tjh.dev
Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel
os
linux
1menuconfig IP_SET
2 tristate "IP set support"
3 depends on INET && NETFILTER
4 select NETFILTER_NETLINK
5 help
6 This option adds IP set support to the kernel.
7 In order to define and use the sets, you need the userspace utility
8 ipset(8). You can use the sets in netfilter via the "set" match
9 and "SET" target.
10
11 To compile it as a module, choose M here. If unsure, say N.
12
13if IP_SET
14
15config IP_SET_MAX
16 int "Maximum number of IP sets"
17 default 256
18 range 2 65534
19 depends on IP_SET
20 help
21 You can define here default value of the maximum number
22 of IP sets for the kernel.
23
24 The value can be overridden by the 'max_sets' module
25 parameter of the 'ip_set' module.
26
27config IP_SET_BITMAP_IP
28 tristate "bitmap:ip set support"
29 depends on IP_SET
30 help
31 This option adds the bitmap:ip set type support, by which one
32 can store IPv4 addresses (or network addresse) from a range.
33
34 To compile it as a module, choose M here. If unsure, say N.
35
36config IP_SET_BITMAP_IPMAC
37 tristate "bitmap:ip,mac set support"
38 depends on IP_SET
39 help
40 This option adds the bitmap:ip,mac set type support, by which one
41 can store IPv4 address and (source) MAC address pairs from a range.
42
43 To compile it as a module, choose M here. If unsure, say N.
44
45config IP_SET_BITMAP_PORT
46 tristate "bitmap:port set support"
47 depends on IP_SET
48 help
49 This option adds the bitmap:port set type support, by which one
50 can store TCP/UDP port numbers from a range.
51
52 To compile it as a module, choose M here. If unsure, say N.
53
54config IP_SET_HASH_IP
55 tristate "hash:ip set support"
56 depends on IP_SET
57 help
58 This option adds the hash:ip set type support, by which one
59 can store arbitrary IPv4 or IPv6 addresses (or network addresses)
60 in a set.
61
62 To compile it as a module, choose M here. If unsure, say N.
63
64config IP_SET_HASH_IPMARK
65 tristate "hash:ip,mark set support"
66 depends on IP_SET
67 help
68 This option adds the hash:ip,mark set type support, by which one
69 can store IPv4/IPv6 address and mark pairs.
70
71 To compile it as a module, choose M here. If unsure, say N.
72
73config IP_SET_HASH_IPPORT
74 tristate "hash:ip,port set support"
75 depends on IP_SET
76 help
77 This option adds the hash:ip,port set type support, by which one
78 can store IPv4/IPv6 address and protocol/port pairs.
79
80 To compile it as a module, choose M here. If unsure, say N.
81
82config IP_SET_HASH_IPPORTIP
83 tristate "hash:ip,port,ip set support"
84 depends on IP_SET
85 help
86 This option adds the hash:ip,port,ip set type support, by which
87 one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
88 address triples in a set.
89
90 To compile it as a module, choose M here. If unsure, say N.
91
92config IP_SET_HASH_IPPORTNET
93 tristate "hash:ip,port,net set support"
94 depends on IP_SET
95 help
96 This option adds the hash:ip,port,net set type support, by which
97 one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
98 network address/prefix triples in a set.
99
100 To compile it as a module, choose M here. If unsure, say N.
101
102config IP_SET_HASH_NETPORTNET
103 tristate "hash:net,port,net set support"
104 depends on IP_SET
105 help
106 This option adds the hash:net,port,net set type support, by which
107 one can store two IPv4/IPv6 subnets, and a protocol/port in a set.
108
109 To compile it as a module, choose M here. If unsure, say N.
110
111config IP_SET_HASH_NET
112 tristate "hash:net set support"
113 depends on IP_SET
114 help
115 This option adds the hash:net set type support, by which
116 one can store IPv4/IPv6 network address/prefix elements in a set.
117
118 To compile it as a module, choose M here. If unsure, say N.
119
120config IP_SET_HASH_NETNET
121 tristate "hash:net,net set support"
122 depends on IP_SET
123 help
124 This option adds the hash:net,net set type support, by which
125 one can store IPv4/IPv6 network address/prefix pairs in a set.
126
127 To compile it as a module, choose M here. If unsure, say N.
128
129config IP_SET_HASH_NETPORT
130 tristate "hash:net,port set support"
131 depends on IP_SET
132 help
133 This option adds the hash:net,port set type support, by which
134 one can store IPv4/IPv6 network address/prefix and
135 protocol/port pairs as elements in a set.
136
137 To compile it as a module, choose M here. If unsure, say N.
138
139config IP_SET_HASH_NETIFACE
140 tristate "hash:net,iface set support"
141 depends on IP_SET
142 help
143 This option adds the hash:net,iface set type support, by which
144 one can store IPv4/IPv6 network address/prefix and
145 interface name pairs as elements in a set.
146
147 To compile it as a module, choose M here. If unsure, say N.
148
149config IP_SET_LIST_SET
150 tristate "list:set set support"
151 depends on IP_SET
152 help
153 This option adds the list:set set type support. In this
154 kind of set one can store the name of other sets and it forms
155 an ordered union of the member sets.
156
157 To compile it as a module, choose M here. If unsure, say N.
158
159endif # IP_SET