1 # This file is part of the OpenADK project. OpenADK is copyrighted
2 # material, please see the LICENCE file in the top-level directory.
4 config ADK_KERNEL_BRIDGE_NF_EBTABLES
5 tristate 'Ethernet Bridge tables support'
6 select ADK_KERNEL_BRIDGE_NETFILTER
9 ebtables is a general, extensible frame/packet identification
10 framework. Say 'Y' or 'M' here if you want to do Ethernet
11 filtering/NAT/brouting on the Ethernet bridge.
13 config ADK_KERNEL_BRIDGE_EBT_BROUTE
14 tristate "broute table support"
15 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
18 The ebtables broute table is used to define rules that decide between
19 bridging and routing frames, giving Linux the functionality of a
20 brouter. See the man page for ebtables(8) and examples on the ebtables
23 To compile it as a module, choose M here. If unsure, say N.
25 config ADK_KERNEL_BRIDGE_EBT_T_FILTER
26 tristate "filter table support"
27 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
30 The ebtables filter table is used to define frame filtering rules at
31 local input, forwarding and local output. See the man page for
34 To compile it as a module, choose M here. If unsure, say N.
36 config ADK_KERNEL_BRIDGE_EBT_T_NAT
37 tristate "nat table support"
38 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
41 The ebtables nat table is used to define rules that alter the MAC
42 source address (MAC SNAT) or the MAC destination address (MAC DNAT).
43 See the man page for ebtables(8).
48 config ADK_KERNEL_BRIDGE_EBT_802_3
49 tristate "802.3 filter support"
50 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
53 This option adds matching support for 802.3 Ethernet frames.
55 config ADK_KERNEL_BRIDGE_EBT_AMONG
56 tristate "among filter support"
57 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
60 This option adds the among match, which allows matching the MAC source
61 and/or destination address on a list of addresses. Optionally,
62 MAC/IP address pairs can be matched, f.e. for anti-spoofing rules.
64 config ADK_KERNEL_BRIDGE_EBT_ARP
65 tristate "ARP filter support"
66 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
69 This option adds the ARP match, which allows ARP and RARP header field
72 config ADK_KERNEL_BRIDGE_EBT_IP
73 tristate "IP filter support"
74 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
77 This option adds the IP match, which allows basic IP header field
80 config ADK_KERNEL_BRIDGE_EBT_IP6
81 tristate "IP6 filter support"
82 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES && ADK_KERNEL_IPV6
85 This option adds the IP6 match, which allows basic IPV6 header field
88 config ADK_KERNEL_BRIDGE_EBT_LIMIT
89 tristate "limit match support"
90 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
93 This option adds the limit match, which allows you to control
94 the rate at which a rule can be matched. This match is the
95 equivalent of the iptables limit match.
97 config ADK_KERNEL_BRIDGE_EBT_MARK
98 tristate "mark filter support"
99 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
102 This option adds the mark match, which allows matching frames based on
103 the 'nfmark' value in the frame. This can be set by the mark target.
104 This value is the same as the one used in the iptables mark match and
107 config ADK_KERNEL_BRIDGE_EBT_PKTTYPE
108 tristate "packet type filter support"
109 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
112 This option adds the packet type match, which allows matching on the
113 type of packet based on its Ethernet "class" (as determined by
114 the generic networking code): broadcast, multicast,
115 for this host alone or for another host.
117 config ADK_KERNEL_BRIDGE_EBT_STP
118 tristate "STP filter support"
119 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
122 This option adds the Spanning Tree Protocol match, which
123 allows STP header field filtering.
125 config ADK_KERNEL_BRIDGE_EBT_VLAN
126 tristate "802.1Q VLAN filter support"
127 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
130 This option adds the 802.1Q vlan match, which allows the filtering of
136 config ADK_KERNEL_BRIDGE_EBT_ARPREPLY
137 tristate "arp reply target support"
138 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
141 This option adds the arp reply target, which allows
142 automatically sending arp replies to arp requests.
144 config ADK_KERNEL_BRIDGE_EBT_DNAT
145 tristate "dnat target support"
146 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
149 This option adds the MAC DNAT target, which allows altering the MAC
150 destination address of frames.
152 config ADK_KERNEL_BRIDGE_EBT_MARK_T
153 tristate "mark target support"
154 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
157 This option adds the mark target, which allows marking frames by
158 setting the 'nfmark' value in the frame.
159 This value is the same as the one used in the iptables mark match and
162 config ADK_KERNEL_BRIDGE_EBT_REDIRECT
163 tristate "redirect target support"
164 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
167 This option adds the MAC redirect target, which allows altering the MAC
168 destination address of a frame to that of the device it arrived on.
170 config ADK_KERNEL_BRIDGE_EBT_SNAT
171 tristate "snat target support"
172 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
175 This option adds the MAC SNAT target, which allows altering the MAC
176 source address of frames.
181 config ADK_KERNEL_BRIDGE_EBT_LOG
182 tristate "log support"
183 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
186 This option adds the log watcher, that you can use in any rule
187 in any ebtables table. It records info about the frame header
190 config ADK_KERNEL_BRIDGE_EBT_ULOG
191 tristate "ulog support"
192 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
195 This option enables the old bridge-specific "ebt_ulog" implementation
196 which has been obsoleted by the new "nfnetlink_log" code (see
197 CONFIG_NETFILTER_NETLINK_LOG).
199 This option adds the ulog watcher, that you can use in any rule
200 in any ebtables table. The packet is passed to a userspace
201 logging daemon using netlink multicast sockets. This differs
202 from the log watcher in the sense that the complete packet is
203 sent to userspace instead of a descriptive text and that
204 netlink multicast sockets are used instead of the syslog.
206 config ADK_KERNEL_BRIDGE_EBT_NFLOG
207 tristate "nflog support"
208 depends on ADK_KERNEL_BRIDGE_NF_EBTABLES
211 This option enables the nflog watcher, which allows to LOG
212 messages through the netfilter logging API, which can use
213 either the old LOG target, the old ULOG target or nfnetlink_log
216 This option adds the nflog watcher, that you can use in any rule
217 in any ebtables table.