#
# IP configuration
#
bool 'IP: forwarding/gatewaying' CONFIG_IP_FORWARD
bool 'IP: multicasting' CONFIG_IP_MULTICAST
bool 'IP: syn cookies' CONFIG_SYN_COOKIES
#if [ "$CONFIG_EXPERIMENTAL" = "y" ]; then
#  bool 'IP: rst cookies' CONFIG_RST_COOKIES
#fi
if [ "$CONFIG_FIREWALL" = "y" ]; then
  bool 'IP: firewalling' CONFIG_IP_FIREWALL
  if [ "$CONFIG_IP_FIREWALL" = "y" ]; then
    bool 'IP: firewall packet logging' CONFIG_IP_FIREWALL_VERBOSE
      bool 'IP: masquerading' CONFIG_IP_MASQUERADE
      if [ "$CONFIG_IP_MASQUERADE" != "n" ]; then
        comment 'Protocol-specific masquerading support will be built as modules.'
        if [ "$CONFIG_EXPERIMENTAL" = "y" ]; then	
          bool 'IP: ipautofw masquerading (EXPERIMENTAL)' CONFIG_IP_MASQUERADE_IPAUTOFW
          bool 'IP: MS PPTP masq support (EXPERIMENTAL)' CONFIG_IP_MASQUERADE_PPTP
          if [ "$CONFIG_IP_MASQUERADE_PPTP" = "y" ]; then	
            bool 'IP: MS PPTP Call ID masq support (EXPERIMENTAL)' CONFIG_IP_MASQUERADE_PPTP_MULTICLIENT
            bool 'IP: MS PPTP masq debugging' DEBUG_IP_MASQUERADE_PPTP
            if [ "$DEBUG_IP_MASQUERADE_PPTP" = "y" ]; then	
              bool 'IP: MS PPTP masq verbose debugging' DEBUG_IP_MASQUERADE_PPTP_VERBOSE
            fi
          fi
          bool 'IP: IPSEC ESP & ISAKMP masq support (EXPERIMENTAL)' CONFIG_IP_MASQUERADE_IPSEC
          if [ "$CONFIG_IP_MASQUERADE_IPSEC" = "y" ]; then	
            int 'IP: IPSEC masq table lifetime (minutes)' CONFIG_IP_MASQUERADE_IPSEC_EXPIRE 30
            bool 'IP: Disable inbound ESP destination guessing' CONFIG_IP_MASQUERADE_IPSEC_NOGUESS
            bool 'IP: IPSEC masq debugging' DEBUG_IP_MASQUERADE_IPSEC
            if [ "$DEBUG_IP_MASQUERADE_IPSEC" = "y" ]; then	
              bool 'IP: IPSEC masq verbose debugging' DEBUG_IP_MASQUERADE_IPSEC_VERBOSE
            fi
          fi
        fi
        bool 'IP: ICMP masquerading' CONFIG_IP_MASQUERADE_ICMP
      fi
      if [ "$CONFIG_EXPERIMENTAL" = "y" ]; then	
        bool 'IP: transparent proxy support (EXPERIMENTAL)' CONFIG_IP_TRANSPARENT_PROXY
      fi	
     bool 'IP: always defragment' CONFIG_IP_ALWAYS_DEFRAG
  fi
fi
bool 'IP: accounting' CONFIG_IP_ACCT
  bool 'IP: optimize as router not host' CONFIG_IP_ROUTER
  tristate 'IP: tunneling' CONFIG_NET_IPIP
  if [ "$CONFIG_IP_MULTICAST" = "y" ]; then
      if [ "$CONFIG_EXPERIMENTAL" = "y" ]; then
        bool 'IP: multicast routing (EXPERIMENTAL)' CONFIG_IP_MROUTE
      fi		
  fi
if [ "$CONFIG_NET_ALIAS" = "y" ]; then
	tristate 'IP: aliasing support' CONFIG_IP_ALIAS
fi
if [ "$CONFIG_EXPERIMENTAL" = "y" ]; then
  if [ "$CONFIG_NETLINK" = "y" ]; then
    bool 'IP: ARP daemon support (EXPERIMENTAL)' CONFIG_ARPD
  fi
fi
comment '(it is safe to leave these untouched)'
bool 'IP: PC/TCP compatibility mode' CONFIG_INET_PCTCP
tristate 'IP: Reverse ARP' CONFIG_INET_RARP
bool 'IP: Disable Path MTU Discovery (normally enabled)' CONFIG_NO_PATH_MTU_DISCOVERY
#bool 'IP: Disable NAGLE algorithm (normally enabled)' CONFIG_TCP_NAGLE_OFF
bool 'IP: Drop source routed frames' CONFIG_IP_NOSR
bool 'IP: Allow large windows (not recommended if <16Mb of memory)' CONFIG_SKB_LARGE