## SECTION=networking menuconfig IPTABLES tristate prompt "iptables " select KERNEL select LIBC_DL help Iptables is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel. Several different tables may be defined. Each table contains a number of built-in chains and may also contain user-defined chains. if IPTABLES config IPTABLES_INSTALL_IPV6_TOOLS bool prompt "IPv6 tools" if IPTABLES_INSTALL_IPV6_TOOLS config IPTABLES_INSTALL_IP6TABLES_MULTI bool config IPTABLES_INSTALL_IP6TABLES select IPTABLES_INSTALL_IP6TABLES_MULTI bool "install ip6tables" help Install the IPv6 Version of iptables config IPTABLES_INSTALL_IP6TABLES_RESTORE select IPTABLES_INSTALL_IP6TABLES_MULTI bool "install ip6tables-restore" help The ip6tables-restore command is used to restore the ip6tables rule-set that was saved with the ip6tables-save command. config IPTABLES_INSTALL_IP6TABLES_SAVE select IPTABLES_INSTALL_IP6TABLES_MULTI bool "install ip6tables-save" help The ip6tables-save command is a tool to save the current rule-set into a file that ip6tables-restore can use. endif config IPTABLES_INSTALL_IPV4_TOOLS bool prompt "IPv4 tools" if IPTABLES_INSTALL_IPV4_TOOLS config IPTABLES_INSTALL_IPTABLES_MULTI bool config IPTABLES_INSTALL_IPTABLES select IPTABLES_INSTALL_IPTABLES_MULTI bool "install iptables" help install the IPv4 Version of iptables config IPTABLES_INSTALL_IPTABLES_RESTORE select IPTABLES_INSTALL_IPTABLES_MULTI bool "install iptables-restore" help The iptables-restore command is used to restore the iptables rule-set that was saved with the iptables-save command. config IPTABLES_INSTALL_IPTABLES_SAVE select IPTABLES_INSTALL_IPTABLES_MULTI bool "install iptables-save" help The iptables-save command is a tool to save the current rule-set into a file that iptables-restore can use. endif config IPTABLES_INSTALL_IPTABLES_XML select IPTABLES_INSTALL_IPTABLES_MULTI bool "install iptables-xml" help iptables-xml is used to convert the output of iptables-save into an easily manipulatable XML format to STDOUT. Use I/O-redirection provided by your shell to write to a file. comment "iptables-apply depends on bash" depends on !BASH config IPTABLES_INSTALL_IPTABLES_APPLY bool prompt "install iptables-apply" depends on BASH help iptables-apply will try to apply a new ruleset (as output by iptables-save/read by iptables-restore) to iptables, then prompt the user whether the changes are okay. If the new ruleset cut the existing connection, the user will not be able to answer affirmatively. endif