summaryrefslogtreecommitdiffstats
path: root/rules/iptables.in
blob: cf2dcfaa29963edb98969063958d11af10c7125a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
## SECTION=networking

menuconfig IPTABLES
	tristate
	prompt "iptables                      "
	select KERNEL
	select LIBC_DL
	help
	  Iptables  is used to set up, maintain, and inspect the
	  tables of IP packet filter rules in the Linux kernel.
	  Several different tables may be defined.  Each table
	  contains a number of built-in chains and may also
	  contain user-defined chains.

if IPTABLES

config IPTABLES_INSTALL_IPV6_TOOLS
	bool
	prompt "IPv6 tools"

if IPTABLES_INSTALL_IPV6_TOOLS

config IPTABLES_INSTALL_IP6TABLES_MULTI
	bool

config IPTABLES_INSTALL_IP6TABLES
	select IPTABLES_INSTALL_IP6TABLES_MULTI
	bool "install ip6tables"
	help
	  Install the IPv6 Version of iptables

config IPTABLES_INSTALL_IP6TABLES_RESTORE
	select IPTABLES_INSTALL_IP6TABLES_MULTI
	bool "install ip6tables-restore"
	help
	  The ip6tables-restore command is used to restore
	  the ip6tables rule-set that was saved with the
	  ip6tables-save command.

config IPTABLES_INSTALL_IP6TABLES_SAVE
	select IPTABLES_INSTALL_IP6TABLES_MULTI
	bool "install ip6tables-save"
	help
	  The ip6tables-save command is a tool to save the current rule-set
	  into a file that ip6tables-restore can use.

endif


config IPTABLES_INSTALL_IPV4_TOOLS
	bool
	prompt "IPv4 tools"

if IPTABLES_INSTALL_IPV4_TOOLS

config IPTABLES_INSTALL_IPTABLES_MULTI
	bool

config IPTABLES_INSTALL_IPTABLES
	select IPTABLES_INSTALL_IPTABLES_MULTI
	bool "install iptables"
	help
	  install the IPv4 Version of iptables

config IPTABLES_INSTALL_IPTABLES_RESTORE
	select IPTABLES_INSTALL_IPTABLES_MULTI
	bool "install iptables-restore"
	help
	  The iptables-restore command is used to restore
	  the iptables rule-set that was saved with the
	  iptables-save command.

config IPTABLES_INSTALL_IPTABLES_SAVE
	select IPTABLES_INSTALL_IPTABLES_MULTI
	bool "install iptables-save"
	help
	  The iptables-save command is a tool to save
	  the current rule-set into a file that
	  iptables-restore can use.

endif

config IPTABLES_INSTALL_IPTABLES_XML
	select IPTABLES_INSTALL_IPTABLES_MULTI
	bool "install iptables-xml"
	help
	  iptables-xml is used to convert the output of iptables-save into an
	  easily manipulatable XML format to STDOUT. Use I/O-redirection
	  provided by your shell to write to a file.

comment "iptables-apply depends on bash"
	depends on !BASH

config IPTABLES_INSTALL_IPTABLES_APPLY
	bool
	prompt "install iptables-apply"
	depends on BASH
	help
	  iptables-apply will try to apply a new ruleset (as output by
	  iptables-save/read by iptables-restore) to iptables, then prompt the
	  user whether the changes are okay. If the new ruleset cut the
	  existing connection, the user will not be able to answer
	  affirmatively.

endif