netfilter: nft_reject: add reject verdict support for netdev

[sfrench/cifs-2.6.git] / net / netfilter / Kconfig

diff --git a/net/netfilter/Kconfig b/net/netfilter/Kconfig
index 52370211e46bffc712b518ac506dfb4fa162808b..49fbef0d99befe76bf746ef9660edc6c3443a283 100644 (file)
--- a/net/netfilter/Kconfig
+++ b/net/netfilter/Kconfig
@@ -682,6 +682,16 @@ config NFT_FIB_NETDEV
          The lookup will be delegated to the IPv4 or IPv6 FIB depending
          on the protocol of the packet.
 
+config NFT_REJECT_NETDEV
+       depends on NFT_REJECT_IPV4
+       depends on NFT_REJECT_IPV6
+       tristate "Netfilter nf_tables netdev REJECT support"
+       help
+         This option enables the REJECT support from the netdev table.
+         The return packet generation will be delegated to the IPv4
+         or IPv6 ICMP or TCP RST implementation depending on the
+         protocol of the packet.
+
 endif # NF_TABLES_NETDEV
 
 endif # NF_TABLES