# # Bridge netfilter configuration # config BRIDGE_NF_EBTABLES tristate "Bridge: ebtables" depends on NETFILTER && BRIDGE config BRIDGE_EBT_BROUTE tristate "ebt: broute table support" depends on BRIDGE_NF_EBTABLES help The ebtables broute table is used to define rules that decide between bridging and routing frames, giving Linux the functionality of a brouter. See the man page for ebtables(8) and examples on the ebtables website. If you want to compile it as a module, say M here and read . If unsure, say `N'. config BRIDGE_EBT_T_FILTER tristate "ebt: filter table support" depends on BRIDGE_NF_EBTABLES help The ebtables filter table is used to define frame filtering rules at local input, forwarding and local output. See the man page for ebtables(8). If you want to compile it as a module, say M here and read . If unsure, say `N'. config BRIDGE_EBT_T_NAT tristate "ebt: nat table support" depends on BRIDGE_NF_EBTABLES help The ebtables nat table is used to define rules that alter the MAC source address (MAC SNAT) or the MAC destination address (MAC DNAT). See the man page for ebtables(8). If you want to compile it as a module, say M here and read . If unsure, say `N'. config BRIDGE_EBT_802_3 tristate "ebt: 802.3 filter support" depends on BRIDGE_NF_EBTABLES help This option adds matching support for 802.3 Ethernet frames. If you want to compile it as a module, say M here and read . If unsure, say `N'. config BRIDGE_EBT_ARP tristate "ebt: ARP filter support" depends on BRIDGE_NF_EBTABLES help This option adds the ARP match, which allows ARP and RARP header field filtering. If you want to compile it as a module, say M here and read . If unsure, say `N'. config BRIDGE_EBT_IP tristate "ebt: IP filter support" depends on BRIDGE_NF_EBTABLES help This option adds the IP match, which allows basic IP header field filtering. If you want to compile it as a module, say M here and read . If unsure, say `N'. config BRIDGE_EBT_LOG tristate "ebt: log support" depends on BRIDGE_NF_EBTABLES help This option adds the log target, that you can use in any rule in any ebtables table. It records the frame header to the syslog. If you want to compile it as a module, say M here and read . If unsure, say `N'. config BRIDGE_EBT_MARK tristate "ebt: mark filter support" depends on BRIDGE_NF_EBTABLES help This option adds the mark match, which allows matching frames based on the 'nfmark' value in the frame. This can be set by the mark target. This value is the same as the one used in the iptables mark match and target. If you want to compile it as a module, say M here and read . If unsure, say `N'. config BRIDGE_EBT_PKTTYPE tristate "ebt: packet type filter support" depends on BRIDGE_NF_EBTABLES help This option adds the packet type match, which allows matching on the type of packet based on its Ethernet "class" (as determined by the generic networking code): broadcast, multicast, for this host alone or for another host. If you want to compile it as a module, say M here and read . If unsure, say `N'. config BRIDGE_EBT_VLAN tristate "ebt: 802.1Q VLAN filter support" depends on BRIDGE_NF_EBTABLES help This option adds the 802.1Q vlan match, which allows the filtering of 802.1Q vlan fields. If you want to compile it as a module, say M here and read . If unsure, say `N'. config BRIDGE_EBT_DNAT tristate "ebt: dnat target support" depends on BRIDGE_NF_EBTABLES help This option adds the MAC DNAT target, which allows altering the MAC destination address of frames. If you want to compile it as a module, say M here and read . If unsure, say `N'. config BRIDGE_EBT_MARK_T tristate "ebt: mark target support" depends on BRIDGE_NF_EBTABLES help This option adds the mark target, which allows marking frames by setting the 'nfmark' value in the frame. This value is the same as the one used in the iptables mark match and target. If you want to compile it as a module, say M here and read . If unsure, say `N'. config BRIDGE_EBT_REDIRECT tristate "ebt: redirect target support" depends on BRIDGE_NF_EBTABLES help This option adds the MAC redirect target, which allows altering the MAC destination address of a frame to that of the device it arrived on. If you want to compile it as a module, say M here and read . If unsure, say `N'. config BRIDGE_EBT_SNAT tristate "ebt: snat target support" depends on BRIDGE_NF_EBTABLES help This option adds the MAC SNAT target, which allows altering the MAC source address of frames. If you want to compile it as a module, say M here and read . If unsure, say `N'.