hc
2023-12-11 d2ccde1c8e90d38cee87a1b0309ad2827f3fd30d
kernel/net/bridge/netfilter/Kconfig
....@@ -1,3 +1,4 @@
1
+# SPDX-License-Identifier: GPL-2.0-only
12 #
23 # Bridge netfilter configuration
34 #
....@@ -5,9 +6,15 @@
56 menuconfig NF_TABLES_BRIDGE
67 depends on BRIDGE && NETFILTER && NF_TABLES
78 select NETFILTER_FAMILY_BRIDGE
8
- bool "Ethernet Bridge nf_tables support"
9
+ tristate "Ethernet Bridge nf_tables support"
910
1011 if NF_TABLES_BRIDGE
12
+
13
+config NFT_BRIDGE_META
14
+ tristate "Netfilter nf_table bridge meta support"
15
+ help
16
+ Add support for bridge dedicated meta key.
17
+
1118 config NFT_BRIDGE_REJECT
1219 tristate "Netfilter nf_tables bridge reject support"
1320 depends on NFT_REJECT && NFT_REJECT_IPV4 && NFT_REJECT_IPV6
....@@ -19,6 +26,20 @@
1926 select NF_LOG_COMMON
2027
2128 endif # NF_TABLES_BRIDGE
29
+
30
+config NF_CONNTRACK_BRIDGE
31
+ tristate "IPv4/IPV6 bridge connection tracking support"
32
+ depends on NF_CONNTRACK
33
+ default n
34
+ help
35
+ Connection tracking keeps a record of what packets have passed
36
+ through your machine, in order to figure out how they are related
37
+ into connections. This is used to enhance packet filtering via
38
+ stateful policies. Enable this if you want native tracking from
39
+ the bridge. This provides a replacement for the `br_netfilter'
40
+ infrastructure.
41
+
42
+ To compile it as a module, choose M here. If unsure, say N.
2243
2344 menuconfig BRIDGE_NF_EBTABLES
2445 tristate "Ethernet Bridge tables (ebtables) support"
....@@ -113,7 +134,7 @@
113134 equivalent of the iptables limit match.
114135
115136 If you want to compile it as a module, say M here and read
116
- <file:Documentation/kbuild/modules.txt>. If unsure, say `N'.
137
+ <file:Documentation/kbuild/modules.rst>. If unsure, say `N'.
117138
118139 config BRIDGE_EBT_MARK
119140 tristate "ebt: mark filter support"