blob: ba36c283d8372dfb3c890994c57c6bb0d46266b0 [file] [log] [blame]
Jozsef Kadlecsika7b4f982011-02-01 15:28:35 +01001menuconfig IP_SET
2 tristate "IP set support"
3 depends on INET && NETFILTER
Patrick McHardyc16e19c2011-02-10 10:13:07 +01004 depends on NETFILTER_NETLINK
Jozsef Kadlecsika7b4f982011-02-01 15:28:35 +01005 help
6 This option adds IP set support to the kernel.
7 In order to define and use the sets, you need the userspace utility
8 ipset(8). You can use the sets in netfilter via the "set" match
9 and "SET" target.
10
11 To compile it as a module, choose M here. If unsure, say N.
12
13if IP_SET
14
15config IP_SET_MAX
16 int "Maximum number of IP sets"
17 default 256
18 range 2 65534
19 depends on IP_SET
20 help
21 You can define here default value of the maximum number
22 of IP sets for the kernel.
23
24 The value can be overriden by the 'max_sets' module
25 parameter of the 'ip_set' module.
26
Jozsef Kadlecsik72205fc2011-02-01 15:33:17 +010027config IP_SET_BITMAP_IP
28 tristate "bitmap:ip set support"
29 depends on IP_SET
30 help
31 This option adds the bitmap:ip set type support, by which one
32 can store IPv4 addresses (or network addresse) from a range.
33
34 To compile it as a module, choose M here. If unsure, say N.
35
Jozsef Kadlecsikde760212011-02-01 15:35:12 +010036config IP_SET_BITMAP_IPMAC
37 tristate "bitmap:ip,mac set support"
38 depends on IP_SET
39 help
40 This option adds the bitmap:ip,mac set type support, by which one
41 can store IPv4 address and (source) MAC address pairs from a range.
42
43 To compile it as a module, choose M here. If unsure, say N.
44
Jozsef Kadlecsik54326192011-02-01 15:37:04 +010045config IP_SET_BITMAP_PORT
46 tristate "bitmap:port set support"
47 depends on IP_SET
48 help
49 This option adds the bitmap:port set type support, by which one
50 can store TCP/UDP port numbers from a range.
51
52 To compile it as a module, choose M here. If unsure, say N.
53
Jozsef Kadlecsik6c027882011-02-01 15:38:36 +010054config IP_SET_HASH_IP
55 tristate "hash:ip set support"
56 depends on IP_SET
57 help
58 This option adds the hash:ip set type support, by which one
59 can store arbitrary IPv4 or IPv6 addresses (or network addresses)
60 in a set.
61
62 To compile it as a module, choose M here. If unsure, say N.
63
Jozsef Kadlecsik07896ed2011-02-01 15:39:52 +010064config IP_SET_HASH_IPPORT
65 tristate "hash:ip,port set support"
66 depends on IP_SET
67 help
68 This option adds the hash:ip,port set type support, by which one
69 can store IPv4/IPv6 address and protocol/port pairs.
70
71 To compile it as a module, choose M here. If unsure, say N.
72
Jozsef Kadlecsik5663bc32011-02-01 15:41:26 +010073config IP_SET_HASH_IPPORTIP
74 tristate "hash:ip,port,ip set support"
75 depends on IP_SET
76 help
77 This option adds the hash:ip,port,ip set type support, by which
78 one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
79 address triples in a set.
80
81 To compile it as a module, choose M here. If unsure, say N.
82
Jozsef Kadlecsik41d22f72011-02-01 15:51:00 +010083config IP_SET_HASH_IPPORTNET
84 tristate "hash:ip,port,net set support"
85 depends on IP_SET
86 help
87 This option adds the hash:ip,port,net set type support, by which
88 one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
89 network address/prefix triples in a set.
90
91 To compile it as a module, choose M here. If unsure, say N.
92
Jozsef Kadlecsikb3837022011-02-01 15:52:54 +010093config IP_SET_HASH_NET
94 tristate "hash:net set support"
95 depends on IP_SET
96 help
97 This option adds the hash:net set type support, by which
98 one can store IPv4/IPv6 network address/prefix elements in a set.
99
100 To compile it as a module, choose M here. If unsure, say N.
101
Jozsef Kadlecsik21f45022011-02-01 15:53:55 +0100102config IP_SET_HASH_NETPORT
103 tristate "hash:net,port set support"
104 depends on IP_SET
105 help
106 This option adds the hash:net,port set type support, by which
107 one can store IPv4/IPv6 network address/prefix and
108 protocol/port pairs as elements in a set.
109
110 To compile it as a module, choose M here. If unsure, say N.
111
Jozsef Kadlecsike3853572011-06-16 19:00:48 +0200112config IP_SET_HASH_NETIFACE
113 tristate "hash:net,iface set support"
114 depends on IP_SET
115 help
116 This option adds the hash:net,iface set type support, by which
117 one can store IPv4/IPv6 network address/prefix and
118 interface name pairs as elements in a set.
119
120 To compile it as a module, choose M here. If unsure, say N.
121
Jozsef Kadlecsikf8308372011-02-01 15:54:59 +0100122config IP_SET_LIST_SET
123 tristate "list:set set support"
124 depends on IP_SET
125 help
126 This option adds the list:set set type support. In this
127 kind of set one can store the name of other sets and it forms
128 an ordered union of the member sets.
129
130 To compile it as a module, choose M here. If unsure, say N.
131
Jozsef Kadlecsika7b4f982011-02-01 15:28:35 +0100132endif # IP_SET