# DO NOT EDIT. This file is generated from Config.src # # For a description of the syntax of this configuration file, # see docs/Kconfig-language.txt. # menu "Networking Utilities" config FEATURE_IPV6 bool "Enable IPv6 support" default y help Enable IPv6 support in busybox. This adds IPv6 support in the networking applets. config FEATURE_UNIX_LOCAL bool "Enable Unix domain socket support (usually not needed)" default n help Enable Unix domain socket support in all busybox networking applets. Address of the form local:/path/to/unix/socket will be recognized. This extension is almost never used in real world usage. You most likely want to say N. config FEATURE_PREFER_IPV4_ADDRESS bool "Prefer IPv4 addresses from DNS queries" default y depends on FEATURE_IPV6 help Use IPv4 address of network host if it has one. If this option is off, the first returned address will be used. This may cause problems when your DNS server is IPv6-capable and is returning IPv6 host addresses too. If IPv6 address precedes IPv4 one in DNS reply, busybox network applets (e.g. wget) will use IPv6 address. On an IPv6-incapable host or network applets will fail to connect to the host using IPv6 address. config VERBOSE_RESOLUTION_ERRORS bool "Verbose resolution errors" default n help Enable if you are not satisfied with simplistic "can't resolve 'hostname.com'" and want to know more. This may increase size of your executable a bit. config FEATURE_ETC_NETWORKS bool "Support /etc/networks" default n help Enable support for network names in /etc/networks. This is a rarely used feature which allows you to use names instead of IP/mask pairs in route command. config FEATURE_ETC_SERVICES bool "Consult /etc/services even for well-known ports" default n help Look up e.g. "telnet" and "http" in /etc/services file instead of assuming ports 23 and 80. This is almost never necessary (everybody uses standard ports), and it makes sense to avoid reading this file. If you disable this option, in the cases where port is explicitly specified as a service name (e.g. "telnet HOST PORTNAME"), it will still be looked up in /etc/services. config FEATURE_HWIB bool "Support infiniband HW" default y help Support for printing infiniband addresses in network applets. config FEATURE_TLS_SHA1 bool "In TLS code, support ciphers which use deprecated SHA1" depends on TLS default n help Selecting this option increases interoperability with very old servers, but slightly increases code size. Most TLS servers support SHA256 today (2018), since SHA1 is considered possibly insecure (although not yet definitely broken). config ARP bool "arp (10 kb)" default y help Manipulate the system ARP cache. config ARPING bool "arping (9 kb)" default y help Ping hosts by ARP packets. config BRCTL bool "brctl (4.7 kb)" default y help Manage ethernet bridges. Supports addbr/delbr and addif/delif. config FEATURE_BRCTL_FANCY bool "Fancy options" default y depends on BRCTL help Add support for extended option like: setageing, setfd, sethello, setmaxage, setpathcost, setportprio, setbridgeprio, stp This adds about 600 bytes. config FEATURE_BRCTL_SHOW bool "Support show" default y depends on BRCTL && FEATURE_BRCTL_FANCY help Add support for option which prints the current config: show config DNSD bool "dnsd (9.8 kb)" default y help Small and static DNS server daemon. config ETHER_WAKE bool "ether-wake (4.9 kb)" default y help Send a magic packet to wake up sleeping machines. config FTPD bool "ftpd (30 kb)" default y help Simple FTP daemon. You have to run it via inetd. config FEATURE_FTPD_WRITE bool "Enable -w (upload commands)" default y depends on FTPD help Enable -w option. "ftpd -w" will accept upload commands such as STOR, STOU, APPE, DELE, MKD, RMD, rename commands. config FEATURE_FTPD_ACCEPT_BROKEN_LIST bool "Enable workaround for RFC-violating clients" default y depends on FTPD help Some ftp clients (among them KDE's Konqueror) issue illegal "LIST -l" requests. This option works around such problems. It might prevent you from listing files starting with "-" and it increases the code size by ~40 bytes. Most other ftp servers seem to behave similar to this. config FEATURE_FTPD_AUTHENTICATION bool "Enable authentication" default y depends on FTPD help Require login, and change to logged in user's UID:GID before accessing any files. Option "-a USER" allows "anonymous" logins (treats them as if USER logged in). If this option is not selected, ftpd runs with the rights of the user it was started under, and does not require login. Take care to not launch it under root. config FTPGET bool "ftpget (7.8 kb)" default y help Retrieve a remote file via FTP. config FTPPUT bool "ftpput (7.5 kb)" default y help Store a remote file via FTP. config FEATURE_FTPGETPUT_LONG_OPTIONS bool "Enable long options in ftpget/ftpput" default y depends on LONG_OPTS && (FTPGET || FTPPUT) config HOSTNAME bool "hostname (5.5 kb)" default y help Show or set the system's host name. config DNSDOMAINNAME bool "dnsdomainname (3.6 kb)" default y help Alias to "hostname -d". config HTTPD bool "httpd (32 kb)" default y help HTTP server. config FEATURE_HTTPD_PORT_DEFAULT int "Default port" default 80 range 1 65535 depends on HTTPD config FEATURE_HTTPD_RANGES bool "Support 'Ranges:' header" default y depends on HTTPD help Makes httpd emit "Accept-Ranges: bytes" header and understand "Range: bytes=NNN-[MMM]" header. Allows for resuming interrupted downloads, seeking in multimedia players etc. config FEATURE_HTTPD_SETUID bool "Enable -u option" default y depends on HTTPD help This option allows the server to run as a specific user rather than defaulting to the user that starts the server. Use of this option requires special privileges to change to a different user. config FEATURE_HTTPD_BASIC_AUTH bool "Enable HTTP authentication" default y depends on HTTPD help Utilizes password settings from /etc/httpd.conf for basic authentication on a per url basis. Example for httpd.conf file: /adm:toor:PaSsWd config FEATURE_HTTPD_AUTH_MD5 bool "Support MD5-encrypted passwords in HTTP authentication" default y depends on FEATURE_HTTPD_BASIC_AUTH help Enables encrypted passwords, and wildcard user/passwords in httpd.conf file. User '*' means 'any system user name is ok', password of '*' means 'use system password for this user' Examples: /adm:toor:$1$P/eKnWXS$aI1aPGxT.dJD5SzqAKWrF0 /adm:root:* /wiki:*:* config FEATURE_HTTPD_CGI bool "Support Common Gateway Interface (CGI)" default y depends on HTTPD help This option allows scripts and executables to be invoked when specific URLs are requested. config FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR bool "Support running scripts through an interpreter" default y depends on FEATURE_HTTPD_CGI help This option enables support for running scripts through an interpreter. Turn this on if you want PHP scripts to work properly. You need to supply an additional line in your httpd.conf file: *.php:/path/to/your/php config FEATURE_HTTPD_SET_REMOTE_PORT_TO_ENV bool "Set REMOTE_PORT environment variable for CGI" default y depends on FEATURE_HTTPD_CGI help Use of this option can assist scripts in generating references that contain a unique port number. config FEATURE_HTTPD_ENCODE_URL_STR bool "Enable -e option (useful for CGIs written as shell scripts)" default y depends on HTTPD help This option allows html encoding of arbitrary strings for display by the browser. Output goes to stdout. For example, httpd -e "" produces "<Hello World>". config FEATURE_HTTPD_ERROR_PAGES bool "Support custom error pages" default y depends on HTTPD help This option allows you to define custom error pages in the configuration file instead of the default HTTP status error pages. For instance, if you add the line: E404:/path/e404.html in the config file, the server will respond the specified '/path/e404.html' file instead of the terse '404 NOT FOUND' message. config FEATURE_HTTPD_PROXY bool "Support reverse proxy" default y depends on HTTPD help This option allows you to define URLs that will be forwarded to another HTTP server. To setup add the following line to the configuration file P:/url/:http://hostname[:port]/new/path/ Then a request to /url/myfile will be forwarded to http://hostname[:port]/new/path/myfile. config FEATURE_HTTPD_GZIP bool "Support GZIP content encoding" default y depends on HTTPD help Makes httpd send files using GZIP content encoding if the client supports it and a pre-compressed .gz exists. config FEATURE_HTTPD_ETAG bool "Support caching via ETag header" default y depends on HTTPD help If server responds with ETag then next time client (browser) resend it via If-None-Match header. Then httpd will check if file wasn't modified and if not, return 304 Not Modified status code. The ETag value is constructed from last modification date in unix epoch, and size: "hex(last_mod)-hex(file_size)". It's not completely reliable as hash functions but fair enough. config FEATURE_HTTPD_LAST_MODIFIED bool "Add Last-Modified header to response" default y depends on HTTPD help The Last-Modified header is used for cache validation. The client sends last seen mtime to server in If-Modified-Since. Both headers MUST be an RFC 1123 formatted, which is hard to parse. Use ETag header instead. config FEATURE_HTTPD_DATE bool "Add Date header to response" default y depends on HTTPD help RFC2616 says that server MUST add Date header to response. But it is almost useless and can be omitted. config FEATURE_HTTPD_ACL_IP bool "ACL IP" default y depends on HTTPD help Support IP deny/allow rules config IFCONFIG bool "ifconfig (12 kb)" default y help Ifconfig is used to configure the kernel-resident network interfaces. config FEATURE_IFCONFIG_STATUS bool "Enable status reporting output (+7k)" default y depends on IFCONFIG help If ifconfig is called with no arguments it will display the status of the currently active interfaces. config FEATURE_IFCONFIG_SLIP bool "Enable slip-specific options \"keepalive\" and \"outfill\"" default y depends on IFCONFIG help Allow "keepalive" and "outfill" support for SLIP. If you're not planning on using serial lines, leave this unchecked. config FEATURE_IFCONFIG_MEMSTART_IOADDR_IRQ bool "Enable options \"mem_start\", \"io_addr\", and \"irq\"" default y depends on IFCONFIG help Allow the start address for shared memory, start address for I/O, and/or the interrupt line used by the specified device. config FEATURE_IFCONFIG_HW bool "Enable option \"hw\" (ether only)" default y depends on IFCONFIG help Set the hardware address of this interface, if the device driver supports this operation. Currently, we only support the 'ether' class. config FEATURE_IFCONFIG_BROADCAST_PLUS bool "Set the broadcast automatically" default y depends on IFCONFIG help Setting this will make ifconfig attempt to find the broadcast automatically if the value '+' is used. config IFENSLAVE bool "ifenslave (13 kb)" default y help Userspace application to bind several interfaces to a logical interface (use with kernel bonding driver). config IFPLUGD bool "ifplugd (10 kb)" default y help Network interface plug detection daemon. config IFUP bool "ifup (14 kb)" default y help Activate the specified interfaces. This applet makes use of either "ifconfig" and "route" or the "ip" command to actually configure network interfaces. Therefore, you will probably also want to enable either IFCONFIG and ROUTE, or enable FEATURE_IFUPDOWN_IP and the various IP options. Of course you could use non-busybox versions of these programs, so against my better judgement (since this will surely result in plenty of support questions on the mailing list), I do not force you to enable these additional options. It is up to you to supply either "ifconfig", "route" and "run-parts" or the "ip" command, either via busybox or via standalone utilities. config IFDOWN bool "ifdown (13 kb)" default y help Deactivate the specified interfaces. config IFUPDOWN_IFSTATE_PATH string "Absolute path to ifstate file" default "/var/run/ifstate" depends on IFUP || IFDOWN help ifupdown keeps state information in a file called ifstate. Typically it is located in /var/run/ifstate, however some distributions tend to put it in other places (debian, for example, uses /etc/network/run/ifstate). This config option defines location of ifstate. config FEATURE_IFUPDOWN_IP bool "Use ip tool (else ifconfig/route is used)" default y depends on IFUP || IFDOWN help Use the iproute "ip" command to implement "ifup" and "ifdown", rather than the default of using the older "ifconfig" and "route" utilities. If Y: you must install either the full-blown iproute2 package or enable "ip" applet in busybox, or the "ifup" and "ifdown" applets will not work. If N: you must install either the full-blown ifconfig and route utilities, or enable these applets in busybox. config FEATURE_IFUPDOWN_IPV4 bool "Support IPv4" default y depends on IFUP || IFDOWN help If you want ifup/ifdown to talk IPv4, leave this on. config FEATURE_IFUPDOWN_IPV6 bool "Support IPv6" default y depends on (IFUP || IFDOWN) && FEATURE_IPV6 help If you need support for IPv6, turn this option on. config FEATURE_IFUPDOWN_MAPPING bool "Enable mapping support" default y depends on IFUP || IFDOWN help This enables support for the "mapping" stanza, unless you have a weird network setup you don't need it. config FEATURE_IFUPDOWN_EXTERNAL_DHCP bool "Support external DHCP clients" default n depends on IFUP || IFDOWN help This enables support for the external dhcp clients. Clients are tried in the following order: dhcpcd, dhclient, pump and udhcpc. Otherwise, if udhcpc applet is enabled, it is used. Otherwise, ifup/ifdown will have no support for DHCP. config INETD bool "inetd (18 kb)" default y select FEATURE_SYSLOG help Internet superserver daemon config FEATURE_INETD_SUPPORT_BUILTIN_ECHO bool "Support echo service on port 7" default y depends on INETD help Internal service which echoes data back. Activated by configuration lines like these: echo stream tcp nowait root internal echo dgram udp wait root internal config FEATURE_INETD_SUPPORT_BUILTIN_DISCARD bool "Support discard service on port 8" default y depends on INETD help Internal service which discards all input. Activated by configuration lines like these: discard stream tcp nowait root internal discard dgram udp wait root internal config FEATURE_INETD_SUPPORT_BUILTIN_TIME bool "Support time service on port 37" default y depends on INETD help Internal service which returns big-endian 32-bit number of seconds passed since 1900-01-01. The number wraps around on overflow. Activated by configuration lines like these: time stream tcp nowait root internal time dgram udp wait root internal config FEATURE_INETD_SUPPORT_BUILTIN_DAYTIME bool "Support daytime service on port 13" default y depends on INETD help Internal service which returns human-readable time. Activated by configuration lines like these: daytime stream tcp nowait root internal daytime dgram udp wait root internal config FEATURE_INETD_SUPPORT_BUILTIN_CHARGEN bool "Support chargen service on port 19" default y depends on INETD help Internal service which generates endless stream of all ASCII chars beetween space and char 126. Activated by configuration lines like these: chargen stream tcp nowait root internal chargen dgram udp wait root internal config FEATURE_INETD_RPC bool "Support RPC services" default n # very rarely used, and needs Sun RPC support in libc depends on INETD help Support Sun-RPC based services config IP bool "ip (35 kb)" default y help The "ip" applet is a TCP/IP interface configuration and routing utility. Short forms (enabled below) are busybox-specific extensions. The standard "ip" utility does not provide them. If you are trying to be portable, it's better to use "ip CMD" forms. config IPADDR bool "ipaddr (14 kb)" default y select FEATURE_IP_ADDRESS help Short form of "ip addr" config IPLINK bool "iplink (17 kb)" default y select FEATURE_IP_LINK help Short form of "ip link" config IPROUTE bool "iproute (15 kb)" default y select FEATURE_IP_ROUTE help Short form of "ip route" config IPTUNNEL bool "iptunnel (9.6 kb)" default y select FEATURE_IP_TUNNEL help Short form of "ip tunnel" config IPRULE bool "iprule (10 kb)" default y select FEATURE_IP_RULE help Short form of "ip rule" config IPNEIGH bool "ipneigh (8.3 kb)" default y select FEATURE_IP_NEIGH help Short form of "ip neigh" config FEATURE_IP_ADDRESS bool "ip address" default y depends on IP || IPADDR help Address manipulation support for the "ip" applet. config FEATURE_IP_LINK bool "ip link" default y depends on IP || IPLINK help Configure network devices with "ip". config FEATURE_IP_ROUTE bool "ip route" default y depends on IP || IPROUTE help Add support for routing table management to "ip". config FEATURE_IP_ROUTE_DIR string "ip route configuration directory" default "/etc/iproute2" depends on FEATURE_IP_ROUTE help Location of the "ip" applet routing configuration. config FEATURE_IP_TUNNEL bool "ip tunnel" default y depends on IP || IPTUNNEL help Add support for tunneling commands to "ip". config FEATURE_IP_RULE bool "ip rule" default y depends on IP || IPRULE help Add support for rule commands to "ip". config FEATURE_IP_NEIGH bool "ip neighbor" default y depends on IP || IPNEIGH help Add support for neighbor commands to "ip". config FEATURE_IP_RARE_PROTOCOLS bool "Support displaying rarely used link types" default n depends on IP || IPADDR || IPLINK || IPROUTE || IPTUNNEL || IPRULE || IPNEIGH help If you are not going to use links of type "frad", "econet", "bif" etc, you probably don't need to enable this. Ethernet, wireless, infrared, ppp/slip, ip tunnelling link types are supported without this option selected. config IPCALC bool "ipcalc (4.4 kb)" default y help ipcalc takes an IP address and netmask and calculates the resulting broadcast, network, and host range. config FEATURE_IPCALC_LONG_OPTIONS bool "Enable long options" default y depends on IPCALC && LONG_OPTS config FEATURE_IPCALC_FANCY bool "Fancy IPCALC, more options, adds 1 kbyte" default y depends on IPCALC help Adds the options hostname, prefix and silent to the output of "ipcalc". config FAKEIDENTD bool "fakeidentd (8.7 kb)" default y select FEATURE_SYSLOG help fakeidentd listens on the ident port and returns a predefined fake value on any query. config NAMEIF bool "nameif (6.6 kb)" default y select FEATURE_SYSLOG help nameif is used to rename network interface by its MAC address. Renamed interfaces MUST be in the down state. It is possible to use a file (default: /etc/mactab) with list of new interface names and MACs. Maximum interface name length: IFNAMSIZ = 16 File fields are separated by space or tab. File format: # Comment new_interface_name XX:XX:XX:XX:XX:XX config FEATURE_NAMEIF_EXTENDED bool "Extended nameif" default y depends on NAMEIF help This extends the nameif syntax to support the bus_info, driver, phyaddr selectors. The syntax is compatible to the normal nameif. File format: new_interface_name driver=asix bus=usb-0000:00:08.2-3 new_interface_name bus=usb-0000:00:08.2-3 00:80:C8:38:91:B5 new_interface_name phy_address=2 00:80:C8:38:91:B5 new_interface_name mac=00:80:C8:38:91:B5 new_interface_name 00:80:C8:38:91:B5 config NBDCLIENT bool "nbd-client (6 kb)" default y help Network block device client config NC bool "nc (11 kb)" default y help A simple Unix utility which reads and writes data across network connections. config NETCAT bool "netcat (11 kb)" default n help Alias to nc. config NC_SERVER bool "Netcat server options (-l)" default y depends on NC || NETCAT help Allow netcat to act as a server. config NC_EXTRA bool "Netcat extensions (-eiw and -f FILE)" default y depends on NC || NETCAT help Add -e (support for executing the rest of the command line after making or receiving a successful connection), -i (delay interval for lines sent), -w (timeout for initial connection). config NC_110_COMPAT bool "Netcat 1.10 compatibility (+2.5k)" default y depends on NC || NETCAT help This option makes nc closely follow original nc-1.10. The code is about 2.5k bigger. It enables -s ADDR, -n, -u, -v, -o FILE, -z options, but loses busybox-specific extensions: -f FILE. config NETSTAT bool "netstat (10 kb)" default y help netstat prints information about the Linux networking subsystem. config FEATURE_NETSTAT_WIDE bool "Enable wide output" default y depends on NETSTAT help Add support for wide columns. Useful when displaying IPv6 addresses (-W option). config FEATURE_NETSTAT_PRG bool "Enable PID/Program name output" default y depends on NETSTAT help Add support for -p flag to print out PID and program name. +700 bytes of code. config NSLOOKUP bool "nslookup (9.7 kb)" default y help nslookup is a tool to query Internet name servers. config FEATURE_NSLOOKUP_BIG bool "Use internal resolver code instead of libc" depends on NSLOOKUP default y config FEATURE_NSLOOKUP_LONG_OPTIONS bool "Enable long options" default y depends on FEATURE_NSLOOKUP_BIG && LONG_OPTS config NTPD bool "ntpd (22 kb)" default y help The NTP client/server daemon. config FEATURE_NTPD_SERVER bool "Make ntpd usable as a NTP server" default y depends on NTPD help Make ntpd usable as a NTP server. If you disable this option ntpd will be usable only as a NTP client. config FEATURE_NTPD_CONF bool "Make ntpd understand /etc/ntp.conf" default y depends on NTPD help Make ntpd look in /etc/ntp.conf for peers. Only "server address" is supported. config FEATURE_NTP_AUTH bool "Support md5/sha1 message authentication codes" default y depends on NTPD config PING bool "ping (10 kb)" default y help ping uses the ICMP protocol's mandatory ECHO_REQUEST datagram to elicit an ICMP ECHO_RESPONSE from a host or gateway. config PING6 bool "ping6 (11 kb)" default y depends on FEATURE_IPV6 help Alias to "ping -6". config FEATURE_FANCY_PING bool "Enable fancy ping output" default y depends on PING || PING6 help With this option off, ping will say "HOST is alive!" or terminate with SIGALRM in 5 seconds otherwise. No command-line options will be recognized. config PSCAN bool "pscan (6 kb)" default y help Simple network port scanner. config ROUTE bool "route (8.7 kb)" default y help Route displays or manipulates the kernel's IP routing tables. config SLATTACH bool "slattach (6.2 kb)" default y help slattach configures serial line as SLIP network interface. config SSL_CLIENT bool "ssl_client (25 kb)" default y select TLS help This tool pipes data to/from a socket, TLS-encrypting it. config TC bool "tc (8.3 kb)" default y help Show / manipulate traffic control settings config FEATURE_TC_INGRESS bool "Enable ingress" default y depends on TC config TCPSVD bool "tcpsvd (14 kb)" default y help tcpsvd listens on a TCP port and runs a program for each new connection. config UDPSVD bool "udpsvd (13 kb)" default y help udpsvd listens on an UDP port and runs a program for each new connection. config TELNET bool "telnet (8.8 kb)" default y help Telnet is an interface to the TELNET protocol, but is also commonly used to test other simple protocols. config FEATURE_TELNET_TTYPE bool "Pass TERM type to remote host" default y depends on TELNET help Setting this option will forward the TERM environment variable to the remote host you are connecting to. This is useful to make sure that things like ANSI colors and other control sequences behave. config FEATURE_TELNET_AUTOLOGIN bool "Pass USER type to remote host" default y depends on TELNET help Setting this option will forward the USER environment variable to the remote host you are connecting to. This is useful when you need to log into a machine without telling the username (autologin). This option enables '-a' and '-l USER' options. config FEATURE_TELNET_WIDTH bool "Enable window size autodetection" default y depends on TELNET config TELNETD bool "telnetd (12 kb)" default y select FEATURE_SYSLOG help A daemon for the TELNET protocol, allowing you to log onto the host running the daemon. Please keep in mind that the TELNET protocol sends passwords in plain text. If you can't afford the space for an SSH daemon and you trust your network, you may say 'y' here. As a more secure alternative, you should seriously consider installing the very small Dropbear SSH daemon instead: http://matt.ucc.asn.au/dropbear/dropbear.html Note that for busybox telnetd to work you need several things: First of all, your kernel needs: CONFIG_UNIX98_PTYS=y Next, you need a /dev/pts directory on your root filesystem: $ ls -ld /dev/pts drwxr-xr-x 2 root root 0 Sep 23 13:21 /dev/pts/ Next you need the pseudo terminal master multiplexer /dev/ptmx: $ ls -la /dev/ptmx crw-rw-rw- 1 root tty 5, 2 Sep 23 13:55 /dev/ptmx Any /dev/ttyp[0-9]* files you may have can be removed. Next, you need to mount the devpts filesystem on /dev/pts using: mount -t devpts devpts /dev/pts You need to be sure that busybox has LOGIN and FEATURE_SUID enabled. And finally, you should make certain that busybox has been installed setuid root: chown root.root /bin/busybox chmod 4755 /bin/busybox with all that done, telnetd _should_ work.... config FEATURE_TELNETD_STANDALONE bool "Support standalone telnetd (not inetd only)" default y depends on TELNETD help Selecting this will make telnetd able to run standalone. config FEATURE_TELNETD_PORT_DEFAULT int "Default port" default 23 range 1 65535 depends on FEATURE_TELNETD_STANDALONE config FEATURE_TELNETD_INETD_WAIT bool "Support -w SEC option (inetd wait mode)" default y depends on FEATURE_TELNETD_STANDALONE help This option allows you to run telnetd in "inet wait" mode. Example inetd.conf line (note "wait", not usual "nowait"): telnet stream tcp wait root /bin/telnetd telnetd -w10 In this example, inetd passes _listening_ socket_ as fd 0 to telnetd when connection appears. telnetd will wait for connections until all existing connections are closed, and no new connections appear during 10 seconds. Then it exits, and inetd continues to listen for new connections. This option is rarely used. "tcp nowait" is much more usual way of running tcp services, including telnetd. You most probably want to say N here. config TFTP bool "tftp (11 kb)" default y help Trivial File Transfer Protocol client. TFTP is usually used for simple, small transfers such as a root image for a network-enabled bootloader. config FEATURE_TFTP_PROGRESS_BAR bool "Enable progress bar" default y depends on TFTP config FEATURE_TFTP_HPA_COMPAT bool "tftp-hpa compat (support -c get/put FILE)" default y depends on TFTP config TFTPD bool "tftpd (10 kb)" default y help Trivial File Transfer Protocol server. It expects that stdin is a datagram socket and a packet is already pending on it. It will exit after one transfer. In other words: it should be run from inetd in nowait mode, or from udpsvd. Example: "udpsvd -E 0 69 tftpd DIR" config FEATURE_TFTP_GET bool "Enable 'tftp get' and/or tftpd upload code" default y depends on TFTP || TFTPD help Add support for the GET command within the TFTP client. This allows a client to retrieve a file from a TFTP server. Also enable upload support in tftpd, if tftpd is selected. Note: this option does _not_ make tftpd capable of download (the usual operation people need from it)! config FEATURE_TFTP_PUT bool "Enable 'tftp put' and/or tftpd download code" default y depends on TFTP || TFTPD help Add support for the PUT command within the TFTP client. This allows a client to transfer a file to a TFTP server. Also enable download support in tftpd, if tftpd is selected. config FEATURE_TFTP_BLOCKSIZE bool "Enable 'blksize' and 'tsize' protocol options" default y depends on TFTP || TFTPD help Allow tftp to specify block size, and tftpd to understand "blksize" and "tsize" options. config TFTP_DEBUG bool "Enable debug" default n depends on TFTP || TFTPD help Make tftp[d] print debugging messages on stderr. This is useful if you are diagnosing a bug in tftp[d]. config TLS bool #No description makes it a hidden option default n config TRACEROUTE bool "traceroute (11 kb)" default y help Utility to trace the route of IP packets. config TRACEROUTE6 bool "traceroute6 (13 kb)" default y depends on FEATURE_IPV6 help Utility to trace the route of IPv6 packets. config FEATURE_TRACEROUTE_VERBOSE bool "Enable verbose output" default y depends on TRACEROUTE || TRACEROUTE6 help Add some verbosity to traceroute. This includes among other things hostnames and ICMP response types. config FEATURE_TRACEROUTE_USE_ICMP bool "Enable -I option (use ICMP instead of UDP)" default y depends on TRACEROUTE || TRACEROUTE6 config TUNCTL bool "tunctl (6.2 kb)" default y help tunctl creates or deletes tun devices. config FEATURE_TUNCTL_UG bool "Support owner:group assignment" default y depends on TUNCTL help Allow to specify owner and group of newly created interface. 340 bytes of pure bloat. Say no here. config VCONFIG bool "vconfig (2.3 kb)" default y help Creates, removes, and configures VLAN interfaces config WGET bool "wget (38 kb)" default y help wget is a utility for non-interactive download of files from HTTP and FTP servers. config FEATURE_WGET_LONG_OPTIONS bool "Enable long options" default y depends on WGET && LONG_OPTS config FEATURE_WGET_STATUSBAR bool "Enable progress bar (+2k)" default y depends on WGET config FEATURE_WGET_FTP bool "Enable FTP protocol (+1k)" default y depends on WGET help To support FTPS, enable FEATURE_WGET_HTTPS as well. config FEATURE_WGET_AUTHENTICATION bool "Enable HTTP authentication" default y depends on WGET help Support authenticated HTTP transfers. config FEATURE_WGET_TIMEOUT bool "Enable timeout option -T SEC" default y depends on WGET help Supports network read and connect timeouts for wget, so that wget will give up and timeout, through the -T command line option. Currently only connect and network data read timeout are supported (i.e., timeout is not applied to the DNS query). When FEATURE_WGET_LONG_OPTIONS is also enabled, the --timeout option will work in addition to -T. config FEATURE_WGET_HTTPS bool "Support HTTPS using internal TLS code" default y depends on WGET select TLS help wget will use internal TLS code to connect to https:// URLs. It also enables FTPS support, but it's not well tested yet. Note: On NOMMU machines, ssl_helper applet should be available in the $PATH for this to work. Make sure to select that applet. Note: currently, TLS code only makes TLS I/O work, it does *not* check that the peer is who it claims to be, etc. IOW: it uses peer-supplied public keys to establish encryption and signing keys, then encrypts and signs outgoing data and decrypts incoming data. It does not check signature hashes on the incoming data: this means that attackers manipulating TCP packets can send altered data and we unknowingly receive garbage. (This check might be relatively easy to add). It does not check public key's certificate: this means that the peer may be an attacker impersonating the server we think we are talking to. If you think this is unacceptable, consider this. As more and more servers switch to HTTPS-only operation, without such "crippled" TLS code it is *impossible* to simply download a kernel source from kernel.org. Which can in real world translate into "my small automatic tooling to build cross-compilers from sources no longer works, I need to additionally keep a local copy of ~4 megabyte source tarball of a SSL library and ~2 megabyte source of wget, need to compile and built both before I can download anything. All this despite the fact that the build is done in a QEMU sandbox on a machine with absolutely nothing worth stealing, so I don't care if someone would go to a lot of trouble to intercept my HTTPS download to send me an altered kernel tarball". If you still think this is unacceptable, send patches. If you still think this is unacceptable, do not want to send patches, but do want to waste bandwidth expaining how wrong it is, you will be ignored. FEATURE_WGET_OPENSSL does implement TLS verification using the certificates available to OpenSSL. config FEATURE_WGET_OPENSSL bool "Try to connect to HTTPS using openssl" default y depends on WGET help Try to use openssl to handle HTTPS. OpenSSL has a simple SSL client for debug purposes. If you select this option, wget will effectively run: "openssl s_client -quiet -connect hostname:443 -servername hostname 2>/dev/null" and pipe its data through it. -servername is not used if hostname is numeric. Note inconvenient API: host resolution is done twice, and there is no guarantee openssl's idea of IPv6 address format is the same as ours. Another problem is that s_client prints debug information to stderr, and it needs to be suppressed. This means all error messages get suppressed too. openssl is also a big binary, often dynamically linked against ~15 libraries. If openssl can't be executed, internal TLS code will be used (if you enabled it); if openssl can be executed but fails later, wget can't detect this, and download will fail. By default TLS verification is performed, unless --no-check-certificate option is passed. config WHOIS bool "whois (6.3 kb)" default y help whois is a client for the whois directory service config ZCIP bool "zcip (8.4 kb)" default y select FEATURE_SYSLOG help ZCIP provides ZeroConf IPv4 address selection, according to RFC 3927. It's a daemon that allocates and defends a dynamically assigned address on the 169.254/16 network, requiring no system administrator. See http://www.zeroconf.org for further details, and "zcip.script" in the busybox examples. source networking/udhcp/Config.in config IFUPDOWN_UDHCPC_CMD_OPTIONS string "ifup udhcpc command line options" default "-R -n" depends on IFUP || IFDOWN help Command line options to pass to udhcpc from ifup. Intended to alter options not available in /etc/network/interfaces. (IE: --syslog --background etc...) endmenu