net/netfilter/ipset/Kconfig v3.0-rc7

IP_SET

IP set support

This option adds IP set support to the kernel.
In order to define and use the sets, you need the userspace utility
ipset(8). You can use the sets in netfilter via the "set" match
and "SET" target.

To compile it as a module, choose M here.  If unsure, say N.

IP_SET_MAX

Maximum number of IP sets

You can define here default value of the maximum number
of IP sets for the kernel.

The value can be overriden by the 'max_sets' module
parameter of the 'ip_set' module.

IP_SET_BITMAP_IP

bitmap:ip set support

This option adds the bitmap:ip set type support, by which one
can store IPv4 addresses (or network addresse) from a range.

To compile it as a module, choose M here.  If unsure, say N.

IP_SET_BITMAP_IPMAC

bitmap:ip,mac set support

This option adds the bitmap:ip,mac set type support, by which one
can store IPv4 address and (source) MAC address pairs from a range.

To compile it as a module, choose M here.  If unsure, say N.

IP_SET_BITMAP_PORT

bitmap:port set support

This option adds the bitmap:port set type support, by which one
can store TCP/UDP port numbers from a range.

To compile it as a module, choose M here.  If unsure, say N.

IP_SET_HASH_IP

hash:ip set support

This option adds the hash:ip set type support, by which one
can store arbitrary IPv4 or IPv6 addresses (or network addresses)
in a set.

To compile it as a module, choose M here.  If unsure, say N.

IP_SET_HASH_IPPORT

hash:ip,port set support

This option adds the hash:ip,port set type support, by which one
can store IPv4/IPv6 address and protocol/port pairs.

To compile it as a module, choose M here.  If unsure, say N.

IP_SET_HASH_IPPORTIP

hash:ip,port,ip set support

This option adds the hash:ip,port,ip set type support, by which
one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
address triples in a set.

To compile it as a module, choose M here.  If unsure, say N.

IP_SET_HASH_IPPORTNET

hash:ip,port,net set support

This option adds the hash:ip,port,net set type support, by which
one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
network address/prefix triples in a set.

To compile it as a module, choose M here.  If unsure, say N.

IP_SET_HASH_NET

hash:net set support

This option adds the hash:net set type support, by which
one can store IPv4/IPv6 network address/prefix elements in a set.

To compile it as a module, choose M here.  If unsure, say N.

IP_SET_HASH_NETPORT

hash:net,port set support

This option adds the hash:net,port set type support, by which
one can store IPv4/IPv6 network address/prefix and
protocol/port pairs as elements in a set.

To compile it as a module, choose M here.  If unsure, say N.

IP_SET_LIST_SET

list:set set support

This option adds the list:set set type support. In this
kind of set one can store the name of other sets and it forms
an ordered union of the member sets.

To compile it as a module, choose M here.  If unsure, say N.