These changes are the raw update to linux-4.4.6-rt14. Kernel sources

[kvmfornfv.git] / kernel / net / ipv4 / netfilter / Kconfig

diff --git a/kernel/net/ipv4/netfilter/Kconfig b/kernel/net/ipv4/netfilter/Kconfig
index fb20f36..c187c60 100644 (file)
--- a/kernel/net/ipv4/netfilter/Kconfig
+++ b/kernel/net/ipv4/netfilter/Kconfig
@@ -58,6 +58,13 @@ config NFT_REJECT_IPV4
        default NFT_REJECT
        tristate
 
+config NFT_DUP_IPV4
+       tristate "IPv4 nf_tables packet duplication support"
+       depends on !NF_CONNTRACK || NF_CONNTRACK
+       select NF_DUP_IPV4
+       help
+         This module enables IPv4 packet duplication support for nf_tables.
+
 endif # NF_TABLES_IPV4
 
 config NF_TABLES_ARP
@@ -67,6 +74,13 @@ config NF_TABLES_ARP
 
 endif # NF_TABLES
 
+config NF_DUP_IPV4
+       tristate "Netfilter IPv4 packet duplication to alternate destination"
+       depends on !NF_CONNTRACK || NF_CONNTRACK
+       help
+         This option enables the nf_dup_ipv4 core, which duplicates an IPv4
+         packet to be rerouted to another destination.
+
 config NF_LOG_ARP
        tristate "ARP packet logging"
        default m if NETFILTER_ADVANCED=n
@@ -195,7 +209,8 @@ config IP_NF_MATCH_ECN
 
 config IP_NF_MATCH_RPFILTER
        tristate '"rpfilter" reverse path filter match support'
-       depends on NETFILTER_ADVANCED && (IP_NF_MANGLE || IP_NF_RAW)
+       depends on NETFILTER_ADVANCED
+       depends on IP_NF_MANGLE || IP_NF_RAW
        ---help---
          This option allows you to match packets whose replies would
          go out via the interface the packet came in.