diff options
| author | Patrick McHardy | 2005-09-07 00:08:51 +0200 |
|---|---|---|
| committer | David S. Miller | 2005-09-07 00:08:51 +0200 |
| commit | a2978aea393b5e00b55b219786a5b8a47f838a7f (patch) | |
| tree | a0705feab8186cf08dcf0e53ecb57d521bae601e /net/ipv4/netfilter/Kconfig | |
| parent | [NETFILTER]: Add support for permanent expectations (diff) | |
| download | kernel-qcow2-linux-a2978aea393b5e00b55b219786a5b8a47f838a7f.tar.gz kernel-qcow2-linux-a2978aea393b5e00b55b219786a5b8a47f838a7f.tar.xz kernel-qcow2-linux-a2978aea393b5e00b55b219786a5b8a47f838a7f.zip | |
[NETFILTER]: Add NetBIOS name service helper
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv4/netfilter/Kconfig')
| -rw-r--r-- | net/ipv4/netfilter/Kconfig | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/net/ipv4/netfilter/Kconfig b/net/ipv4/netfilter/Kconfig index e046f5521814..fd2eb5d4c7fe 100644 --- a/net/ipv4/netfilter/Kconfig +++ b/net/ipv4/netfilter/Kconfig @@ -85,6 +85,25 @@ config IP_NF_IRC To compile it as a module, choose M here. If unsure, say Y. +config IP_NF_NETBIOS_NS + tristate "NetBIOS name service protocol support (EXPERIMENTAL)" + depends on IP_NF_CONNTRACK && EXPERIMENTAL + help + NetBIOS name service requests are sent as broadcast messages from an + unprivileged port and responded to with unicast messages to the + same port. This make them hard to firewall properly because connection + tracking doesn't deal with broadcasts. This helper tracks locally + originating NetBIOS name service requests and the corresponding + responses. It relies on correct IP address configuration, specifically + netmask and broadcast address. When properly configured, the output + of "ip address show" should look similar to this: + + $ ip -4 address show eth0 + 4: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000 + inet 172.16.2.252/24 brd 172.16.2.255 scope global eth0 + + To compile it as a module, choose M here. If unsure, say N. + config IP_NF_TFTP tristate "TFTP protocol support" depends on IP_NF_CONNTRACK |