Skip to content

L
linux
Commit c2df73de authored by Jan Engelhardt's avatar Jan Engelhardt Committed by Patrick McHardy
Browse files
Options

netfilter: xtables: use "if" blocks in Kconfig 

Signed-off-by: default avatarJan Engelhardt <jengelh@medozas.de>
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
parent aba0d348
Expand all Show whitespace changes
Inline Side-by-side
Showing with 41 additions and 96 deletions
net/ipv4/netfilter/Kconfig
View file @ c2df73de
...@@ -61,10 +61,11 @@ config IP_NF_IPTABLES ...@@ -61,10 +61,11 @@ config IP_NF_IPTABLES
To compile it as a module, choose M here. If unsure, say N. To compile it as a module, choose M here. If unsure, say N.
if IP_NF_IPTABLES
# The matches. # The matches.
config IP_NF_MATCH_ADDRTYPE config IP_NF_MATCH_ADDRTYPE
tristate '"addrtype" address type match support' tristate '"addrtype" address type match support'
depends on IP_NF_IPTABLES
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
help help
This option allows you to match what routing thinks of an address, This option allows you to match what routing thinks of an address,
...@@ -75,7 +76,6 @@ config IP_NF_MATCH_ADDRTYPE ...@@ -75,7 +76,6 @@ config IP_NF_MATCH_ADDRTYPE
config IP_NF_MATCH_AH config IP_NF_MATCH_AH
tristate '"ah" match support' tristate '"ah" match support'
depends on IP_NF_IPTABLES
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
help help
This match extension allows you to match a range of SPIs This match extension allows you to match a range of SPIs
...@@ -85,7 +85,6 @@ config IP_NF_MATCH_AH ...@@ -85,7 +85,6 @@ config IP_NF_MATCH_AH
config IP_NF_MATCH_ECN config IP_NF_MATCH_ECN
tristate '"ecn" match support' tristate '"ecn" match support'
depends on IP_NF_IPTABLES
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
help help
This option adds a `ECN' match, which allows you to match against This option adds a `ECN' match, which allows you to match against
...@@ -95,7 +94,6 @@ config IP_NF_MATCH_ECN ...@@ -95,7 +94,6 @@ config IP_NF_MATCH_ECN
config IP_NF_MATCH_TTL config IP_NF_MATCH_TTL
tristate '"ttl" match support' tristate '"ttl" match support'
depends on IP_NF_IPTABLES
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
help help
This adds CONFIG_IP_NF_MATCH_TTL option, which enabled the user This adds CONFIG_IP_NF_MATCH_TTL option, which enabled the user
...@@ -106,7 +104,6 @@ config IP_NF_MATCH_TTL ...@@ -106,7 +104,6 @@ config IP_NF_MATCH_TTL
# `filter', generic and specific targets # `filter', generic and specific targets
config IP_NF_FILTER config IP_NF_FILTER
tristate "Packet filtering" tristate "Packet filtering"
depends on IP_NF_IPTABLES
default m if NETFILTER_ADVANCED=n default m if NETFILTER_ADVANCED=n
help help
Packet filtering defines a table `filter', which has a series of Packet filtering defines a table `filter', which has a series of
...@@ -128,7 +125,6 @@ config IP_NF_TARGET_REJECT ...@@ -128,7 +125,6 @@ config IP_NF_TARGET_REJECT
config IP_NF_TARGET_LOG config IP_NF_TARGET_LOG
tristate "LOG target support" tristate "LOG target support"
depends on IP_NF_IPTABLES
default m if NETFILTER_ADVANCED=n default m if NETFILTER_ADVANCED=n
help help
This option adds a `LOG' target, which allows you to create rules in This option adds a `LOG' target, which allows you to create rules in
...@@ -138,7 +134,6 @@ config IP_NF_TARGET_LOG ...@@ -138,7 +134,6 @@ config IP_NF_TARGET_LOG
config IP_NF_TARGET_ULOG config IP_NF_TARGET_ULOG
tristate "ULOG target support" tristate "ULOG target support"
depends on IP_NF_IPTABLES
default m if NETFILTER_ADVANCED=n default m if NETFILTER_ADVANCED=n
---help--- ---help---
...@@ -159,7 +154,7 @@ config IP_NF_TARGET_ULOG ...@@ -159,7 +154,7 @@ config IP_NF_TARGET_ULOG
# NAT + specific targets: nf_conntrack # NAT + specific targets: nf_conntrack
config NF_NAT config NF_NAT
tristate "Full NAT" tristate "Full NAT"
depends on IP_NF_IPTABLES && NF_CONNTRACK_IPV4 depends on NF_CONNTRACK_IPV4
default m if NETFILTER_ADVANCED=n default m if NETFILTER_ADVANCED=n
help help
The Full NAT option allows masquerading, port forwarding and other The Full NAT option allows masquerading, port forwarding and other
...@@ -254,44 +249,43 @@ config NF_NAT_PROTO_SCTP ...@@ -254,44 +249,43 @@ config NF_NAT_PROTO_SCTP
config NF_NAT_FTP config NF_NAT_FTP
tristate tristate
depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT depends on NF_CONNTRACK && NF_NAT
default NF_NAT && NF_CONNTRACK_FTP default NF_NAT && NF_CONNTRACK_FTP
config NF_NAT_IRC config NF_NAT_IRC
tristate tristate
depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT depends on NF_CONNTRACK && NF_NAT
default NF_NAT && NF_CONNTRACK_IRC default NF_NAT && NF_CONNTRACK_IRC
config NF_NAT_TFTP config NF_NAT_TFTP
tristate tristate
depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT depends on NF_CONNTRACK && NF_NAT
default NF_NAT && NF_CONNTRACK_TFTP default NF_NAT && NF_CONNTRACK_TFTP
config NF_NAT_AMANDA config NF_NAT_AMANDA
tristate tristate
depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT depends on NF_CONNTRACK && NF_NAT
default NF_NAT && NF_CONNTRACK_AMANDA default NF_NAT && NF_CONNTRACK_AMANDA
config NF_NAT_PPTP config NF_NAT_PPTP
tristate tristate
depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT depends on NF_CONNTRACK && NF_NAT
default NF_NAT && NF_CONNTRACK_PPTP default NF_NAT && NF_CONNTRACK_PPTP
select NF_NAT_PROTO_GRE select NF_NAT_PROTO_GRE
config NF_NAT_H323 config NF_NAT_H323
tristate tristate
depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT depends on NF_CONNTRACK && NF_NAT
default NF_NAT && NF_CONNTRACK_H323 default NF_NAT && NF_CONNTRACK_H323
config NF_NAT_SIP config NF_NAT_SIP
tristate tristate
depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT depends on NF_CONNTRACK && NF_NAT
default NF_NAT && NF_CONNTRACK_SIP default NF_NAT && NF_CONNTRACK_SIP
# mangle + specific targets # mangle + specific targets
config IP_NF_MANGLE config IP_NF_MANGLE
tristate "Packet mangling" tristate "Packet mangling"
depends on IP_NF_IPTABLES
default m if NETFILTER_ADVANCED=n default m if NETFILTER_ADVANCED=n
help help
This option adds a `mangle' table to iptables: see the man page for This option adds a `mangle' table to iptables: see the man page for
...@@ -346,7 +340,6 @@ config IP_NF_TARGET_TTL ...@@ -346,7 +340,6 @@ config IP_NF_TARGET_TTL
# raw + specific targets # raw + specific targets
config IP_NF_RAW config IP_NF_RAW
tristate 'raw table support (required for NOTRACK/TRACE)' tristate 'raw table support (required for NOTRACK/TRACE)'
depends on IP_NF_IPTABLES
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
help help
This option adds a `raw' table to iptables. This table is the very This option adds a `raw' table to iptables. This table is the very
...@@ -359,7 +352,6 @@ config IP_NF_RAW ...@@ -359,7 +352,6 @@ config IP_NF_RAW
# security table for MAC policy # security table for MAC policy
config IP_NF_SECURITY config IP_NF_SECURITY
tristate "Security table" tristate "Security table"
depends on IP_NF_IPTABLES
depends on SECURITY depends on SECURITY
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
help help
...@@ -368,6 +360,8 @@ config IP_NF_SECURITY ...@@ -368,6 +360,8 @@ config IP_NF_SECURITY
If unsure, say N. If unsure, say N.
endif # IP_NF_IPTABLES
# ARP tables # ARP tables
config IP_NF_ARPTABLES config IP_NF_ARPTABLES
tristate "ARP tables support" tristate "ARP tables support"
...@@ -380,9 +374,10 @@ config IP_NF_ARPTABLES ...@@ -380,9 +374,10 @@ config IP_NF_ARPTABLES
To compile it as a module, choose M here. If unsure, say N. To compile it as a module, choose M here. If unsure, say N.
if IP_NF_ARPTABLES
config IP_NF_ARPFILTER config IP_NF_ARPFILTER
tristate "ARP packet filtering" tristate "ARP packet filtering"
depends on IP_NF_ARPTABLES
help help
ARP packet filtering defines a table `filter', which has a series of ARP packet filtering defines a table `filter', which has a series of
rules for simple ARP packet filtering at local input and rules for simple ARP packet filtering at local input and
...@@ -393,10 +388,11 @@ config IP_NF_ARPFILTER ...@@ -393,10 +388,11 @@ config IP_NF_ARPFILTER
config IP_NF_ARP_MANGLE config IP_NF_ARP_MANGLE
tristate "ARP payload mangling" tristate "ARP payload mangling"
depends on IP_NF_ARPTABLES
help help
Allows altering the ARP packet payload: source and destination Allows altering the ARP packet payload: source and destination
hardware and network addresses. hardware and network addresses.
endif # IP_NF_ARPTABLES
endmenu endmenu
net/ipv6/netfilter/Kconfig
View file @ c2df73de
...@@ -55,10 +55,11 @@ config IP6_NF_IPTABLES ...@@ -55,10 +55,11 @@ config IP6_NF_IPTABLES
To compile it as a module, choose M here. If unsure, say N. To compile it as a module, choose M here. If unsure, say N.
if IP6_NF_IPTABLES
# The simple matches. # The simple matches.
config IP6_NF_MATCH_AH config IP6_NF_MATCH_AH
tristate '"ah" match support' tristate '"ah" match support'
depends on IP6_NF_IPTABLES
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
help help
This module allows one to match AH packets. This module allows one to match AH packets.
...@@ -67,7 +68,6 @@ config IP6_NF_MATCH_AH ...@@ -67,7 +68,6 @@ config IP6_NF_MATCH_AH
config IP6_NF_MATCH_EUI64 config IP6_NF_MATCH_EUI64
tristate '"eui64" address check' tristate '"eui64" address check'
depends on IP6_NF_IPTABLES
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
help help
This module performs checking on the IPv6 source address This module performs checking on the IPv6 source address
...@@ -78,7 +78,6 @@ config IP6_NF_MATCH_EUI64 ...@@ -78,7 +78,6 @@ config IP6_NF_MATCH_EUI64
config IP6_NF_MATCH_FRAG config IP6_NF_MATCH_FRAG
tristate '"frag" Fragmentation header match support' tristate '"frag" Fragmentation header match support'
depends on IP6_NF_IPTABLES
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
help help
frag matching allows you to match packets based on the fragmentation frag matching allows you to match packets based on the fragmentation
...@@ -88,7 +87,6 @@ config IP6_NF_MATCH_FRAG ...@@ -88,7 +87,6 @@ config IP6_NF_MATCH_FRAG
config IP6_NF_MATCH_OPTS config IP6_NF_MATCH_OPTS
tristate '"hbh" hop-by-hop and "dst" opts header match support' tristate '"hbh" hop-by-hop and "dst" opts header match support'
depends on IP6_NF_IPTABLES
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
help help
This allows one to match packets based on the hop-by-hop This allows one to match packets based on the hop-by-hop
...@@ -98,7 +96,6 @@ config IP6_NF_MATCH_OPTS ...@@ -98,7 +96,6 @@ config IP6_NF_MATCH_OPTS
config IP6_NF_MATCH_HL config IP6_NF_MATCH_HL
tristate '"hl" match support' tristate '"hl" match support'
depends on IP6_NF_IPTABLES
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
help help
HL matching allows you to match packets based on the hop HL matching allows you to match packets based on the hop
...@@ -108,7 +105,6 @@ config IP6_NF_MATCH_HL ...@@ -108,7 +105,6 @@ config IP6_NF_MATCH_HL
config IP6_NF_MATCH_IPV6HEADER config IP6_NF_MATCH_IPV6HEADER
tristate '"ipv6header" IPv6 Extension Headers Match' tristate '"ipv6header" IPv6 Extension Headers Match'
depends on IP6_NF_IPTABLES
default m if NETFILTER_ADVANCED=n default m if NETFILTER_ADVANCED=n
help help
This module allows one to match packets based upon This module allows one to match packets based upon
...@@ -118,7 +114,6 @@ config IP6_NF_MATCH_IPV6HEADER ...@@ -118,7 +114,6 @@ config IP6_NF_MATCH_IPV6HEADER
config IP6_NF_MATCH_MH config IP6_NF_MATCH_MH
tristate '"mh" match support' tristate '"mh" match support'
depends on IP6_NF_IPTABLES
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
help help
This module allows one to match MH packets. This module allows one to match MH packets.
...@@ -127,7 +122,6 @@ config IP6_NF_MATCH_MH ...@@ -127,7 +122,6 @@ config IP6_NF_MATCH_MH
config IP6_NF_MATCH_RT config IP6_NF_MATCH_RT
tristate '"rt" Routing header match support' tristate '"rt" Routing header match support'
depends on IP6_NF_IPTABLES
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
help help
rt matching allows you to match packets based on the routing rt matching allows you to match packets based on the routing
...@@ -138,7 +132,6 @@ config IP6_NF_MATCH_RT ...@@ -138,7 +132,6 @@ config IP6_NF_MATCH_RT
# The targets # The targets
config IP6_NF_TARGET_LOG config IP6_NF_TARGET_LOG
tristate "LOG target support" tristate "LOG target support"
depends on IP6_NF_IPTABLES
default m if NETFILTER_ADVANCED=n default m if NETFILTER_ADVANCED=n
help help
This option adds a `LOG' target, which allows you to create rules in This option adds a `LOG' target, which allows you to create rules in
...@@ -148,7 +141,6 @@ config IP6_NF_TARGET_LOG ...@@ -148,7 +141,6 @@ config IP6_NF_TARGET_LOG
config IP6_NF_FILTER config IP6_NF_FILTER
tristate "Packet filtering" tristate "Packet filtering"
depends on IP6_NF_IPTABLES
default m if NETFILTER_ADVANCED=n default m if NETFILTER_ADVANCED=n
help help
Packet filtering defines a table `filter', which has a series of Packet filtering defines a table `filter', which has a series of
...@@ -170,7 +162,6 @@ config IP6_NF_TARGET_REJECT ...@@ -170,7 +162,6 @@ config IP6_NF_TARGET_REJECT
config IP6_NF_MANGLE config IP6_NF_MANGLE
tristate "Packet mangling" tristate "Packet mangling"
depends on IP6_NF_IPTABLES
default m if NETFILTER_ADVANCED=n default m if NETFILTER_ADVANCED=n
help help
This option adds a `mangle' table to iptables: see the man page for This option adds a `mangle' table to iptables: see the man page for
...@@ -198,7 +189,6 @@ config IP6_NF_TARGET_HL ...@@ -198,7 +189,6 @@ config IP6_NF_TARGET_HL
config IP6_NF_RAW config IP6_NF_RAW
tristate 'raw table support (required for TRACE)' tristate 'raw table support (required for TRACE)'
depends on IP6_NF_IPTABLES
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
help help
This option adds a `raw' table to ip6tables. This table is the very This option adds a `raw' table to ip6tables. This table is the very
...@@ -211,7 +201,6 @@ config IP6_NF_RAW ...@@ -211,7 +201,6 @@ config IP6_NF_RAW
# security table for MAC policy # security table for MAC policy
config IP6_NF_SECURITY config IP6_NF_SECURITY
tristate "Security table" tristate "Security table"
depends on IP6_NF_IPTABLES
depends on SECURITY depends on SECURITY
depends on NETFILTER_ADVANCED depends on NETFILTER_ADVANCED
help help
...@@ -220,5 +209,7 @@ config IP6_NF_SECURITY ...@@ -220,5 +209,7 @@ config IP6_NF_SECURITY
If unsure, say N. If unsure, say N.
endif # IP6_NF_IPTABLES
endmenu endmenu
net/netfilter/Kconfig
View file @ c2df73de
This diff is collapsed.
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment
GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7