2 tristate "IP set support"
3 depends on INET && NETFILTER
4 depends on NETFILTER_NETLINK
6 This option adds IP set support to the kernel.
7 In order to define and use the sets, you need the userspace utility
8 ipset(8). You can use the sets in netfilter via the "set" match
11 To compile it as a module, choose M here. If unsure, say N.
16 int "Maximum number of IP sets"
21 You can define here default value of the maximum number
22 of IP sets for the kernel.
24 The value can be overriden by the 'max_sets' module
25 parameter of the 'ip_set' module.
27 config IP_SET_BITMAP_IP
28 tristate "bitmap:ip set support"
31 This option adds the bitmap:ip set type support, by which one
32 can store IPv4 addresses (or network addresse) from a range.
34 To compile it as a module, choose M here. If unsure, say N.
36 config IP_SET_BITMAP_IPMAC
37 tristate "bitmap:ip,mac set support"
40 This option adds the bitmap:ip,mac set type support, by which one
41 can store IPv4 address and (source) MAC address pairs from a range.
43 To compile it as a module, choose M here. If unsure, say N.
45 config IP_SET_BITMAP_PORT
46 tristate "bitmap:port set support"
49 This option adds the bitmap:port set type support, by which one
50 can store TCP/UDP port numbers from a range.
52 To compile it as a module, choose M here. If unsure, say N.
55 tristate "hash:ip set support"
58 This option adds the hash:ip set type support, by which one
59 can store arbitrary IPv4 or IPv6 addresses (or network addresses)
62 To compile it as a module, choose M here. If unsure, say N.
64 config IP_SET_HASH_IPPORT
65 tristate "hash:ip,port set support"
68 This option adds the hash:ip,port set type support, by which one
69 can store IPv4/IPv6 address and protocol/port pairs.
71 To compile it as a module, choose M here. If unsure, say N.
73 config IP_SET_HASH_IPPORTIP
74 tristate "hash:ip,port,ip set support"
77 This option adds the hash:ip,port,ip set type support, by which
78 one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
79 address triples in a set.
81 To compile it as a module, choose M here. If unsure, say N.
83 config IP_SET_HASH_IPPORTNET
84 tristate "hash:ip,port,net set support"
87 This option adds the hash:ip,port,net set type support, by which
88 one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
89 network address/prefix triples in a set.
91 To compile it as a module, choose M here. If unsure, say N.
93 config IP_SET_HASH_NET
94 tristate "hash:net set support"
97 This option adds the hash:net set type support, by which
98 one can store IPv4/IPv6 network address/prefix elements in a set.
100 To compile it as a module, choose M here. If unsure, say N.
102 config IP_SET_HASH_NETPORT
103 tristate "hash:net,port set support"
106 This option adds the hash:net,port set type support, by which
107 one can store IPv4/IPv6 network address/prefix and
108 protocol/port pairs as elements in a set.
110 To compile it as a module, choose M here. If unsure, say N.
112 config IP_SET_LIST_SET
113 tristate "list:set set support"
116 This option adds the list:set set type support. In this
117 kind of set one can store the name of other sets and it forms
118 an ordered union of the member sets.
120 To compile it as a module, choose M here. If unsure, say N.