summaryrefslogtreecommitdiffstats
path: root/net/ipv6/netfilter/Kconfig
diff options
context:
space:
mode:
authorFlorian Westphal2011-08-19 13:52:40 +0200
committerPablo Neira Ayuso2011-12-13 11:34:43 +0100
commite26f9a480fb6c1b614660e824d69a74e2ce990f3 (patch)
treebb330ffc3ff13e9de1f6a1b5dcc0c8bac7f3d4ec /net/ipv6/netfilter/Kconfig
parentipv6: add ip6_route_lookup (diff)
downloadkernel-qcow2-linux-e26f9a480fb6c1b614660e824d69a74e2ce990f3.tar.gz
kernel-qcow2-linux-e26f9a480fb6c1b614660e824d69a74e2ce990f3.tar.xz
kernel-qcow2-linux-e26f9a480fb6c1b614660e824d69a74e2ce990f3.zip
netfilter: add ipv6 reverse path filter match
This is not merged with the ipv4 match into xt_rpfilter.c to avoid ipv6 module dependency issues. Signed-off-by: Florian Westphal <fw@strlen.de> Acked-by: David S. Miller <davem@davemloft.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/ipv6/netfilter/Kconfig')
-rw-r--r--net/ipv6/netfilter/Kconfig10
1 files changed, 10 insertions, 0 deletions
diff --git a/net/ipv6/netfilter/Kconfig b/net/ipv6/netfilter/Kconfig
index f792b34cbe9c..9a68fb5b9e77 100644
--- a/net/ipv6/netfilter/Kconfig
+++ b/net/ipv6/netfilter/Kconfig
@@ -125,6 +125,16 @@ config IP6_NF_MATCH_MH
To compile it as a module, choose M here. If unsure, say N.
+config IP6_NF_MATCH_RPFILTER
+ tristate '"rpfilter" reverse path filter match support'
+ depends on NETFILTER_ADVANCED
+ ---help---
+ This option allows you to match packets whose replies would
+ go out via the interface the packet came in.
+
+ To compile it as a module, choose M here. If unsure, say N.
+ The module will be called ip6t_rpfilter.
+
config IP6_NF_MATCH_RT
tristate '"rt" Routing header match support'
depends on NETFILTER_ADVANCED