netfilter: ebtables: make BRIDGE_NF_EBTABLES a menuconfig option (20f3c56f) · Commits · jan.koester / Linux

net/bridge/netfilter/Kconfig

+5 −24

Original line number	Original line	Diff line number	Diff line
	@@ -2,22 +2,21 @@
	# Bridge netfilter configuration		# Bridge netfilter configuration
	#		#

	menu "Bridge: Netfilter Configuration"		menuconfig BRIDGE_NF_EBTABLES
	depends on BRIDGE && BRIDGE_NETFILTER

	config BRIDGE_NF_EBTABLES
	tristate "Ethernet Bridge tables (ebtables) support"		tristate "Ethernet Bridge tables (ebtables) support"
	select NETFILTER_XTABLES		select NETFILTER_XTABLES
	help		help
	ebtables is a general, extensible frame/packet identification		ebtables is a general, extensible frame/packet identification
	framework. Say 'Y' or 'M' here if you want to do Ethernet		framework. Say 'Y' or 'M' here if you want to do Ethernet
	filtering/NAT/brouting on the Ethernet bridge.		filtering/NAT/brouting on the Ethernet bridge.

			if BRIDGE_NF_EBTABLES

	#		#
	# tables		# tables
	#		#
	config BRIDGE_EBT_BROUTE		config BRIDGE_EBT_BROUTE
	tristate "ebt: broute table support"		tristate "ebt: broute table support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	The ebtables broute table is used to define rules that decide between		The ebtables broute table is used to define rules that decide between
	bridging and routing frames, giving Linux the functionality of a		bridging and routing frames, giving Linux the functionality of a
	@@ -28,7 +27,6 @@ config BRIDGE_EBT_BROUTE

	config BRIDGE_EBT_T_FILTER		config BRIDGE_EBT_T_FILTER
	tristate "ebt: filter table support"		tristate "ebt: filter table support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	The ebtables filter table is used to define frame filtering rules at		The ebtables filter table is used to define frame filtering rules at
	local input, forwarding and local output. See the man page for		local input, forwarding and local output. See the man page for
	@@ -38,7 +36,6 @@ config BRIDGE_EBT_T_FILTER

	config BRIDGE_EBT_T_NAT		config BRIDGE_EBT_T_NAT
	tristate "ebt: nat table support"		tristate "ebt: nat table support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	The ebtables nat table is used to define rules that alter the MAC		The ebtables nat table is used to define rules that alter the MAC
	source address (MAC SNAT) or the MAC destination address (MAC DNAT).		source address (MAC SNAT) or the MAC destination address (MAC DNAT).
	@@ -50,7 +47,6 @@ config BRIDGE_EBT_T_NAT
	#		#
	config BRIDGE_EBT_802_3		config BRIDGE_EBT_802_3
	tristate "ebt: 802.3 filter support"		tristate "ebt: 802.3 filter support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option adds matching support for 802.3 Ethernet frames.		This option adds matching support for 802.3 Ethernet frames.

	@@ -58,7 +54,6 @@ config BRIDGE_EBT_802_3

	config BRIDGE_EBT_AMONG		config BRIDGE_EBT_AMONG
	tristate "ebt: among filter support"		tristate "ebt: among filter support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option adds the among match, which allows matching the MAC source		This option adds the among match, which allows matching the MAC source
	and/or destination address on a list of addresses. Optionally,		and/or destination address on a list of addresses. Optionally,
	@@ -68,7 +63,6 @@ config BRIDGE_EBT_AMONG

	config BRIDGE_EBT_ARP		config BRIDGE_EBT_ARP
	tristate "ebt: ARP filter support"		tristate "ebt: ARP filter support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option adds the ARP match, which allows ARP and RARP header field		This option adds the ARP match, which allows ARP and RARP header field
	filtering.		filtering.
	@@ -77,7 +71,6 @@ config BRIDGE_EBT_ARP

	config BRIDGE_EBT_IP		config BRIDGE_EBT_IP
	tristate "ebt: IP filter support"		tristate "ebt: IP filter support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option adds the IP match, which allows basic IP header field		This option adds the IP match, which allows basic IP header field
	filtering.		filtering.
	@@ -95,7 +88,6 @@ config BRIDGE_EBT_IP6

	config BRIDGE_EBT_LIMIT		config BRIDGE_EBT_LIMIT
	tristate "ebt: limit match support"		tristate "ebt: limit match support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option adds the limit match, which allows you to control		This option adds the limit match, which allows you to control
	the rate at which a rule can be matched. This match is the		the rate at which a rule can be matched. This match is the
	@@ -106,7 +98,6 @@ config BRIDGE_EBT_LIMIT

	config BRIDGE_EBT_MARK		config BRIDGE_EBT_MARK
	tristate "ebt: mark filter support"		tristate "ebt: mark filter support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option adds the mark match, which allows matching frames based on		This option adds the mark match, which allows matching frames based on
	the 'nfmark' value in the frame. This can be set by the mark target.		the 'nfmark' value in the frame. This can be set by the mark target.
	@@ -117,7 +108,6 @@ config BRIDGE_EBT_MARK

	config BRIDGE_EBT_PKTTYPE		config BRIDGE_EBT_PKTTYPE
	tristate "ebt: packet type filter support"		tristate "ebt: packet type filter support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option adds the packet type match, which allows matching on the		This option adds the packet type match, which allows matching on the
	type of packet based on its Ethernet "class" (as determined by		type of packet based on its Ethernet "class" (as determined by
	@@ -128,7 +118,6 @@ config BRIDGE_EBT_PKTTYPE

	config BRIDGE_EBT_STP		config BRIDGE_EBT_STP
	tristate "ebt: STP filter support"		tristate "ebt: STP filter support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option adds the Spanning Tree Protocol match, which		This option adds the Spanning Tree Protocol match, which
	allows STP header field filtering.		allows STP header field filtering.
	@@ -137,7 +126,6 @@ config BRIDGE_EBT_STP

	config BRIDGE_EBT_VLAN		config BRIDGE_EBT_VLAN
	tristate "ebt: 802.1Q VLAN filter support"		tristate "ebt: 802.1Q VLAN filter support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option adds the 802.1Q vlan match, which allows the filtering of		This option adds the 802.1Q vlan match, which allows the filtering of
	802.1Q vlan fields.		802.1Q vlan fields.
	@@ -157,7 +145,6 @@ config BRIDGE_EBT_ARPREPLY

	config BRIDGE_EBT_DNAT		config BRIDGE_EBT_DNAT
	tristate "ebt: dnat target support"		tristate "ebt: dnat target support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option adds the MAC DNAT target, which allows altering the MAC		This option adds the MAC DNAT target, which allows altering the MAC
	destination address of frames.		destination address of frames.
	@@ -166,7 +153,6 @@ config BRIDGE_EBT_DNAT

	config BRIDGE_EBT_MARK_T		config BRIDGE_EBT_MARK_T
	tristate "ebt: mark target support"		tristate "ebt: mark target support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option adds the mark target, which allows marking frames by		This option adds the mark target, which allows marking frames by
	setting the 'nfmark' value in the frame.		setting the 'nfmark' value in the frame.
	@@ -177,7 +163,6 @@ config BRIDGE_EBT_MARK_T

	config BRIDGE_EBT_REDIRECT		config BRIDGE_EBT_REDIRECT
	tristate "ebt: redirect target support"		tristate "ebt: redirect target support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option adds the MAC redirect target, which allows altering the MAC		This option adds the MAC redirect target, which allows altering the MAC
	destination address of a frame to that of the device it arrived on.		destination address of a frame to that of the device it arrived on.
	@@ -186,7 +171,6 @@ config BRIDGE_EBT_REDIRECT

	config BRIDGE_EBT_SNAT		config BRIDGE_EBT_SNAT
	tristate "ebt: snat target support"		tristate "ebt: snat target support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option adds the MAC SNAT target, which allows altering the MAC		This option adds the MAC SNAT target, which allows altering the MAC
	source address of frames.		source address of frames.
	@@ -197,7 +181,6 @@ config BRIDGE_EBT_SNAT
	#		#
	config BRIDGE_EBT_LOG		config BRIDGE_EBT_LOG
	tristate "ebt: log support"		tristate "ebt: log support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option adds the log watcher, that you can use in any rule		This option adds the log watcher, that you can use in any rule
	in any ebtables table. It records info about the frame header		in any ebtables table. It records info about the frame header
	@@ -207,7 +190,6 @@ config BRIDGE_EBT_LOG

	config BRIDGE_EBT_ULOG		config BRIDGE_EBT_ULOG
	tristate "ebt: ulog support (OBSOLETE)"		tristate "ebt: ulog support (OBSOLETE)"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option enables the old bridge-specific "ebt_ulog" implementation		This option enables the old bridge-specific "ebt_ulog" implementation
	which has been obsoleted by the new "nfnetlink_log" code (see		which has been obsoleted by the new "nfnetlink_log" code (see
	@@ -224,7 +206,6 @@ config BRIDGE_EBT_ULOG

	config BRIDGE_EBT_NFLOG		config BRIDGE_EBT_NFLOG
	tristate "ebt: nflog support"		tristate "ebt: nflog support"
	depends on BRIDGE_NF_EBTABLES
	help		help
	This option enables the nflog watcher, which allows to LOG		This option enables the nflog watcher, which allows to LOG
	messages through the netfilter logging API, which can use		messages through the netfilter logging API, which can use
	@@ -236,4 +217,4 @@ config BRIDGE_EBT_NFLOG

	To compile it as a module, choose M here. If unsure, say N.		To compile it as a module, choose M here. If unsure, say N.

	endmenu		endif # BRIDGE_NF_EBTABLES