2 # Bridge netfilter configuration
5 menuconfig NF_TABLES_BRIDGE
6 depends on BRIDGE && NETFILTER && NF_TABLES
7 tristate "Ethernet Bridge nf_tables support"
11 config NFT_BRIDGE_META
12 tristate "Netfilter nf_table bridge meta support"
15 Add support for bridge dedicated meta key.
18 tristate "Bridge packet logging"
20 endif # NF_TABLES_BRIDGE
22 menuconfig BRIDGE_NF_EBTABLES
23 tristate "Ethernet Bridge tables (ebtables) support"
24 depends on BRIDGE && NETFILTER && NETFILTER_XTABLES
26 ebtables is a general, extensible frame/packet identification
27 framework. Say 'Y' or 'M' here if you want to do Ethernet
28 filtering/NAT/brouting on the Ethernet bridge.
35 config BRIDGE_EBT_BROUTE
36 tristate "ebt: broute table support"
38 The ebtables broute table is used to define rules that decide between
39 bridging and routing frames, giving Linux the functionality of a
40 brouter. See the man page for ebtables(8) and examples on the ebtables
43 To compile it as a module, choose M here. If unsure, say N.
45 config BRIDGE_EBT_T_FILTER
46 tristate "ebt: filter table support"
48 The ebtables filter table is used to define frame filtering rules at
49 local input, forwarding and local output. See the man page for
52 To compile it as a module, choose M here. If unsure, say N.
54 config BRIDGE_EBT_T_NAT
55 tristate "ebt: nat table support"
57 The ebtables nat table is used to define rules that alter the MAC
58 source address (MAC SNAT) or the MAC destination address (MAC DNAT).
59 See the man page for ebtables(8).
61 To compile it as a module, choose M here. If unsure, say N.
65 config BRIDGE_EBT_802_3
66 tristate "ebt: 802.3 filter support"
68 This option adds matching support for 802.3 Ethernet frames.
70 To compile it as a module, choose M here. If unsure, say N.
72 config BRIDGE_EBT_AMONG
73 tristate "ebt: among filter support"
75 This option adds the among match, which allows matching the MAC source
76 and/or destination address on a list of addresses. Optionally,
77 MAC/IP address pairs can be matched, f.e. for anti-spoofing rules.
79 To compile it as a module, choose M here. If unsure, say N.
82 tristate "ebt: ARP filter support"
84 This option adds the ARP match, which allows ARP and RARP header field
87 To compile it as a module, choose M here. If unsure, say N.
90 tristate "ebt: IP filter support"
92 This option adds the IP match, which allows basic IP header field
95 To compile it as a module, choose M here. If unsure, say N.
98 tristate "ebt: IP6 filter support"
99 depends on BRIDGE_NF_EBTABLES && IPV6
101 This option adds the IP6 match, which allows basic IPV6 header field
104 To compile it as a module, choose M here. If unsure, say N.
106 config BRIDGE_EBT_LIMIT
107 tristate "ebt: limit match support"
109 This option adds the limit match, which allows you to control
110 the rate at which a rule can be matched. This match is the
111 equivalent of the iptables limit match.
113 If you want to compile it as a module, say M here and read
114 <file:Documentation/kbuild/modules.txt>. If unsure, say `N'.
116 config BRIDGE_EBT_MARK
117 tristate "ebt: mark filter support"
119 This option adds the mark match, which allows matching frames based on
120 the 'nfmark' value in the frame. This can be set by the mark target.
121 This value is the same as the one used in the iptables mark match and
124 To compile it as a module, choose M here. If unsure, say N.
126 config BRIDGE_EBT_PKTTYPE
127 tristate "ebt: packet type filter support"
129 This option adds the packet type match, which allows matching on the
130 type of packet based on its Ethernet "class" (as determined by
131 the generic networking code): broadcast, multicast,
132 for this host alone or for another host.
134 To compile it as a module, choose M here. If unsure, say N.
136 config BRIDGE_EBT_STP
137 tristate "ebt: STP filter support"
139 This option adds the Spanning Tree Protocol match, which
140 allows STP header field filtering.
142 To compile it as a module, choose M here. If unsure, say N.
144 config BRIDGE_EBT_VLAN
145 tristate "ebt: 802.1Q VLAN filter support"
147 This option adds the 802.1Q vlan match, which allows the filtering of
150 To compile it as a module, choose M here. If unsure, say N.
154 config BRIDGE_EBT_ARPREPLY
155 tristate "ebt: arp reply target support"
156 depends on BRIDGE_NF_EBTABLES && INET
158 This option adds the arp reply target, which allows
159 automatically sending arp replies to arp requests.
161 To compile it as a module, choose M here. If unsure, say N.
163 config BRIDGE_EBT_DNAT
164 tristate "ebt: dnat target support"
166 This option adds the MAC DNAT target, which allows altering the MAC
167 destination address of frames.
169 To compile it as a module, choose M here. If unsure, say N.
171 config BRIDGE_EBT_MARK_T
172 tristate "ebt: mark target support"
174 This option adds the mark target, which allows marking frames by
175 setting the 'nfmark' value in the frame.
176 This value is the same as the one used in the iptables mark match and
179 To compile it as a module, choose M here. If unsure, say N.
181 config BRIDGE_EBT_REDIRECT
182 tristate "ebt: redirect target support"
184 This option adds the MAC redirect target, which allows altering the MAC
185 destination address of a frame to that of the device it arrived on.
187 To compile it as a module, choose M here. If unsure, say N.
189 config BRIDGE_EBT_SNAT
190 tristate "ebt: snat target support"
192 This option adds the MAC SNAT target, which allows altering the MAC
193 source address of frames.
195 To compile it as a module, choose M here. If unsure, say N.
199 config BRIDGE_EBT_LOG
200 tristate "ebt: log support"
202 This option adds the log watcher, that you can use in any rule
203 in any ebtables table. It records info about the frame header
206 To compile it as a module, choose M here. If unsure, say N.
208 config BRIDGE_EBT_NFLOG
209 tristate "ebt: nflog support"
211 This option enables the nflog watcher, which allows to LOG
212 messages through the netfilter logging API, which can use
213 either the old LOG target, the old ULOG target or nfnetlink_log
216 This option adds the nflog watcher, that you can use in any rule
217 in any ebtables table.
219 To compile it as a module, choose M here. If unsure, say N.
221 endif # BRIDGE_NF_EBTABLES