config NF_CONNTRACK_RTSP
	tristate "RTSP protocol support"
	depends on NF_CONNTRACK
	help
	  RTSP (Real Time Streaming Protocol) support.
	default n

config NF_NAT_RTSP
	tristate "NF NAT RTSP"
	depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT
	default NF_NAT && NF_CONNTRACK_RTSP

config NF_CONNTRACK_RSVP
	tristate "RSVP protocol support"
	depends on NF_CONNTRACK
	help
	  RSVP (Resource Reservation Protocol) support.
	default n

config NF_NAT_RSVP
	tristate "NF NAT RSVP"
	depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT
	default NF_NAT && NF_CONNTRACK_RSVP

config NF_NAT_PT
	tristate "Port Triggering support"
	depends on NF_NAT
	help
	  Port Triggering support
	default n

config NF_CONNTRACK_IPSEC
	tristate "IPSEC protocol support"
	default m if NETFILTER_ADVANCED=n
	help
	  IPSec is used for for securing IP communications by authenticating and
	  encrypting each IP packet of a communication session
	default m

config NF_NAT_PROTO_ESP
	tristate "NF NAT Proto ESP"
	depends on NF_NAT && NF_CT_PROTO_ESP
	default NF_NAT && NF_CT_PROTO_ESP

config NF_NAT_IPSEC
	tristate "NF NAT IPSEC"
	depends on NF_CONNTRACK && NF_NAT
	default NF_NAT && NF_CONNTRACK_IPSEC

config NF_NAT_LOOPBACK
	tristate 'NAT Loopback/Hairpinning support'
	depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT
	help
	  To compile it as a module, choose M here.  If unsure, say N.
	default n

config NF_ICMP_CHECK
	tristate 'NF ICMP header check support'
	depends on IP_NF_IPTABLES && NF_CONNTRACK && NF_NAT
	help
	  To compile it as a module, choose M here.  If unsure, say N.
	default n

config BRIDGE_EBT_DHCPSNOOP
	tristate "ebt: dhcp snoop target support"
	depends on BRIDGE_NF_EBTABLES && INET
	help
	  This option adds the dhcp snoop target, which allows
	  DHCP packet modification and filtering.

	  To compile it as a module, choose M here.  If unsure, say N.
	default n

config BRIDGE_EBT_DHCPSNOOP_DB
	tristate "ebt: dhcp snoop clientdb support"
	depends on BRIDGE_NF_EBTABLES && INET && BRIDGE_EBT_DHCPSNOOP
	help
	  This option adds the dhcp snoop client db support, which allows
	  maintaining client database.

	  To compile it as a module, choose M here.  If unsure, say N.
	default BRIDGE_EBT_DHCPSNOOP

config XT_L2OGRE
	tristate "xt: L2oGRE match and target support"
	depends on NETFILTER_XTABLES && IP_NF_IPTABLES && INET
	help
	  This option adds GRE filter support, which matches L2oGRE packet,
	  adds/removes VLAN tag, or updates DSCP on the L2oGRE packet.

	  To compile it as a module, choose M here.  If unsure, say N.
	default n

config NF_DEFRAG_IPV6_NOTRACK
	tristate "NF Defrag IPv6 Notrack"
	default n

config NF_IPV4_FRAG_DROP_FOR_WAN
	tristate "NF IPv4 Frag Drop for WAN"
	default n

config NF_DNSWALL
	tristate "NF dnswall support"
	default n

config NETFILTER_XT_TARGET_SKIPCTOFFLOAD
        tristate 'Skip Conntrack Offload target support'
        depends on NF_CONNTRACK_OFFLOAD
        help
          This options adds a `SKIPCTOFFLOAD' target, which allows to specify
          skipping offload processing.

          configuration like:
          1) Do not promote any TCP flows
             iptables -A FORWARD -p tcp -j SKIPCTOFFLOAD

          2) Promote UDP flow after total number of packet received in
             original and reply direction is greater than 100
             iptables -A FORWARD -p udp -m connbytes --connbytes :100
             --connbytes-dir both --connbytes-mode packets -j SKIPCTOFFLOAD

          3) Promote TCP flow in reply direction after total byte received in
             reply direction is greater than 10k
             iptables -A FORWARD -p tcp -m connbytes --connbytes :10240
             --connbytes-dir reply --connbytes-mode bytes
             -m conntrack --ctdir REPLY -j SKIPCTOFFLOAD
