_FILTER - tristate 'Packet Filtering' + tristate 'IP Packet Filtering table support' depends on ADK_KERNEL_IP_NF_IPTABLES default m if ADK_PACKAGE_IPTABLES default n help Packet filtering defines a table `filter', which has a series of rules for simple packet filtering at local input, forwarding and - local output. See the man page for iptables(8). + local output. -config ADK_KERNEL_NF_NAT - tristate +config ADK_KERNEL_IP_NF_NAT + tristate 'IP NAT table support' + select ADK_KERNEL_NETFILTER_XT_NAT + select ADK_KERNEL_NF_NAT + select ADK_KERNEL_NF_NAT_IPV4 + depends on ADK_KERNEL_IP_NF_IPTABLES + default m if ADK_PACKAGE_IPTABLES default n help - The Full NAT option allows masquerading, port forwarding and other - forms of full Network Address Port Translation. It is controlled by - the `nat' table in iptables: see the man page for iptables(8). -config ADK_KERNEL_NF_NAT_IPV4 - tristate 'Full NAT' - select ADK_KERNEL_NF_NAT +config ADK_KERNEL_IP_NF_MANGLE + tristate 'IP Packet mangling table support' depends on ADK_KERNEL_IP_NF_IPTABLES + default n + help + This option adds a `mangle' table to iptables: see the man page for + iptables(8). This table is used for various packet alterations + which can effect how the packet is routed. + +config ADK_KERNEL_NF_CONNTRACK_IPV4 + tristate 'IP connection tracking support (required for NAT)' + select ADK_KERNEL_NF_CONNTRACK + select ADK_KERNEL_NETFILTER_XT_MATCH_CONNTRACK default m if ADK_PACKAGE_IPTABLES default n help - The Full NAT option allows masquerading, port forwarding and other - forms of full Network Address Port Translation. It is controlled by - the `nat' table in iptables: see the man page for iptables(8). + Connection tracking keeps a record of what packets have passed + through your machine, in order to figure out how they are related + into connections. + +config ADK_KERNEL_IP_NF_CT_ACCT + bool 'Connection tracking flow accounting' + depends on ADK_KERNEL_NF_CONNTRACK + help + If this option is enabled, the connection tracking code will + keep per-flow packet and byte counters. + + Those counters can be used for flow-based accounting or the + `connbytes' match. + +menu "IP target support" config ADK_KERNEL_IP_NF_TARGET_MASQUERADE tristate 'MASQUERADE target support' @@ -83,7 +90,7 @@ config ADK_KERNEL_IP_NF_TARGET_REJECT than silently being dropped. config ADK_KERNEL_IP_NF_TARGET_ULOG - tristate 'ULOG target support (ipv4 only)' + tristate 'ULOG target support' depends on ADK_KERNEL_IP_NF_FILTER help This option enables the old IPv4-only "ipt_ULOG" implementation @@ -116,13 +123,6 @@ config ADK_KERNEL_IP_NF_TARGET_NETMAP address part intact. It is similar to Fast NAT, except that Netfilter's connection tracking doesn't work well with Fast NAT. -config ADK_KERNEL_IP_NF_MANGLE - tristate 'Packet mangling' - help - This option adds a `mangle' table to iptables: see the man page for - iptables(8). This table is used for various packet alterations - which can effect how the packet is routed. - config ADK_KERNEL_IP_NF_TARGET_ECN tristate 'ECN target support' depends on ADK_KERNEL_IP_NF_MANGLE @@ -134,3 +134,5 @@ config ADK_KERNEL_IP_NF_TARGET_ECN an IP packet. This is particularly useful, if you need to work around existing ECN blackholes on the internet, but don't want to disable ECN support in general. + +endmenu |