diff options
| author | Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | 2011-06-16 17:00:48 (GMT) |
|---|---|---|
| committer | Patrick McHardy <kaber@trash.net> | 2011-06-16 17:00:48 (GMT) |
| commit | e385357a2f214e4d4e79c6118f1bede2572e0701 (patch) | |
| tree | 22ec359f9c9dc8b2ba290383a80663a5ea9f705a /net/netfilter/ipset/Kconfig | |
| parent | 9b03a5ef49c01515387133ac5bd47073fae56318 (diff) | |
| download | linux-fsl-qoriq-e385357a2f214e4d4e79c6118f1bede2572e0701.tar.xz | |
netfilter: ipset: hash:net,iface type introduced
The hash:net,iface type makes possible to store network address and
interface name pairs in a set. It's mostly suitable for egress
and ingress filtering. Examples:
# ipset create test hash:net,iface
# ipset add test 192.168.0.0/16,eth0
# ipset add test 192.168.0.0/24,eth1
Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'net/netfilter/ipset/Kconfig')
| -rw-r--r-- | net/netfilter/ipset/Kconfig | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/net/netfilter/ipset/Kconfig b/net/netfilter/ipset/Kconfig index 2c5b348..ba36c28 100644 --- a/net/netfilter/ipset/Kconfig +++ b/net/netfilter/ipset/Kconfig @@ -109,6 +109,16 @@ config IP_SET_HASH_NETPORT To compile it as a module, choose M here. If unsure, say N. +config IP_SET_HASH_NETIFACE + tristate "hash:net,iface set support" + depends on IP_SET + help + This option adds the hash:net,iface set type support, by which + one can store IPv4/IPv6 network address/prefix and + interface name pairs as elements in a set. + + To compile it as a module, choose M here. If unsure, say N. + config IP_SET_LIST_SET tristate "list:set set support" depends on IP_SET |