These changes are the raw update to linux-4.4.6-rt14. Kernel sources

[kvmfornfv.git] / kernel / net / ipv6 / netfilter / Kconfig

diff --git a/kernel/net/ipv6/netfilter/Kconfig b/kernel/net/ipv6/netfilter/Kconfig
index ca69983..e10a04c 100644 (file)
--- a/kernel/net/ipv6/netfilter/Kconfig
+++ b/kernel/net/ipv6/netfilter/Kconfig
@@ -47,9 +47,23 @@ config NFT_REJECT_IPV6
        default NFT_REJECT
        tristate
 
+config NFT_DUP_IPV6
+       tristate "IPv6 nf_tables packet duplication support"
+       depends on !NF_CONNTRACK || NF_CONNTRACK
+       select NF_DUP_IPV6
+       help
+         This module enables IPv6 packet duplication support for nf_tables.
+
 endif # NF_TABLES_IPV6
 endif # NF_TABLES
 
+config NF_DUP_IPV6
+       tristate "Netfilter IPv6 packet duplication to alternate destination"
+       depends on !NF_CONNTRACK || NF_CONNTRACK
+       help
+         This option enables the nf_dup_ipv6 core, which duplicates an IPv6
+         packet to be rerouted to another destination.
+
 config NF_REJECT_IPV6
        tristate "IPv6 packet rejection"
        default m if NETFILTER_ADVANCED=n
@@ -186,7 +200,8 @@ config IP6_NF_MATCH_MH
 
 config IP6_NF_MATCH_RPFILTER
        tristate '"rpfilter" reverse path filter match support'
-       depends on NETFILTER_ADVANCED && (IP6_NF_MANGLE || IP6_NF_RAW)
+       depends on NETFILTER_ADVANCED
+       depends on IP6_NF_MANGLE || IP6_NF_RAW
        ---help---
          This option allows you to match packets whose replies would
          go out via the interface the packet came in.