config FREETZ_PACKAGE_IPTABLES bool "Iptables 1.3.7" depends on ! FREETZ_TYPE_SPEEDPORT_W501V default n help Netfilter/iptables Netfilter is the set of hooks within the Linux kernel for intercepting and manipulating network packets. The best-known component on top of netfilter is the firewall which filters packets, but the hooks are also used by a component which performs network address translation, and by another which provides ipchains backwards compatibility. These components are usually Loadable Kernel Modules. iptables is the name of the user space tool by which administrators create rules for the packet filtering and NAT modules. While technically iptables is merely the tool which controls the packet filtering and NAT components within the kernel, the name iptables is often used to refer to the entire infrastructure, including netfilter, connection tracking and NAT, as well as the tool itself. iptables is a standard part of all modern Linux distributions. comment "CAUTION: Use of module ip_conntrack can lead to spontaneous reboots" depends on FREETZ_MODULE_ip_conntrack # Include here for a cleaner menu structure (list packages before modules/libs) source make/iptables-cgi/Config.in config FREETZ_PACKAGE_IPTABLES_KERNEL_MODULES bool "Iptables kernel modules" requires FREETZ_PACKAGE_IPTABLES default n help Linux kernel modules for iptables Please note that some kernel modules have corresponding shared libraries and vice versa, so please make sure to select both of them, if they are needed for your purpose. menu "Select kernel modules" requires FREETZ_PACKAGE_IPTABLES_KERNEL_MODULES config FREETZ_MODULE_ip_conntrack bool "ip_conntrack.ko" default n config FREETZ_MODULE_ip_conntrack_ftp bool "ip_conntrack_ftp.ko" select FREETZ_MODULE_ip_conntrack default n config FREETZ_MODULE_ip_conntrack_h323 bool "ip_conntrack_h323.ko" depends on FREETZ_KERNEL_VERSION_2_6_19_2 select FREETZ_MODULE_ip_conntrack default n config FREETZ_MODULE_ip_conntrack_irc bool "ip_conntrack_irc.ko" select FREETZ_MODULE_ip_conntrack default n config FREETZ_MODULE_ip_conntrack_pptp bool "ip_conntrack_pptp.ko" depends on FREETZ_KERNEL_VERSION_2_6_19_2 select FREETZ_MODULE_ip_conntrack default n config FREETZ_MODULE_ip_conntrack_tftp bool "ip_conntrack_tftp.ko" select FREETZ_MODULE_ip_conntrack default n config FREETZ_MODULE_ip_conntrack_proto_sctp bool "ip_conntrack_proto_sctp.ko" depends on FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_conntrack default n config FREETZ_MODULE_ip_nat bool "ip_nat.ko" depends on FREETZ_KERNEL_VERSION_2_6_19_2 select FREETZ_MODULE_ip_conntrack default n config FREETZ_MODULE_ip_nat_ftp bool "ip_nat_ftp.ko" select FREETZ_MODULE_iptable_nat if FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_nat if FREETZ_KERNEL_VERSION_2_6_19_2 select FREETZ_MODULE_ip_conntrack_ftp default n config FREETZ_MODULE_ip_nat_h323 bool "ip_nat_h323.ko" depends on FREETZ_KERNEL_VERSION_2_6_19_2 select FREETZ_MODULE_ip_nat if FREETZ_KERNEL_VERSION_2_6_19_2 select FREETZ_MODULE_ip_conntrack_h323 default n config FREETZ_MODULE_ip_nat_irc bool "ip_nat_irc.ko" select FREETZ_MODULE_iptable_nat if FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_nat if FREETZ_KERNEL_VERSION_2_6_19_2 select FREETZ_MODULE_ip_conntrack_irc if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_MODULE_ip_nat_pptp bool "ip_nat_pptp.ko" depends on FREETZ_KERNEL_VERSION_2_6_19_2 select FREETZ_MODULE_ip_nat select FREETZ_MODULE_ip_conntrack_pptp default n config FREETZ_MODULE_ip_nat_tftp bool "ip_nat_tftp.ko" select FREETZ_MODULE_iptable_nat if FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_nat if FREETZ_KERNEL_VERSION_2_6_19_2 select FREETZ_MODULE_ip_conntrack_tftp if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_MODULE_iptable_filter bool "iptable_filter.ko" select FREETZ_MODULE_ip_tables default n config FREETZ_MODULE_iptable_mangle bool "iptable_mangle.ko" select FREETZ_MODULE_ip_tables default n config FREETZ_MODULE_iptable_nat bool "iptable_nat.ko" select FREETZ_MODULE_ip_conntrack select FREETZ_MODULE_ip_tables select FREETZ_MODULE_ip_nat if FREETZ_KERNEL_VERSION_2_6_19_2 select FREETZ_MODULE_x_tables if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_MODULE_iptable_raw bool "iptable_raw.ko" depends on FREETZ_KERNEL_VERSION_2_6_19_2 select FREETZ_MODULE_ip_tables default n config FREETZ_MODULE_ip_tables bool "ip_tables.ko" select FREETZ_MODULE_x_tables if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_MODULE_ipt_connmark bool "ipt_connmark.ko" depends on FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_conntrack select FREETZ_MODULE_ip_tables default n config FREETZ_MODULE_ipt_conntrack bool "ipt_conntrack.ko" depends on FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_conntrack select FREETZ_MODULE_ip_tables default n config FREETZ_MODULE_ipt_helper bool "ipt_helper.ko" depends on FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_conntrack select FREETZ_MODULE_ip_tables default n config FREETZ_MODULE_ipt_iprange bool "ipt_iprange.ko" select FREETZ_MODULE_ip_tables if FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_x_tables if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_MODULE_ipt_length bool "ipt_length.ko" depends on FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_tables default n config FREETZ_MODULE_ipt_limit bool "ipt_limit.ko" depends on FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_tables default n config FREETZ_MODULE_ipt_LOG bool "ipt_LOG.ko" select FREETZ_MODULE_ip_tables default n config FREETZ_MODULE_ipt_mac bool "ipt_mac.ko" depends on FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_tables default n config FREETZ_MODULE_ipt_mark bool "ipt_mark.ko" depends on FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_tables default n config FREETZ_MODULE_ipt_MARK bool "ipt_MARK.ko" depends on FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_tables default n config FREETZ_MODULE_ipt_MASQUERADE bool "ipt_MASQUERADE.ko" select FREETZ_MODULE_iptable_nat if FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_nat if FREETZ_KERNEL_VERSION_2_6_19_2 select FREETZ_MODULE_x_tables if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_MODULE_ipt_multiport bool "ipt_multiport.ko" depends on FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_tables default n config FREETZ_MODULE_ipt_REDIRECT bool "ipt_REDIRECT.ko" select FREETZ_MODULE_iptable_nat if FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_nat if FREETZ_KERNEL_VERSION_2_6_19_2 select FREETZ_MODULE_x_tables if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_MODULE_ipt_REJECT bool "ipt_REJECT.ko" select FREETZ_MODULE_ip_tables if FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_x_tables if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_MODULE_ipt_state bool "ipt_state.ko" depends on FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_conntrack select FREETZ_MODULE_ip_tables default n config FREETZ_MODULE_ipt_tcpmss bool "ipt_tcpmss.ko" depends on FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_ip_tables default n config FREETZ_MODULE_ipt_TCPMSS bool "ipt_TCPMSS.ko" select FREETZ_MODULE_ip_tables if FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_x_tables if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_MODULE_ipt_tos bool "ipt_tos.ko" select FREETZ_MODULE_ip_tables if FREETZ_KERNEL_VERSION_2_6_13_1 select FREETZ_MODULE_x_tables if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_MODULE_ipt_TOS bool "ipt_TOS.ko" select FREETZ_MODULE_ip_tables if FREETZ_KERNEL_VERSION_2_6_13_2 select FREETZ_MODULE_x_tables if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_MODULE_ipt_ttl bool "ipt_ttl.ko" select FREETZ_MODULE_ip_tables if FREETZ_KERNEL_VERSION_2_6_13_2 select FREETZ_MODULE_x_tables if FREETZ_KERNEL_VERSION_2_6_19_2 default n menu "x_tables" depends on FREETZ_KERNEL_VERSION_2_6_19_2 config FREETZ_MODULE_x_tables bool "x_tables.ko" default n config FREETZ_MODULE_xt_helper bool "xt_helper.ko" select FREETZ_MODULE_x_tables select FREETZ_MODULE_ip_conntrack default n config FREETZ_MODULE_xt_CLASSIFY bool "xt_CLASSIFY.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_comment bool "xt_comment.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_conntrack bool "xt_conntrack.ko" select FREETZ_MODULE_x_tables select FREETZ_MODULE_ip_conntrack default n config FREETZ_MODULE_xt_esp bool "xt_esp.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_length bool "xt_length.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_limit bool "xt_limit.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_mac bool "xt_mac.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_multiport bool "xt_multiport.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_MARK bool "xt_MARK.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_mark bool "xt_mark.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_NFQUEUE bool "xt_NFQUEUE.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_NOTRACK bool "xt_NOTRACK.ko" select FREETZ_MODULE_x_tables select FREETZ_MODULE_ip_conntrack default n config FREETZ_MODULE_xt_pkttype bool "xt_pkttype.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_physdev bool "xt_physdev.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_quota bool "xt_quota.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_realm bool "xt_realm.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_state bool "xt_state.ko" select FREETZ_MODULE_x_tables select FREETZ_MODULE_ip_conntrack default n config FREETZ_MODULE_xt_statistic bool "xt_statistic.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_string bool "xt_string.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_tcpudp bool "xt_tcpudp.ko" select FREETZ_MODULE_x_tables default n config FREETZ_MODULE_xt_tcpmss bool "xt_tcpmss.ko" select FREETZ_MODULE_x_tables default n endmenu endmenu config FREETZ_PACKAGE_IPTABLES_SHARED_LIBS bool "Iptables shared libraries" requires FREETZ_PACKAGE_IPTABLES default n help Shared Libraries for iptables Please note that some kernel modules have corresponding shared libraries and vice versa, so please make sure to select both of them, if they are needed for your purpose. menu "Select shared libraries" requires FREETZ_PACKAGE_IPTABLES_SHARED_LIBS config FREETZ_LIB_libipt_addrtype bool "libipt_addrtype.so" default n config FREETZ_LIB_libipt_ah bool "libipt_ah.so" default n config FREETZ_LIB_libipt_CLASSIFY bool "libipt_CLASSIFY.so" default n config FREETZ_LIB_libipt_comment bool "libipt_comment.so" select FREETZ_MODULE_xt_comment if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_connlimit bool "libipt_connlimit.so" default n config FREETZ_LIB_libipt_connmark bool "libipt_connmark.so" default n config FREETZ_LIB_libipt_CONNMARK bool "libipt_CONNMARK.so" default n config FREETZ_LIB_libipt_conntrack bool "libipt_conntrack.so" select FREETZ_MODULE_xt_conntrack if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_DNAT bool "libipt_DNAT.so" default n config FREETZ_LIB_libipt_dscp bool "libipt_dscp.so" default n config FREETZ_LIB_libipt_DSCP bool "libipt_DSCP.so" default n config FREETZ_LIB_libipt_ecn bool "libipt_ecn.so" default n config FREETZ_LIB_libipt_ECN bool "libipt_ECN.so" default n config FREETZ_LIB_libipt_esp bool "libipt_esp.so" default n config FREETZ_LIB_libipt_hashlimit bool "libipt_hashlimit.so" default n config FREETZ_LIB_libipt_helper bool "libipt_helper.so" select FREETZ_MODULE_xt_helper if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_icmp bool "libipt_icmp.so" default n config FREETZ_LIB_libipt_ipp2p bool "libipt_ipp2p.so" default n config FREETZ_LIB_libipt_iprange bool "libipt_iprange.so" default n config FREETZ_LIB_libipt_length bool "libipt_length.so" select FREETZ_MODULE_xt_length if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_limit bool "libipt_limit.so" select FREETZ_MODULE_xt_limit if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_LOG bool "libipt_LOG.so" default n config FREETZ_LIB_libipt_mac bool "libipt_mac.so" select FREETZ_MODULE_xt_mac if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_mark bool "libipt_mark.so" select FREETZ_MODULE_xt_mark if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_MARK bool "libipt_MARK.so" select FREETZ_MODULE_xt_MARK if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_MASQUERADE bool "libipt_MASQUERADE.so" default n config FREETZ_LIB_libipt_MIRROR bool "libipt_MIRROR.so" default n config FREETZ_LIB_libipt_multiport bool "libipt_multiport.so" select FREETZ_MODULE_xt_multiport if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_NETMAP bool "libipt_NETMAP.so" default n config FREETZ_LIB_libipt_NFQUEUE bool "libipt_NFQUEUE.so" default n config FREETZ_LIB_libipt_NOTRACK bool "libipt_NOTRACK.so" default n config FREETZ_LIB_libipt_owner bool "libipt_owner.so" default n config FREETZ_LIB_libipt_physdev bool "libipt_physdev.so" select FREETZ_MODULE_xt_physdev if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_pkttype bool "libipt_pkttype.so" select FREETZ_MODULE_xt_pkttype if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_policy bool "libipt_policy.so" default n config FREETZ_LIB_libipt_realm bool "libipt_realm.so" select FREETZ_MODULE_xt_realm if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_REDIRECT bool "libipt_REDIRECT.so" default n config FREETZ_LIB_libipt_REJECT bool "libipt_REJECT.so" default n config FREETZ_LIB_libipt_rpc bool "libipt_rpc.so" default n config FREETZ_LIB_libipt_SAME bool "libipt_SAME.so" default n config FREETZ_LIB_libipt_sctp bool "libipt_sctp.so" default n config FREETZ_LIB_libipt_SNAT bool "libipt_SNAT.so" default n config FREETZ_LIB_libipt_standard bool "libipt_standard.so" default n config FREETZ_LIB_libipt_state bool "libipt_state.so" select FREETZ_MODULE_xt_state if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_TARPIT bool "libipt_TARPIT.so" default n config FREETZ_LIB_libipt_tcpmss bool "libipt_tcpmss.so" select FREETZ_MODULE_xt_tcpmss if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_TCPMSS bool "libipt_TCPMSS.so" default n config FREETZ_LIB_libipt_tcp bool "libipt_tcp.so" select FREETZ_MODULE_xt_tcpudp if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_tos bool "libipt_tos.so" default n config FREETZ_LIB_libipt_TOS bool "libipt_TOS.so" default n config FREETZ_LIB_libipt_TRACE bool "libipt_TRACE.so" default n config FREETZ_LIB_libipt_ttl bool "libipt_ttl.so" default n config FREETZ_LIB_libipt_TTL bool "libipt_TTL.so" default n config FREETZ_LIB_libipt_udp bool "libipt_udp.so" select FREETZ_MODULE_xt_tcpudp if FREETZ_KERNEL_VERSION_2_6_19_2 default n config FREETZ_LIB_libipt_ULOG bool "libipt_ULOG.so" default n config FREETZ_LIB_libipt_unclean bool "libipt_unclean.so" default n endmenu