Kconfig 8.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254
  1. #
  2. # Network configuration
  3. #
  4. menuconfig NET
  5. bool "Networking support"
  6. ---help---
  7. Unless you really know what you are doing, you should say Y here.
  8. The reason is that some programs need kernel networking support even
  9. when running on a stand-alone machine that isn't connected to any
  10. other computer.
  11. If you are upgrading from an older kernel, you
  12. should consider updating your networking tools too because changes
  13. in the kernel and the tools often go hand in hand. The tools are
  14. contained in the package net-tools, the location and version number
  15. of which are given in <file:Documentation/Changes>.
  16. For a general introduction to Linux networking, it is highly
  17. recommended to read the NET-HOWTO, available from
  18. <http://www.tldp.org/docs.html#howto>.
  19. if NET
  20. menu "Networking options"
  21. config COMPAT_NET_DEV_OPS
  22. def_bool y
  23. source "net/packet/Kconfig"
  24. source "net/unix/Kconfig"
  25. source "net/xfrm/Kconfig"
  26. source "net/iucv/Kconfig"
  27. config INET
  28. bool "TCP/IP networking"
  29. ---help---
  30. These are the protocols used on the Internet and on most local
  31. Ethernets. It is highly recommended to say Y here (this will enlarge
  32. your kernel by about 400 KB), since some programs (e.g. the X window
  33. system) use TCP/IP even if your machine is not connected to any
  34. other computer. You will get the so-called loopback device which
  35. allows you to ping yourself (great fun, that!).
  36. For an excellent introduction to Linux networking, please read the
  37. Linux Networking HOWTO, available from
  38. <http://www.tldp.org/docs.html#howto>.
  39. If you say Y here and also to "/proc file system support" and
  40. "Sysctl support" below, you can change various aspects of the
  41. behavior of the TCP/IP code by writing to the (virtual) files in
  42. /proc/sys/net/ipv4/*; the options are explained in the file
  43. <file:Documentation/networking/ip-sysctl.txt>.
  44. Short answer: say Y.
  45. if INET
  46. source "net/ipv4/Kconfig"
  47. source "net/ipv6/Kconfig"
  48. source "net/netlabel/Kconfig"
  49. endif # if INET
  50. config NETWORK_SECMARK
  51. bool "Security Marking"
  52. help
  53. This enables security marking of network packets, similar
  54. to nfmark, but designated for security purposes.
  55. If you are unsure how to answer this question, answer N.
  56. menuconfig NETFILTER
  57. bool "Network packet filtering framework (Netfilter)"
  58. ---help---
  59. Netfilter is a framework for filtering and mangling network packets
  60. that pass through your Linux box.
  61. The most common use of packet filtering is to run your Linux box as
  62. a firewall protecting a local network from the Internet. The type of
  63. firewall provided by this kernel support is called a "packet
  64. filter", which means that it can reject individual network packets
  65. based on type, source, destination etc. The other kind of firewall,
  66. a "proxy-based" one, is more secure but more intrusive and more
  67. bothersome to set up; it inspects the network traffic much more
  68. closely, modifies it and has knowledge about the higher level
  69. protocols, which a packet filter lacks. Moreover, proxy-based
  70. firewalls often require changes to the programs running on the local
  71. clients. Proxy-based firewalls don't need support by the kernel, but
  72. they are often combined with a packet filter, which only works if
  73. you say Y here.
  74. You should also say Y here if you intend to use your Linux box as
  75. the gateway to the Internet for a local network of machines without
  76. globally valid IP addresses. This is called "masquerading": if one
  77. of the computers on your local network wants to send something to
  78. the outside, your box can "masquerade" as that computer, i.e. it
  79. forwards the traffic to the intended outside destination, but
  80. modifies the packets to make it look like they came from the
  81. firewall box itself. It works both ways: if the outside host
  82. replies, the Linux box will silently forward the traffic to the
  83. correct local computer. This way, the computers on your local net
  84. are completely invisible to the outside world, even though they can
  85. reach the outside and can receive replies. It is even possible to
  86. run globally visible servers from within a masqueraded local network
  87. using a mechanism called portforwarding. Masquerading is also often
  88. called NAT (Network Address Translation).
  89. Another use of Netfilter is in transparent proxying: if a machine on
  90. the local network tries to connect to an outside host, your Linux
  91. box can transparently forward the traffic to a local server,
  92. typically a caching proxy server.
  93. Yet another use of Netfilter is building a bridging firewall. Using
  94. a bridge with Network packet filtering enabled makes iptables "see"
  95. the bridged traffic. For filtering on the lower network and Ethernet
  96. protocols over the bridge, use ebtables (under bridge netfilter
  97. configuration).
  98. Various modules exist for netfilter which replace the previous
  99. masquerading (ipmasqadm), packet filtering (ipchains), transparent
  100. proxying, and portforwarding mechanisms. Please see
  101. <file:Documentation/Changes> under "iptables" for the location of
  102. these packages.
  103. Make sure to say N to "Fast switching" below if you intend to say Y
  104. here, as Fast switching currently bypasses netfilter.
  105. Chances are that you should say Y here if you compile a kernel which
  106. will run as a router and N for regular hosts. If unsure, say N.
  107. if NETFILTER
  108. config NETFILTER_DEBUG
  109. bool "Network packet filtering debugging"
  110. depends on NETFILTER
  111. help
  112. You can say Y here if you want to get additional messages useful in
  113. debugging the netfilter code.
  114. config NETFILTER_ADVANCED
  115. bool "Advanced netfilter configuration"
  116. depends on NETFILTER
  117. default y
  118. help
  119. If you say Y here you can select between all the netfilter modules.
  120. If you say N the more ununsual ones will not be shown and the
  121. basic ones needed by most people will default to 'M'.
  122. If unsure, say Y.
  123. config BRIDGE_NETFILTER
  124. bool "Bridged IP/ARP packets filtering"
  125. depends on BRIDGE && NETFILTER && INET
  126. depends on NETFILTER_ADVANCED
  127. default y
  128. ---help---
  129. Enabling this option will let arptables resp. iptables see bridged
  130. ARP resp. IP traffic. If you want a bridging firewall, you probably
  131. want this option enabled.
  132. Enabling or disabling this option doesn't enable or disable
  133. ebtables.
  134. If unsure, say N.
  135. source "net/netfilter/Kconfig"
  136. source "net/ipv4/netfilter/Kconfig"
  137. source "net/ipv6/netfilter/Kconfig"
  138. source "net/decnet/netfilter/Kconfig"
  139. source "net/bridge/netfilter/Kconfig"
  140. endif
  141. source "net/dccp/Kconfig"
  142. source "net/sctp/Kconfig"
  143. source "net/tipc/Kconfig"
  144. source "net/atm/Kconfig"
  145. source "net/802/Kconfig"
  146. source "net/bridge/Kconfig"
  147. source "net/dsa/Kconfig"
  148. source "net/8021q/Kconfig"
  149. source "net/decnet/Kconfig"
  150. source "net/llc/Kconfig"
  151. source "net/ipx/Kconfig"
  152. source "drivers/net/appletalk/Kconfig"
  153. source "net/x25/Kconfig"
  154. source "net/lapb/Kconfig"
  155. source "net/econet/Kconfig"
  156. source "net/wanrouter/Kconfig"
  157. source "net/sched/Kconfig"
  158. source "net/dcb/Kconfig"
  159. menu "Network testing"
  160. config NET_PKTGEN
  161. tristate "Packet Generator (USE WITH CAUTION)"
  162. depends on PROC_FS
  163. ---help---
  164. This module will inject preconfigured packets, at a configurable
  165. rate, out of a given interface. It is used for network interface
  166. stress testing and performance analysis. If you don't understand
  167. what was just said, you don't need it: say N.
  168. Documentation on how to use the packet generator can be found
  169. at <file:Documentation/networking/pktgen.txt>.
  170. To compile this code as a module, choose M here: the
  171. module will be called pktgen.
  172. config NET_TCPPROBE
  173. tristate "TCP connection probing"
  174. depends on INET && EXPERIMENTAL && PROC_FS && KPROBES
  175. ---help---
  176. This module allows for capturing the changes to TCP connection
  177. state in response to incoming packets. It is used for debugging
  178. TCP congestion avoidance modules. If you don't understand
  179. what was just said, you don't need it: say N.
  180. Documentation on how to use TCP connection probing can be found
  181. at http://linux-net.osdl.org/index.php/TcpProbe
  182. To compile this code as a module, choose M here: the
  183. module will be called tcp_probe.
  184. endmenu
  185. endmenu
  186. source "net/ax25/Kconfig"
  187. source "net/can/Kconfig"
  188. source "net/irda/Kconfig"
  189. source "net/bluetooth/Kconfig"
  190. source "net/rxrpc/Kconfig"
  191. source "net/phonet/Kconfig"
  192. config FIB_RULES
  193. bool
  194. menuconfig WIRELESS
  195. bool "Wireless"
  196. depends on !S390
  197. default y
  198. if WIRELESS
  199. source "net/wireless/Kconfig"
  200. source "net/mac80211/Kconfig"
  201. endif # WIRELESS
  202. source "net/wimax/Kconfig"
  203. source "net/rfkill/Kconfig"
  204. source "net/9p/Kconfig"
  205. endif # if NET