==DRAFT== iptables\\ 2 nics\\ kernel with netfilter support Networking ⇒ Networking Options ⇒ Network packet filtering framework (Netfilter) => Core Netfilter Configuration │ < > Netfilter netlink interface (NEW) │ │ │ │ Netfilter connection tracking support (NEW) │ │ [ ] Connection tracking flow accounting (NEW) │ │ [ ] Connection mark tracking support (NEW) │ │ │ │ [ ] Connection tracking events (EXPERIMENTAL) (NEW) │ │ │ │ < > SCTP protocol connection tracking support (EXPERIMENTAL) (NEW) │ │ │ │ < > Amanda backup protocol support (NEW) │ │ │ │ < > FTP protocol support (NEW) │ │ │ │ < > H.323 protocol support (EXPERIMENTAL) (NEW) │ │ │ │ < > IRC protocol support (NEW) │ │ │ │ < > NetBIOS name service protocol support (EXPERIMENTAL) (NEW) │ │ │ │ < > PPtP protocol support (NEW) │ │ │ │ < > SANE protocol support (EXPERIMENTAL) (NEW) │ │ │ │ < > SIP protocol support (EXPERIMENTAL) (NEW) │ │ │ │ < > TFTP protocol support (NEW) │ │ Netfilter Xtables support (required for ip_tables) │ │ │ │ < > "CLASSIFY" target support (NEW) │ │ │ │ < > "MARK" target support (NEW) │ │ │ │ < > "NFQUEUE" target Support (NEW) │ │ │ │ < > "NFLOG" target support (NEW) │ │ │ │ < > "TCPMSS" target support (NEW) │ │ │ │ < > "comment" match support (NEW) │ │ │ │ < > "DCCP" protocol match support (NEW) │ │ │ │ < > "DSCP" match support (NEW) │ │ │ │ < > "ESP" match support (NEW) │ │ │ │ < > "length" match support (NEW) │ │ │ │ < > "limit" match support (NEW) │ │ │ │ "mac" address match support (NEW) │ │ │ │ < > "mark" match support (NEW) │ │ │ │ < > Multiple port match support (NEW) │ │ │ │ < > "pkttype" packet type match support (NEW) │ │ │ │ < > "quota" match support (NEW) │ │ │ │ < > "realm" match support (NEW) │ │ │ │ < > "sctp" protocol match support (EXPERIMENTAL) (NEW) │ │ │ │ < > "statistic" match support (NEW) │ │ │ │ "string" match support (NEW) │ │ │ │ < > "tcpmss" match support (NEW) │ │ │ │ < > "hashlimit" match support (NEW) Networking ⇒ Networking Options ⇒ Network packet filtering framework (Netfilter) => IP: Netfilter Configuration IPv4 connection tracking support (required for NAT) │ │ │ │ [ ] proc/sysctl compatibility with old connection tracking │ │ │ │ < > IP Userspace queueing via NETLINK (OBSOLETE) │ │ │ │ IP tables support (required for filtering/masq/NAT) │ │ │ │ < > IP range match support │ │ │ │ < > TOS match support │ │ │ │ < > recent match support │ │ │ │ < > ECN match support │ │ │ │ < > AH match support │ │ │ │ < > TTL match support │ │ │ │ < > Owner match support │ │ │ │ < > address type match support │ │ │ │ Packet filtering │ │ │ │ < > REJECT target support │ │ │ │ < > LOG target support │ │ │ │ < > ULOG target support │ │ │ │ < > Full NAT (NEW) │ │ │ │ < > Packet mangling │ │ │ │ < > raw table support (required for NOTRACK/TRACE) │ │ │ │ < > ARP tables support