# DO NOT EDIT. This file is generated from Config.src
#
# For a description of the syntax of this configuration file,
# see docs/Kconfig-language.txt.
#

menu "Networking Utilities"

config FEATURE_IPV6
	bool "Enable IPv6 support"
	default y
	help
	Enable IPv6 support in busybox.
	This adds IPv6 support in the networking applets.

config FEATURE_UNIX_LOCAL
	bool "Enable Unix domain socket support (usually not needed)"
	default n
	help
	Enable Unix domain socket support in all busybox networking
	applets.  Address of the form local:/path/to/unix/socket
	will be recognized.

	This extension is almost never used in real world usage.
	You most likely want to say N.

config FEATURE_PREFER_IPV4_ADDRESS
	bool "Prefer IPv4 addresses from DNS queries"
	default y
	depends on FEATURE_IPV6
	help
	Use IPv4 address of network host if it has one.

	If this option is off, the first returned address will be used.
	This may cause problems when your DNS server is IPv6-capable and
	is returning IPv6 host addresses too. If IPv6 address
	precedes IPv4 one in DNS reply, busybox network applets
	(e.g. wget) will use IPv6 address. On an IPv6-incapable host
	or network applets will fail to connect to the host
	using IPv6 address.

config VERBOSE_RESOLUTION_ERRORS
	bool "Verbose resolution errors"
	default n
	help
	Enable if you are not satisfied with simplistic
	"can't resolve 'hostname.com'" and want to know more.
	This may increase size of your executable a bit.

config FEATURE_ETC_NETWORKS
	bool "Support /etc/networks"
	default n
	help
	Enable support for network names in /etc/networks. This is
	a rarely used feature which allows you to use names
	instead of IP/mask pairs in route command.

config FEATURE_ETC_SERVICES
	bool "Consult /etc/services even for well-known ports"
	default n
	help
	Look up e.g. "telnet" and "http" in /etc/services file
	instead of assuming ports 23 and 80.
	This is almost never necessary (everybody uses standard ports),
	and it makes sense to avoid reading this file.
	If you disable this option, in the cases where port is explicitly
	specified as a service name (e.g. "telnet HOST PORTNAME"),
	it will still be looked up in /etc/services.

config FEATURE_HWIB
	bool "Support infiniband HW"
	default y
	help
	Support for printing infiniband addresses in network applets.

config FEATURE_TLS_SHA1
	bool "In TLS code, support ciphers which use deprecated SHA1"
	depends on TLS
	default n
	help
	Selecting this option increases interoperability with very old
	servers, but slightly increases code size.

	Most TLS servers support SHA256 today (2018), since SHA1 is
	considered possibly insecure (although not yet definitely broken).

config ARP
	bool "arp (10 kb)"
	default y
	help
	Manipulate the system ARP cache.
config ARPING
	bool "arping (9 kb)"
	default y
	help
	Ping hosts by ARP packets.
config BRCTL
	bool "brctl (4.7 kb)"
	default y
	help
	Manage ethernet bridges.
	Supports addbr/delbr and addif/delif.

config FEATURE_BRCTL_FANCY
	bool "Fancy options"
	default y
	depends on BRCTL
	help
	Add support for extended option like:
		setageing, setfd, sethello, setmaxage,
		setpathcost, setportprio, setbridgeprio,
		stp
	This adds about 600 bytes.

config FEATURE_BRCTL_SHOW
	bool "Support show"
	default y
	depends on BRCTL && FEATURE_BRCTL_FANCY
	help
	Add support for option which prints the current config:
		show
config DNSD
	bool "dnsd (9.8 kb)"
	default y
	help
	Small and static DNS server daemon.
config ETHER_WAKE
	bool "ether-wake (4.9 kb)"
	default y
	help
	Send a magic packet to wake up sleeping machines.
config FTPD
	bool "ftpd (30 kb)"
	default y
	help
	Simple FTP daemon. You have to run it via inetd.

config FEATURE_FTPD_WRITE
	bool "Enable -w (upload commands)"
	default y
	depends on FTPD
	help
	Enable -w option. "ftpd -w" will accept upload commands
	such as STOR, STOU, APPE, DELE, MKD, RMD, rename commands.

config FEATURE_FTPD_ACCEPT_BROKEN_LIST
	bool "Enable workaround for RFC-violating clients"
	default y
	depends on FTPD
	help
	Some ftp clients (among them KDE's Konqueror) issue illegal
	"LIST -l" requests. This option works around such problems.
	It might prevent you from listing files starting with "-" and
	it increases the code size by ~40 bytes.
	Most other ftp servers seem to behave similar to this.

config FEATURE_FTPD_AUTHENTICATION
	bool "Enable authentication"
	default y
	depends on FTPD
	help
	Require login, and change to logged in user's UID:GID before
	accessing any files. Option "-a USER" allows "anonymous"
	logins (treats them as if USER logged in).

	If this option is not selected, ftpd runs with the rights
	of the user it was started under, and does not require login.
	Take care to not launch it under root.
config FTPGET
	bool "ftpget (7.8 kb)"
	default y
	help
	Retrieve a remote file via FTP.

config FTPPUT
	bool "ftpput (7.5 kb)"
	default y
	help
	Store a remote file via FTP.

config FEATURE_FTPGETPUT_LONG_OPTIONS
	bool "Enable long options in ftpget/ftpput"
	default y
	depends on LONG_OPTS && (FTPGET || FTPPUT)
config HOSTNAME
	bool "hostname (5.5 kb)"
	default y
	help
	Show or set the system's host name.

config DNSDOMAINNAME
	bool "dnsdomainname (3.6 kb)"
	default y
	help
	Alias to "hostname -d".
config HTTPD
	bool "httpd (32 kb)"
	default y
	help
	HTTP server.

config FEATURE_HTTPD_PORT_DEFAULT
	int "Default port"
	default 80
	range 1 65535
	depends on HTTPD

config FEATURE_HTTPD_RANGES
	bool "Support 'Ranges:' header"
	default y
	depends on HTTPD
	help
	Makes httpd emit "Accept-Ranges: bytes" header and understand
	"Range: bytes=NNN-[MMM]" header. Allows for resuming interrupted
	downloads, seeking in multimedia players etc.

config FEATURE_HTTPD_SETUID
	bool "Enable -u <user> option"
	default y
	depends on HTTPD
	help
	This option allows the server to run as a specific user
	rather than defaulting to the user that starts the server.
	Use of this option requires special privileges to change to a
	different user.

config FEATURE_HTTPD_BASIC_AUTH
	bool "Enable HTTP authentication"
	default y
	depends on HTTPD
	help
	Utilizes password settings from /etc/httpd.conf for basic
	authentication on a per url basis.
	Example for httpd.conf file:
	/adm:toor:PaSsWd

config FEATURE_HTTPD_AUTH_MD5
	bool "Support MD5-encrypted passwords in HTTP authentication"
	default y
	depends on FEATURE_HTTPD_BASIC_AUTH
	help
	Enables encrypted passwords, and wildcard user/passwords
	in httpd.conf file.
	User '*' means 'any system user name is ok',
	password of '*' means 'use system password for this user'
	Examples:
	/adm:toor:$1$P/eKnWXS$aI1aPGxT.dJD5SzqAKWrF0
	/adm:root:*
	/wiki:*:*

config FEATURE_HTTPD_CGI
	bool "Support Common Gateway Interface (CGI)"
	default y
	depends on HTTPD
	help
	This option allows scripts and executables to be invoked
	when specific URLs are requested.

config FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
	bool "Support running scripts through an interpreter"
	default y
	depends on FEATURE_HTTPD_CGI
	help
	This option enables support for running scripts through an
	interpreter. Turn this on if you want PHP scripts to work
	properly. You need to supply an additional line in your
	httpd.conf file:
	*.php:/path/to/your/php

config FEATURE_HTTPD_SET_REMOTE_PORT_TO_ENV
	bool "Set REMOTE_PORT environment variable for CGI"
	default y
	depends on FEATURE_HTTPD_CGI
	help
	Use of this option can assist scripts in generating
	references that contain a unique port number.

config FEATURE_HTTPD_ENCODE_URL_STR
	bool "Enable -e option (useful for CGIs written as shell scripts)"
	default y
	depends on HTTPD
	help
	This option allows html encoding of arbitrary strings for display
	by the browser. Output goes to stdout.
	For example, httpd -e "<Hello World>" produces
	"&#60Hello&#32World&#62".

config FEATURE_HTTPD_ERROR_PAGES
	bool "Support custom error pages"
	default y
	depends on HTTPD
	help
	This option allows you to define custom error pages in
	the configuration file instead of the default HTTP status
	error pages. For instance, if you add the line:
		E404:/path/e404.html
	in the config file, the server will respond the specified
	'/path/e404.html' file instead of the terse '404 NOT FOUND'
	message.

config FEATURE_HTTPD_PROXY
	bool "Support reverse proxy"
	default y
	depends on HTTPD
	help
	This option allows you to define URLs that will be forwarded
	to another HTTP server. To setup add the following line to the
	configuration file
		P:/url/:http://hostname[:port]/new/path/
	Then a request to /url/myfile will be forwarded to
	http://hostname[:port]/new/path/myfile.

config FEATURE_HTTPD_GZIP
	bool "Support GZIP content encoding"
	default y
	depends on HTTPD
	help
	Makes httpd send files using GZIP content encoding if the
	client supports it and a pre-compressed <file>.gz exists.

config FEATURE_HTTPD_ETAG
	bool "Support caching via ETag header"
	default y
	depends on HTTPD
	help
	If server responds with ETag then next time client (browser)
	resend it via If-None-Match header.
	Then httpd will check if file wasn't modified and if not,
	return 304 Not Modified status code.
	The ETag value is constructed from last modification date
	in unix epoch, and size: "hex(last_mod)-hex(file_size)".
	It's not completely reliable as hash functions but fair enough.

config FEATURE_HTTPD_LAST_MODIFIED
	bool "Add Last-Modified header to response"
	default y
	depends on HTTPD
	help
	The Last-Modified header is used for cache validation.
	The client sends last seen mtime to server in If-Modified-Since.
	Both headers MUST be an RFC 1123 formatted, which is hard to parse.
	Use ETag header instead.

config FEATURE_HTTPD_DATE
	bool "Add Date header to response"
	default y
	depends on HTTPD
	help
	RFC2616 says that server MUST add Date header to response.
	But it is almost useless and can be omitted.

config FEATURE_HTTPD_ACL_IP
	bool "ACL IP"
	default y
	depends on HTTPD
	help
	Support IP deny/allow rules
config IFCONFIG
	bool "ifconfig (12 kb)"
	default y
	help
	Ifconfig is used to configure the kernel-resident network interfaces.

config FEATURE_IFCONFIG_STATUS
	bool "Enable status reporting output (+7k)"
	default y
	depends on IFCONFIG
	help
	If ifconfig is called with no arguments it will display the status
	of the currently active interfaces.

config FEATURE_IFCONFIG_SLIP
	bool "Enable slip-specific options \"keepalive\" and \"outfill\""
	default y
	depends on IFCONFIG
	help
	Allow "keepalive" and "outfill" support for SLIP. If you're not
	planning on using serial lines, leave this unchecked.

config FEATURE_IFCONFIG_MEMSTART_IOADDR_IRQ
	bool "Enable options \"mem_start\", \"io_addr\", and \"irq\""
	default y
	depends on IFCONFIG
	help
	Allow the start address for shared memory, start address for I/O,
	and/or the interrupt line used by the specified device.

config FEATURE_IFCONFIG_HW
	bool "Enable option \"hw\" (ether only)"
	default y
	depends on IFCONFIG
	help
	Set the hardware address of this interface, if the device driver
	supports  this  operation. Currently, we only support the 'ether'
	class.

config FEATURE_IFCONFIG_BROADCAST_PLUS
	bool "Set the broadcast automatically"
	default y
	depends on IFCONFIG
	help
	Setting this will make ifconfig attempt to find the broadcast
	automatically if the value '+' is used.
config IFENSLAVE
	bool "ifenslave (13 kb)"
	default y
	help
	Userspace application to bind several interfaces
	to a logical interface (use with kernel bonding driver).
config IFPLUGD
	bool "ifplugd (10 kb)"
	default y
	help
	Network interface plug detection daemon.
config IFUP
	bool "ifup (14 kb)"
	default y
	help
	Activate the specified interfaces. This applet makes use
	of either "ifconfig" and "route" or the "ip" command to actually
	configure network interfaces. Therefore, you will probably also want
	to enable either IFCONFIG and ROUTE, or enable
	FEATURE_IFUPDOWN_IP and the various IP options. Of
	course you could use non-busybox versions of these programs, so
	against my better judgement (since this will surely result in plenty
	of support questions on the mailing list), I do not force you to
	enable these additional options. It is up to you to supply either
	"ifconfig", "route" and "run-parts" or the "ip" command, either
	via busybox or via standalone utilities.

config IFDOWN
	bool "ifdown (13 kb)"
	default y
	help
	Deactivate the specified interfaces.

config IFUPDOWN_IFSTATE_PATH
	string "Absolute path to ifstate file"
	default "/var/run/ifstate"
	depends on IFUP || IFDOWN
	help
	ifupdown keeps state information in a file called ifstate.
	Typically it is located in /var/run/ifstate, however
	some distributions tend to put it in other places
	(debian, for example, uses /etc/network/run/ifstate).
	This config option defines location of ifstate.

config FEATURE_IFUPDOWN_IP
	bool "Use ip tool (else ifconfig/route is used)"
	default y
	depends on IFUP || IFDOWN
	help
	Use the iproute "ip" command to implement "ifup" and "ifdown", rather
	than the default of using the older "ifconfig" and "route" utilities.

	If Y: you must install either the full-blown iproute2 package
	or enable "ip" applet in busybox, or the "ifup" and "ifdown" applets
	will not work.

	If N: you must install either the full-blown ifconfig and route
	utilities, or enable these applets in busybox.

config FEATURE_IFUPDOWN_IPV4
	bool "Support IPv4"
	default y
	depends on IFUP || IFDOWN
	help
	If you want ifup/ifdown to talk IPv4, leave this on.

config FEATURE_IFUPDOWN_IPV6
	bool "Support IPv6"
	default y
	depends on (IFUP || IFDOWN) && FEATURE_IPV6
	help
	If you need support for IPv6, turn this option on.


config FEATURE_IFUPDOWN_MAPPING
	bool "Enable mapping support"
	default y
	depends on IFUP || IFDOWN
	help
	This enables support for the "mapping" stanza, unless you have
	a weird network setup you don't need it.

config FEATURE_IFUPDOWN_EXTERNAL_DHCP
	bool "Support external DHCP clients"
	default n
	depends on IFUP || IFDOWN
	help
	This enables support for the external dhcp clients. Clients are
	tried in the following order: dhcpcd, dhclient, pump and udhcpc.
	Otherwise, if udhcpc applet is enabled, it is used.
	Otherwise, ifup/ifdown will have no support for DHCP.
config INETD
	bool "inetd (18 kb)"
	default y
	select FEATURE_SYSLOG
	help
	Internet superserver daemon

config FEATURE_INETD_SUPPORT_BUILTIN_ECHO
	bool "Support echo service on port 7"
	default y
	depends on INETD
	help
	Internal service which echoes data back.
	Activated by configuration lines like these:
		echo stream tcp nowait root internal
		echo dgram  udp wait   root internal

config FEATURE_INETD_SUPPORT_BUILTIN_DISCARD
	bool "Support discard service on port 8"
	default y
	depends on INETD
	help
	Internal service which discards all input.
	Activated by configuration lines like these:
		discard stream tcp nowait root internal
		discard dgram  udp wait   root internal

config FEATURE_INETD_SUPPORT_BUILTIN_TIME
	bool "Support time service on port 37"
	default y
	depends on INETD
	help
	Internal service which returns big-endian 32-bit number
	of seconds passed since 1900-01-01. The number wraps around
	on overflow.
	Activated by configuration lines like these:
		time stream tcp nowait root internal
		time dgram  udp wait   root internal

config FEATURE_INETD_SUPPORT_BUILTIN_DAYTIME
	bool "Support daytime service on port 13"
	default y
	depends on INETD
	help
	Internal service which returns human-readable time.
	Activated by configuration lines like these:
		daytime stream tcp nowait root internal
		daytime dgram  udp wait   root internal

config FEATURE_INETD_SUPPORT_BUILTIN_CHARGEN
	bool "Support chargen service on port 19"
	default y
	depends on INETD
	help
	Internal service which generates endless stream
	of all ASCII chars beetween space and char 126.
	Activated by configuration lines like these:
		chargen stream tcp nowait root internal
		chargen dgram  udp wait   root internal

config FEATURE_INETD_RPC
	bool "Support RPC services"
	default n  # very rarely used, and needs Sun RPC support in libc
	depends on INETD
	help
	Support Sun-RPC based services
config IP
	bool "ip (35 kb)"
	default y
	help
	The "ip" applet is a TCP/IP interface configuration and routing
	utility.
	Short forms (enabled below) are busybox-specific extensions.
	The standard "ip" utility does not provide them. If you are
	trying to be portable, it's better to use "ip CMD" forms.

config IPADDR
	bool "ipaddr (14 kb)"
	default y
	select FEATURE_IP_ADDRESS
	help
	Short form of "ip addr"

config IPLINK
	bool "iplink (17 kb)"
	default y
	select FEATURE_IP_LINK
	help
	Short form of "ip link"

config IPROUTE
	bool "iproute (15 kb)"
	default y
	select FEATURE_IP_ROUTE
	help
	Short form of "ip route"

config IPTUNNEL
	bool "iptunnel (9.6 kb)"
	default y
	select FEATURE_IP_TUNNEL
	help
	Short form of "ip tunnel"

config IPRULE
	bool "iprule (10 kb)"
	default y
	select FEATURE_IP_RULE
	help
	Short form of "ip rule"

config IPNEIGH
	bool "ipneigh (8.3 kb)"
	default y
	select FEATURE_IP_NEIGH
	help
	Short form of "ip neigh"

config FEATURE_IP_ADDRESS
	bool "ip address"
	default y
	depends on IP || IPADDR
	help
	Address manipulation support for the "ip" applet.

config FEATURE_IP_LINK
	bool "ip link"
	default y
	depends on IP || IPLINK
	help
	Configure network devices with "ip".

config FEATURE_IP_ROUTE
	bool "ip route"
	default y
	depends on IP || IPROUTE
	help
	Add support for routing table management to "ip".

config FEATURE_IP_ROUTE_DIR
	string "ip route configuration directory"
	default "/etc/iproute2"
	depends on FEATURE_IP_ROUTE
	help
	Location of the "ip" applet routing configuration.

config FEATURE_IP_TUNNEL
	bool "ip tunnel"
	default y
	depends on IP || IPTUNNEL
	help
	Add support for tunneling commands to "ip".

config FEATURE_IP_RULE
	bool "ip rule"
	default y
	depends on IP || IPRULE
	help
	Add support for rule commands to "ip".

config FEATURE_IP_NEIGH
	bool "ip neighbor"
	default y
	depends on IP || IPNEIGH
	help
	Add support for neighbor commands to "ip".

config FEATURE_IP_RARE_PROTOCOLS
	bool "Support displaying rarely used link types"
	default n
	depends on IP || IPADDR || IPLINK || IPROUTE || IPTUNNEL || IPRULE || IPNEIGH
	help
	If you are not going to use links of type "frad", "econet",
	"bif" etc, you probably don't need to enable this.
	Ethernet, wireless, infrared, ppp/slip, ip tunnelling
	link types are supported without this option selected.
config IPCALC
	bool "ipcalc (4.4 kb)"
	default y
	help
	ipcalc takes an IP address and netmask and calculates the
	resulting broadcast, network, and host range.

config FEATURE_IPCALC_LONG_OPTIONS
	bool "Enable long options"
	default y
	depends on IPCALC && LONG_OPTS

config FEATURE_IPCALC_FANCY
	bool "Fancy IPCALC, more options, adds 1 kbyte"
	default y
	depends on IPCALC
	help
	Adds the options hostname, prefix and silent to the output of
	"ipcalc".
config FAKEIDENTD
	bool "fakeidentd (8.7 kb)"
	default y
	select FEATURE_SYSLOG
	help
	fakeidentd listens on the ident port and returns a predefined
	fake value on any query.
config NAMEIF
	bool "nameif (6.6 kb)"
	default y
	select FEATURE_SYSLOG
	help
	nameif is used to rename network interface by its MAC address.
	Renamed interfaces MUST be in the down state.
	It is possible to use a file (default: /etc/mactab)
	with list of new interface names and MACs.
	Maximum interface name length: IFNAMSIZ = 16
	File fields are separated by space or tab.
	File format:
		# Comment
		new_interface_name  XX:XX:XX:XX:XX:XX

config FEATURE_NAMEIF_EXTENDED
	bool "Extended nameif"
	default y
	depends on NAMEIF
	help
	This extends the nameif syntax to support the bus_info, driver,
	phyaddr selectors. The syntax is compatible to the normal nameif.
	File format:
		new_interface_name  driver=asix bus=usb-0000:00:08.2-3
		new_interface_name  bus=usb-0000:00:08.2-3 00:80:C8:38:91:B5
		new_interface_name  phy_address=2 00:80:C8:38:91:B5
		new_interface_name  mac=00:80:C8:38:91:B5
		new_interface_name  00:80:C8:38:91:B5
config NBDCLIENT
	bool "nbd-client (6 kb)"
	default y
	help
	Network block device client
config NC
	bool "nc (11 kb)"
	default y
	help
	A simple Unix utility which reads and writes data across network
	connections.

config NETCAT
	bool "netcat (11 kb)"
	default n
	help
	Alias to nc.

config NC_SERVER
	bool "Netcat server options (-l)"
	default y
	depends on NC || NETCAT
	help
	Allow netcat to act as a server.

config NC_EXTRA
	bool "Netcat extensions (-eiw and -f FILE)"
	default y
	depends on NC || NETCAT
	help
	Add -e (support for executing the rest of the command line after
	making or receiving a successful connection), -i (delay interval for
	lines sent), -w (timeout for initial connection).

config NC_110_COMPAT
	bool "Netcat 1.10 compatibility (+2.5k)"
	default y
	depends on NC || NETCAT
	help
	This option makes nc closely follow original nc-1.10.
	The code is about 2.5k bigger. It enables
	-s ADDR, -n, -u, -v, -o FILE, -z options, but loses
	busybox-specific extensions: -f FILE.
config NETSTAT
	bool "netstat (10 kb)"
	default y
	help
	netstat prints information about the Linux networking subsystem.

config FEATURE_NETSTAT_WIDE
	bool "Enable wide output"
	default y
	depends on NETSTAT
	help
	Add support for wide columns. Useful when displaying IPv6 addresses
	(-W option).

config FEATURE_NETSTAT_PRG
	bool "Enable PID/Program name output"
	default y
	depends on NETSTAT
	help
	Add support for -p flag to print out PID and program name.
	+700 bytes of code.
config NSLOOKUP
	bool "nslookup (9.7 kb)"
	default y
	help
	nslookup is a tool to query Internet name servers.

config FEATURE_NSLOOKUP_BIG
	bool "Use internal resolver code instead of libc"
	depends on NSLOOKUP
	default y

config FEATURE_NSLOOKUP_LONG_OPTIONS
	bool "Enable long options"
	default y
	depends on FEATURE_NSLOOKUP_BIG && LONG_OPTS
config NTPD
	bool "ntpd (22 kb)"
	default y
	help
	The NTP client/server daemon.

config FEATURE_NTPD_SERVER
	bool "Make ntpd usable as a NTP server"
	default y
	depends on NTPD
	help
	Make ntpd usable as a NTP server. If you disable this option
	ntpd will be usable only as a NTP client.

config FEATURE_NTPD_CONF
	bool "Make ntpd understand /etc/ntp.conf"
	default y
	depends on NTPD
	help
	Make ntpd look in /etc/ntp.conf for peers. Only "server address"
	is supported.

config FEATURE_NTP_AUTH
	bool "Support md5/sha1 message authentication codes"
	default y
	depends on NTPD
config PING
	bool "ping (10 kb)"
	default y
	help
	ping uses the ICMP protocol's mandatory ECHO_REQUEST datagram to
	elicit an ICMP ECHO_RESPONSE from a host or gateway.

config PING6
	bool "ping6 (11 kb)"
	default y
	depends on FEATURE_IPV6
	help
	Alias to "ping -6".

config FEATURE_FANCY_PING
	bool "Enable fancy ping output"
	default y
	depends on PING || PING6
	help
	With this option off, ping will say "HOST is alive!"
	or terminate with SIGALRM in 5 seconds otherwise.
	No command-line options will be recognized.
config PSCAN
	bool "pscan (6 kb)"
	default y
	help
	Simple network port scanner.
config ROUTE
	bool "route (8.7 kb)"
	default y
	help
	Route displays or manipulates the kernel's IP routing tables.
config SLATTACH
	bool "slattach (6.2 kb)"
	default y
	help
	slattach configures serial line as SLIP network interface.
config SSL_CLIENT
	bool "ssl_client (25 kb)"
	default y
	select TLS
	help
	This tool pipes data to/from a socket, TLS-encrypting it.
config TC
	bool "tc (8.3 kb)"
	default y
	help
	Show / manipulate traffic control settings

config FEATURE_TC_INGRESS
	bool "Enable ingress"
	default y
	depends on TC
config TCPSVD
	bool "tcpsvd (14 kb)"
	default y
	help
	tcpsvd listens on a TCP port and runs a program for each new
	connection.

config UDPSVD
	bool "udpsvd (13 kb)"
	default y
	help
	udpsvd listens on an UDP port and runs a program for each new
	connection.
config TELNET
	bool "telnet (8.8 kb)"
	default y
	help
	Telnet is an interface to the TELNET protocol, but is also commonly
	used to test other simple protocols.

config FEATURE_TELNET_TTYPE
	bool "Pass TERM type to remote host"
	default y
	depends on TELNET
	help
	Setting this option will forward the TERM environment variable to the
	remote host you are connecting to. This is useful to make sure that
	things like ANSI colors and other control sequences behave.

config FEATURE_TELNET_AUTOLOGIN
	bool "Pass USER type to remote host"
	default y
	depends on TELNET
	help
	Setting this option will forward the USER environment variable to the
	remote host you are connecting to. This is useful when you need to
	log into a machine without telling the username (autologin). This
	option enables '-a' and '-l USER' options.

config FEATURE_TELNET_WIDTH
	bool "Enable window size autodetection"
	default y
	depends on TELNET
config TELNETD
	bool "telnetd (12 kb)"
	default y
	select FEATURE_SYSLOG
	help
	A daemon for the TELNET protocol, allowing you to log onto the host
	running the daemon. Please keep in mind that the TELNET protocol
	sends passwords in plain text. If you can't afford the space for an
	SSH daemon and you trust your network, you may say 'y' here. As a
	more secure alternative, you should seriously consider installing the
	very small Dropbear SSH daemon instead:
		http://matt.ucc.asn.au/dropbear/dropbear.html

	Note that for busybox telnetd to work you need several things:
	First of all, your kernel needs:
		  CONFIG_UNIX98_PTYS=y

	Next, you need a /dev/pts directory on your root filesystem:

		  $ ls -ld /dev/pts
		  drwxr-xr-x  2 root root 0 Sep 23 13:21 /dev/pts/

	Next you need the pseudo terminal master multiplexer /dev/ptmx:

		  $ ls -la /dev/ptmx
		  crw-rw-rw-  1 root tty 5, 2 Sep 23 13:55 /dev/ptmx

	Any /dev/ttyp[0-9]* files you may have can be removed.
	Next, you need to mount the devpts filesystem on /dev/pts using:

		  mount -t devpts devpts /dev/pts

	You need to be sure that busybox has LOGIN and
	FEATURE_SUID enabled. And finally, you should make
	certain that busybox has been installed setuid root:

		chown root.root /bin/busybox
		chmod 4755 /bin/busybox

	with all that done, telnetd _should_ work....

config FEATURE_TELNETD_STANDALONE
	bool "Support standalone telnetd (not inetd only)"
	default y
	depends on TELNETD
	help
	Selecting this will make telnetd able to run standalone.

config FEATURE_TELNETD_PORT_DEFAULT
	int "Default port"
	default 23
	range 1 65535
	depends on FEATURE_TELNETD_STANDALONE

config FEATURE_TELNETD_INETD_WAIT
	bool "Support -w SEC option (inetd wait mode)"
	default y
	depends on FEATURE_TELNETD_STANDALONE
	help
	This option allows you to run telnetd in "inet wait" mode.
	Example inetd.conf line (note "wait", not usual "nowait"):

	telnet stream tcp wait root /bin/telnetd telnetd -w10

	In this example, inetd passes _listening_ socket_ as fd 0
	to telnetd when connection appears.
	telnetd will wait for connections until all existing
	connections are closed, and no new connections
	appear during 10 seconds. Then it exits, and inetd continues
	to listen for new connections.

	This option is rarely used. "tcp nowait" is much more usual
	way of running tcp services, including telnetd.
	You most probably want to say N here.
config TFTP
	bool "tftp (11 kb)"
	default y
	help
	Trivial File Transfer Protocol client. TFTP is usually used
	for simple, small transfers such as a root image
	for a network-enabled bootloader.

config FEATURE_TFTP_PROGRESS_BAR
	bool "Enable progress bar"
	default y
	depends on TFTP

config FEATURE_TFTP_HPA_COMPAT
	bool "tftp-hpa compat (support -c get/put FILE)"
	default y
	depends on TFTP

config TFTPD
	bool "tftpd (10 kb)"
	default y
	help
	Trivial File Transfer Protocol server.
	It expects that stdin is a datagram socket and a packet
	is already pending on it. It will exit after one transfer.
	In other words: it should be run from inetd in nowait mode,
	or from udpsvd. Example: "udpsvd -E 0 69 tftpd DIR"

config FEATURE_TFTP_GET
	bool "Enable 'tftp get' and/or tftpd upload code"
	default y
	depends on TFTP || TFTPD
	help
	Add support for the GET command within the TFTP client. This allows
	a client to retrieve a file from a TFTP server.
	Also enable upload support in tftpd, if tftpd is selected.

	Note: this option does _not_ make tftpd capable of download
	(the usual operation people need from it)!

config FEATURE_TFTP_PUT
	bool "Enable 'tftp put' and/or tftpd download code"
	default y
	depends on TFTP || TFTPD
	help
	Add support for the PUT command within the TFTP client. This allows
	a client to transfer a file to a TFTP server.
	Also enable download support in tftpd, if tftpd is selected.

config FEATURE_TFTP_BLOCKSIZE
	bool "Enable 'blksize' and 'tsize' protocol options"
	default y
	depends on TFTP || TFTPD
	help
	Allow tftp to specify block size, and tftpd to understand
	"blksize" and "tsize" options.

config TFTP_DEBUG
	bool "Enable debug"
	default n
	depends on TFTP || TFTPD
	help
	Make tftp[d] print debugging messages on stderr.
	This is useful if you are diagnosing a bug in tftp[d].
config TLS
	bool #No description makes it a hidden option
	default n
config TRACEROUTE
	bool "traceroute (11 kb)"
	default y
	help
	Utility to trace the route of IP packets.

config TRACEROUTE6
	bool "traceroute6 (13 kb)"
	default y
	depends on FEATURE_IPV6
	help
	Utility to trace the route of IPv6 packets.

config FEATURE_TRACEROUTE_VERBOSE
	bool "Enable verbose output"
	default y
	depends on TRACEROUTE || TRACEROUTE6
	help
	Add some verbosity to traceroute. This includes among other things
	hostnames and ICMP response types.

config FEATURE_TRACEROUTE_USE_ICMP
	bool "Enable -I option (use ICMP instead of UDP)"
	default y
	depends on TRACEROUTE || TRACEROUTE6
config TUNCTL
	bool "tunctl (6.2 kb)"
	default y
	help
	tunctl creates or deletes tun devices.

config FEATURE_TUNCTL_UG
	bool "Support owner:group assignment"
	default y
	depends on TUNCTL
	help
	Allow to specify owner and group of newly created interface.
	340 bytes of pure bloat. Say no here.
config VCONFIG
	bool "vconfig (2.3 kb)"
	default y
	help
	Creates, removes, and configures VLAN interfaces
config WGET
	bool "wget (38 kb)"
	default y
	help
	wget is a utility for non-interactive download of files from HTTP
	and FTP servers.

config FEATURE_WGET_LONG_OPTIONS
	bool "Enable long options"
	default y
	depends on WGET && LONG_OPTS

config FEATURE_WGET_STATUSBAR
	bool "Enable progress bar (+2k)"
	default y
	depends on WGET

config FEATURE_WGET_FTP
	bool "Enable FTP protocol (+1k)"
	default y
	depends on WGET
	help
	To support FTPS, enable FEATURE_WGET_HTTPS as well.

config FEATURE_WGET_AUTHENTICATION
	bool "Enable HTTP authentication"
	default y
	depends on WGET
	help
	Support authenticated HTTP transfers.

config FEATURE_WGET_TIMEOUT
	bool "Enable timeout option -T SEC"
	default y
	depends on WGET
	help
	Supports network read and connect timeouts for wget,
	so that wget will give up and timeout, through the -T
	command line option.

	Currently only connect and network data read timeout are
	supported (i.e., timeout is not applied to the DNS query). When
	FEATURE_WGET_LONG_OPTIONS is also enabled, the --timeout option
	will work in addition to -T.

config FEATURE_WGET_HTTPS
	bool "Support HTTPS using internal TLS code"
	default y
	depends on WGET
	select TLS
	help
	wget will use internal TLS code to connect to https:// URLs.
	It also enables FTPS support, but it's not well tested yet.
	Note:
	On NOMMU machines, ssl_helper applet should be available
	in the $PATH for this to work. Make sure to select that applet.

	Note: currently, TLS code only makes TLS I/O work, it
	does *not* check that the peer is who it claims to be, etc.
	IOW: it uses peer-supplied public keys to establish encryption
	and signing keys, then encrypts and signs outgoing data and
	decrypts incoming data.
	It does not check signature hashes on the incoming data:
	this means that attackers manipulating TCP packets can
	send altered data and we unknowingly receive garbage.
	(This check might be relatively easy to add).
	It does not check public key's certificate:
	this means that the peer may be an attacker impersonating
	the server we think we are talking to.

	If you think this is unacceptable, consider this. As more and more
	servers switch to HTTPS-only operation, without such "crippled"
	TLS code it is *impossible* to simply download a kernel source
	from kernel.org. Which can in real world translate into
	"my small automatic tooling to build cross-compilers from sources
	no longer works, I need to additionally keep a local copy
	of ~4 megabyte source tarball of a SSL library and ~2 megabyte
	source of wget, need to compile and built both before I can
	download anything. All this despite the fact that the build
	is done in a QEMU sandbox on a machine with absolutely nothing
	worth stealing, so I don't care if someone would go to a lot
	of trouble to intercept my HTTPS download to send me an altered
	kernel tarball".

	If you still think this is unacceptable, send patches.

	If you still think this is unacceptable, do not want to send
	patches, but do want to waste bandwidth expaining how wrong
	it is, you will be ignored.

	FEATURE_WGET_OPENSSL does implement TLS verification
	using the certificates available to OpenSSL.

config FEATURE_WGET_OPENSSL
	bool "Try to connect to HTTPS using openssl"
	default y
	depends on WGET
	help
	Try to use openssl to handle HTTPS.

	OpenSSL has a simple SSL client for debug purposes.
	If you select this option, wget will effectively run:
	"openssl s_client -quiet -connect hostname:443
	-servername hostname 2>/dev/null" and pipe its data
	through it. -servername is not used if hostname is numeric.
	Note inconvenient API: host resolution is done twice,
	and there is no guarantee openssl's idea of IPv6 address
	format is the same as ours.
	Another problem is that s_client prints debug information
	to stderr, and it needs to be suppressed. This means
	all error messages get suppressed too.
	openssl is also a big binary, often dynamically linked
	against ~15 libraries.

	If openssl can't be executed, internal TLS code will be used
	(if you enabled it); if openssl can be executed but fails later,
	wget can't detect this, and download will fail.

	By default TLS verification is performed, unless
	--no-check-certificate option is passed.
config WHOIS
	bool "whois (6.3 kb)"
	default y
	help
	whois is a client for the whois directory service
config ZCIP
	bool "zcip (8.4 kb)"
	default y
	select FEATURE_SYSLOG
	help
	ZCIP provides ZeroConf IPv4 address selection, according to RFC 3927.
	It's a daemon that allocates and defends a dynamically assigned
	address on the 169.254/16 network, requiring no system administrator.

	See http://www.zeroconf.org for further details, and "zcip.script"
	in the busybox examples.

source networking/udhcp/Config.in

config IFUPDOWN_UDHCPC_CMD_OPTIONS
	string "ifup udhcpc command line options"
	default "-R -n"
	depends on IFUP || IFDOWN
	help
	Command line options to pass to udhcpc from ifup.
	Intended to alter options not available in /etc/network/interfaces.
	(IE: --syslog --background etc...)

endmenu
