netfilter: import layer7 patchset

[people/arne_f/kernel.git] / net / netfilter / Kconfig

diff --git a/net/netfilter/Kconfig b/net/netfilter/Kconfig
index e4a13cc8a2e7635841a29be9901412ab2904c3ae..0b0f501ad8ee71646085571051f2fe0e8cd0fb0d 100644 (file)
--- a/net/netfilter/Kconfig
+++ b/net/netfilter/Kconfig
@@ -1282,6 +1282,26 @@ config NETFILTER_XT_MATCH_L2TP
 
        To compile it as a module, choose M here. If unsure, say N.
 
+config NETFILTER_XT_MATCH_LAYER7
+       tristate '"layer7" match support'
+       depends on NETFILTER_XTABLES
+       depends on NETFILTER_ADVANCED
+       depends on NF_CONNTRACK
+       help
+         Say Y if you want to be able to classify connections (and their
+         packets) based on regular expression matching of their application
+         layer data.   This is one way to classify applications such as
+         peer-to-peer filesharing systems that do not always use the same
+         port.
+
+         To compile it as a module, choose M here.  If unsure, say N.
+
+config NETFILTER_XT_MATCH_LAYER7_DEBUG
+       bool 'Layer 7 debugging output'
+       depends on NETFILTER_XT_MATCH_LAYER7
+       help
+         Say Y to get lots of debugging output.
+
 config NETFILTER_XT_MATCH_LENGTH
        tristate '"length" match support'
        depends on NETFILTER_ADVANCED