precompile ppp active filter (reduces libpcap overhead to only a few k), enable by...

[openwrt.git] / openwrt / package / iptables / Config.in

diff --git a/openwrt/package/iptables/Config.in b/openwrt/package/iptables/Config.in
index f55b296..d89fcba 100644 (file)
--- a/openwrt/package/iptables/Config.in
+++ b/openwrt/package/iptables/Config.in
@@ -1,32 +1,118 @@
+menu "iptables.......................... IPv4 / IPv6 firewall administration"
+
+config BR2_COMPILE_IPTABLES
+       bool
+       default n
+       depends BR2_PACKAGE_IPTABLES || BR2_PACKAGE_IP6TABLES
+
 config BR2_PACKAGE_IPTABLES
-       tristate "iptables - IPv4 firewall administration tool"
+       prompt "iptables.......................... IPv4 firewall administration tool"
+       tristate
        default y
+       select BR2_COMPILE_IPTABLES
        help
-         Linux kernel (2.4+) firewall, NAT, and packet mangling tools.
+         IPv4 firewall, NAT, and packet mangling tools.
          
          http://www.iptables.org/
-         
 
-config BR2_PACKAGE_IPTABLES_UTILS
-       tristate "iptables - Save and restore utilities"
+config BR2_PACKAGE_IPTABLES_EXTRA
+       prompt   "iptables-extra.................. Extra Iptables extensions for IPv4 firewalling (meta-package)"
+       tristate
        default m if CONFIG_DEVEL
        depends BR2_PACKAGE_IPTABLES
+       select BR2_PACKAGE_KMOD_IPTABLES_EXTRA
+       select BR2_PACKAGE_IPTABLES_MOD_CONNTRACK
+       select BR2_PACKAGE_IPTABLES_MOD_EXTRA
+       select BR2_PACKAGE_IPTABLES_MOD_FILTER
+       select BR2_PACKAGE_IPTABLES_MOD_IPOPT
+       select BR2_PACKAGE_IPTABLES_MOD_IPSEC
+       select BR2_PACKAGE_IPTABLES_MOD_NAT
+       select BR2_PACKAGE_IPTABLES_MOD_ULOG
        help
-         iptables-save and iptables-restore
+         Extra Iptables extensions for IPv4 firewalling (meta-package)
 
-config BR2_PACKAGE_IPTABLES_EXTRA
-       tristate "extra modules - Extra modules not found elsewhere"
+config BR2_PACKAGE_IPTABLES_MOD_CONNTRACK
+       prompt   "iptables-mod-conntrack.......... Iptables extensions for connection tracking"
+       tristate
        default m if CONFIG_DEVEL
        depends BR2_PACKAGE_IPTABLES
+       select BR2_PACKAGE_KMOD_IPT_CONNTRACK
        help
-         Extra modules for iptables (kernel and user space)
+         Iptables (IPv4) extensions for connection tracking
 
-config BR2_PACKAGE_IP6TABLES
-       tristate "ip6tables - IPv6 firewall administration tool"
+config BR2_PACKAGE_IPTABLES_MOD_FILTER
+       prompt   "iptables-mod-filter............. Iptables extension for packet content inspection"
+       tristate
        default m if CONFIG_DEVEL
        depends BR2_PACKAGE_IPTABLES
-       select BR2_PACKAGE_KMOD_IPV6
+       select BR2_PACKAGE_KMOD_IPT_FILTER
        help
-         IPv6 firewalling
+         Iptables (IPv4) extension for packet content inspection
 
+config BR2_PACKAGE_IPTABLES_MOD_IPOPT
+       prompt   "iptables-mod-ipopt.............. Iptables extensions for matching/changing IP packet options"
+       tristate
+       default m if CONFIG_DEVEL
+       depends BR2_PACKAGE_IPTABLES
+       select BR2_PACKAGE_KMOD_IPT_IPOPT
+       help
+         Extra Iptables (IPv4) extensions for matching/changing IP packet options
+
+config BR2_PACKAGE_IPTABLES_MOD_IPSEC
+       prompt   "iptables-mod-ipsec.............. Iptables extensions for matching special IPsec packets"
+       tristate
+       default m if CONFIG_DEVEL
+       depends BR2_PACKAGE_IPTABLES
+       select BR2_PACKAGE_KMOD_IPT_IPSEC
+       help
+         Iptables (IPv4) extensions for matching special IPsec packets
+
+config BR2_PACKAGE_IPTABLES_MOD_NAT
+       prompt   "iptables-mod-nat................ Iptables extensions for different NAT targets"
+       tristate
+       default m if CONFIG_DEVEL
+       depends BR2_PACKAGE_IPTABLES
+       select BR2_PACKAGE_KMOD_IPT_NAT
+       help
+         Iptables (IPv4) extensions for different NAT targets
+
+config BR2_PACKAGE_IPTABLES_MOD_ULOG
+       prompt   "iptables-mod-ulog............... Iptables extensions for user-space packet logging"
+       tristate
+       default m if CONFIG_DEVEL
+       depends BR2_PACKAGE_IPTABLES
+       select BR2_PACKAGE_KMOD_IPT_ULOG
+       help
+         Iptables (IPv4) extensions for user-space packet logging
+
+config BR2_PACKAGE_IPTABLES_MOD_EXTRA
+       prompt   "iptables-mod-extra.............. Other extra Iptables extensions"
+       tristate
+       default m if CONFIG_DEVEL
+       depends BR2_PACKAGE_IPTABLES
+       select BR2_PACKAGE_KMOD_IPT_EXTRA
+       help
+         Other extra Iptables (IPv4) extensions
+
+config BR2_PACKAGE_IPTABLES_UTILS
+       prompt   "iptables-utils.................. Save and restore utilities"
+       tristate
+       default m if CONFIG_DEVEL
+       depends BR2_PACKAGE_IPTABLES
+       help
+         iptables-save and iptables-restore for Iptables (IPv4)
+         
+         http://www.iptables.org/
+
+config BR2_PACKAGE_IP6TABLES
+       prompt "ip6tables......................... IPv6 firewall administration tool"
+       tristate
+       default m if CONFIG_DEVEL
+       select BR2_COMPILE_IPTABLES
+       select BR2_PACKAGE_KMOD_IPV6
+       help
+         IPv6 firewall, NAT, and packet mangling tools.
+         
+         http://www.iptables.org/
 
+endmenu