.. | .. |
---|
| 1 | +# SPDX-License-Identifier: GPL-2.0-only |
---|
1 | 2 | # |
---|
2 | 3 | # Bridge netfilter configuration |
---|
3 | 4 | # |
---|
.. | .. |
---|
5 | 6 | menuconfig NF_TABLES_BRIDGE |
---|
6 | 7 | depends on BRIDGE && NETFILTER && NF_TABLES |
---|
7 | 8 | select NETFILTER_FAMILY_BRIDGE |
---|
8 | | - bool "Ethernet Bridge nf_tables support" |
---|
| 9 | + tristate "Ethernet Bridge nf_tables support" |
---|
9 | 10 | |
---|
10 | 11 | if NF_TABLES_BRIDGE |
---|
| 12 | + |
---|
| 13 | +config NFT_BRIDGE_META |
---|
| 14 | + tristate "Netfilter nf_table bridge meta support" |
---|
| 15 | + help |
---|
| 16 | + Add support for bridge dedicated meta key. |
---|
| 17 | + |
---|
11 | 18 | config NFT_BRIDGE_REJECT |
---|
12 | 19 | tristate "Netfilter nf_tables bridge reject support" |
---|
13 | 20 | depends on NFT_REJECT && NFT_REJECT_IPV4 && NFT_REJECT_IPV6 |
---|
.. | .. |
---|
19 | 26 | select NF_LOG_COMMON |
---|
20 | 27 | |
---|
21 | 28 | endif # NF_TABLES_BRIDGE |
---|
| 29 | + |
---|
| 30 | +config NF_CONNTRACK_BRIDGE |
---|
| 31 | + tristate "IPv4/IPV6 bridge connection tracking support" |
---|
| 32 | + depends on NF_CONNTRACK |
---|
| 33 | + default n |
---|
| 34 | + help |
---|
| 35 | + Connection tracking keeps a record of what packets have passed |
---|
| 36 | + through your machine, in order to figure out how they are related |
---|
| 37 | + into connections. This is used to enhance packet filtering via |
---|
| 38 | + stateful policies. Enable this if you want native tracking from |
---|
| 39 | + the bridge. This provides a replacement for the `br_netfilter' |
---|
| 40 | + infrastructure. |
---|
| 41 | + |
---|
| 42 | + To compile it as a module, choose M here. If unsure, say N. |
---|
22 | 43 | |
---|
23 | 44 | menuconfig BRIDGE_NF_EBTABLES |
---|
24 | 45 | tristate "Ethernet Bridge tables (ebtables) support" |
---|
.. | .. |
---|
113 | 134 | equivalent of the iptables limit match. |
---|
114 | 135 | |
---|
115 | 136 | If you want to compile it as a module, say M here and read |
---|
116 | | - <file:Documentation/kbuild/modules.txt>. If unsure, say `N'. |
---|
| 137 | + <file:Documentation/kbuild/modules.rst>. If unsure, say `N'. |
---|
117 | 138 | |
---|
118 | 139 | config BRIDGE_EBT_MARK |
---|
119 | 140 | tristate "ebt: mark filter support" |
---|