1 --- a/net/netfilter/Kconfig
2 +++ b/net/netfilter/Kconfig
3 @@ -781,6 +781,27 @@ config NETFILTER_XT_MATCH_IPVS
7 +config NETFILTER_XT_MATCH_LAYER7
8 + tristate '"layer7" match support'
9 + depends on EXPERIMENTAL
10 + depends on NETFILTER_XTABLES
11 + depends on NETFILTER_ADVANCED
12 + depends on NF_CONNTRACK
14 + Say Y if you want to be able to classify connections (and their
15 + packets) based on regular expression matching of their application
16 + layer data. This is one way to classify applications such as
17 + peer-to-peer filesharing systems that do not always use the same
20 + To compile it as a module, choose M here. If unsure, say N.
22 +config NETFILTER_XT_MATCH_LAYER7_DEBUG
23 + bool 'Layer 7 debugging output'
24 + depends on NETFILTER_XT_MATCH_LAYER7
26 + Say Y to get lots of debugging output.
28 config NETFILTER_XT_MATCH_LENGTH
29 tristate '"length" match support'
30 depends on NETFILTER_ADVANCED
31 @@ -966,26 +987,11 @@ config NETFILTER_XT_MATCH_STATE
33 To compile it as a module, choose M here. If unsure, say N.
35 -config NETFILTER_XT_MATCH_LAYER7
36 - tristate '"layer7" match support'
37 - depends on NETFILTER_XTABLES
38 - depends on EXPERIMENTAL && (IP_NF_CONNTRACK || NF_CONNTRACK)
39 - depends on NETFILTER_ADVANCED
41 - Say Y if you want to be able to classify connections (and their
42 - packets) based on regular expression matching of their application
43 - layer data. This is one way to classify applications such as
44 - peer-to-peer filesharing systems that do not always use the same
47 - To compile it as a module, choose M here. If unsure, say N.
49 config NETFILTER_XT_MATCH_LAYER7_DEBUG
50 - bool 'Layer 7 debugging output'
51 - depends on NETFILTER_XT_MATCH_LAYER7
53 - Say Y to get lots of debugging output.
55 + bool 'Layer 7 debugging output'
56 + depends on NETFILTER_XT_MATCH_LAYER7
58 + Say Y to get lots of debugging output.
60 config NETFILTER_XT_MATCH_STATISTIC
61 tristate '"statistic" match support'