2 # Copyright (C) 2006-2010 OpenWrt.org
4 # This is free software, licensed under the GNU General Public License v2.
5 # See /LICENSE for more information.
8 include $(TOPDIR
)/rules.mk
9 include $(INCLUDE_DIR
)/kernel.mk
15 PKG_MD5SUM
:=c67cf30e281a924def6426be0973df56
16 PKG_SOURCE
:=$(PKG_NAME
)-$(PKG_VERSION
).
tar.bz2
17 PKG_SOURCE_URL
:=http
://www.netfilter.org
/projects
/iptables
/files \
18 ftp
://ftp.be.netfilter.org
/pub
/netfilter
/iptables
/ \
19 ftp
://ftp.de.netfilter.org
/pub
/netfilter
/iptables
/ \
20 ftp
://ftp.no.netfilter.org
/pub
/netfilter
/iptables
/
24 include $(INCLUDE_DIR
)/package.mk
26 -include $(LINUX_DIR
)/.config
27 include $(INCLUDE_DIR
)/netfilter.mk
28 STAMP_CONFIGURED
:=$(strip $(STAMP_CONFIGURED
))_
$(shell grep
'NETFILTER' $(LINUX_DIR
)/.config | md5s
)
32 define Package
/iptables
/Default
35 URL
:=http
://netfilter.org
/
38 define Package
/iptables
/Module
39 $(call Package
/iptables
/Default
)
40 DEPENDS
:=iptables
$(1)
43 define Package
/iptables
44 $(call Package
/iptables
/Default
)
45 TITLE
:=IPv4 firewall administration tool
47 DEPENDS
+= +kmod-ipt-core
+libip4tc
+libxtables
50 define Package
/iptables
/description
51 IPv4 firewall administration tool.
62 define Package
/iptables-mod-conntrack
63 $(call Package
/iptables
/Module
, +kmod-ipt-conntrack
)
64 TITLE
:=Basic connection tracking extensions
67 define Package
/iptables-mod-conntrack
/description
68 Basic iptables extensions for connection tracking.
75 define Package
/iptables-mod-conntrack-extra
76 $(call Package
/iptables
/Module
, +kmod-ipt-conntrack-extra
)
77 TITLE
:=Extra connection tracking extensions
80 define Package
/iptables-mod-conntrack-extra
/description
81 Extra iptables extensions for connection tracking.
85 - libipt_connmark
/CONNMARK
88 define Package
/iptables-mod-filter
89 $(call Package
/iptables
/Module
, +kmod-ipt-filter
)
90 TITLE
:=Content inspection extensions
93 define Package
/iptables-mod-filter
/description
94 iptables extensions for packet content inspection.
100 define Package
/iptables-mod-imq
101 $(call Package
/iptables
/Module
, +kmod-ipt-imq
)
105 define Package
/iptables-mod-imq
/description
106 iptables extension for IMQ support.
111 define Package
/iptables-mod-ipopt
112 $(call Package
/iptables
/Module
, +kmod-ipt-ipopt
)
113 TITLE
:=IP
/Packet option extensions
116 define Package
/iptables-mod-ipopt
/description
117 iptables extensions for matching
/changing IP packet options.
132 define Package
/iptables-mod-ipsec
133 $(call Package
/iptables
/Module
, +kmod-ipt-ipsec
)
134 TITLE
:=IPsec extensions
137 define Package
/iptables-mod-ipsec
/description
138 iptables extensions for matching ipsec traffic.
145 define Package
/iptables-mod-ipset
146 $(call Package
/iptables
/Module
, @LINUX_2_6
)
147 TITLE
:=IPset iptables extensions
150 define Package
/iptables-mod-ipset
/description
151 IPset iptables extensions.
157 define Package
/iptables-mod-nat
158 $(call Package
/iptables
/Module
, +kmod-ipt-nat
)
159 TITLE
:=Basic NAT extensions
162 define Package
/iptables-mod-nat
/description
163 iptables extensions for basic NAT targets.
170 define Package
/iptables-mod-nat-extra
171 $(call Package
/iptables
/Module
, +kmod-ipt-nat-extra
)
172 TITLE
:=Extra NAT extensions
175 define Package
/iptables-mod-nat-extra
/description
176 iptables extensions for extra NAT targets.
181 define Package
/iptables-mod-ulog
182 $(call Package
/iptables
/Module
, +kmod-ipt-ulog
)
183 TITLE
:=user-space packet logging
186 define Package
/iptables-mod-ulog
/description
187 iptables extensions for user-space packet logging.
192 define Package
/iptables-mod-hashlimit
193 $(call Package
/iptables
/Module
, +kmod-ipt-hashlimit
)
194 TITLE
:=hashlimit matching
197 define Package
/iptables-mod-hashlimit
/description
198 iptables extensions for hashlimit matching
203 define Package
/iptables-mod-iprange
204 $(call Package
/iptables
/Module
, +kmod-ipt-iprange
)
205 TITLE
:=IP range extension
208 define Package
/iptables-mod-iprange
/description
209 iptables extensions for matching ip ranges.
214 define Package
/iptables-mod-extra
215 $(call Package
/iptables
/Module
, +kmod-ipt-extra
)
216 TITLE
:=Other extra iptables extensions
219 define Package
/iptables-mod-extra
/description
220 Other extra iptables extensions.
228 define Package
/iptables-utils
229 $(call Package
/iptables
/Module
, )
230 TITLE
:=iptables save and restore utilities
233 define Package
/ip6tables
234 $(call Package
/iptables
/Default
)
235 DEPENDS
:=+kmod-ip6tables
+libip6tc
+libxtables
237 TITLE
:=IPv6 firewall administration tool
241 define Package
/ip6tables-utils
242 $(call Package
/iptables
/Default
)
245 TITLE
:=ip6tables save and restore utilities
248 define Package
/libiptc
249 $(call Package
/iptables
/Default
)
252 DEPENDS
:=+libip4tc
+libip6tc
253 TITLE
:=IPv4
/IPv6 firewall
- shared libiptc library
(compatibility stub
)
256 define Package
/libip4tc
257 $(call Package
/iptables
/Default
)
260 TITLE
:=IPv4 firewall
- shared libiptc library
263 define Package
/libip6tc
264 $(call Package
/iptables
/Default
)
267 TITLE
:=IPv6 firewall
- shared libiptc library
270 define Package
/libxtables
271 $(call Package
/iptables
/Default
)
274 TITLE
:=IPv4
/IPv6 firewall
- shared xtables library
279 -I
$(PKG_BUILD_DIR
)/include \
280 -I
$(LINUX_DIR
)/arch
/$(LINUX_KARCH
)/include \
287 --with-kernel
="$(LINUX_DIR)" \
288 --with-xtlibdir
=/usr
/lib
/iptables
290 IPTABLES_MAKEOPTS
= \
291 $(TARGET_CONFIGURE_OPTS
) \
292 COPT_FLAGS
="$(TARGET_CFLAGS)" \
293 LDFLAGS
="-rdynamic -static-libgcc" \
294 KERNEL_DIR
="$(LINUX_DIR)" PREFIX
=/usr \
295 KBUILD_OUTPUT
="$(LINUX_DIR)" \
296 DESTDIR
="$(PKG_INSTALL_DIR)" \
300 $(INSTALL_DIR
) $(PKG_INSTALL_DIR
)
301 $(MAKE
) -C
$(PKG_BUILD_DIR
) $(IPTABLES_MAKEOPTS
)
302 $(MAKE
) -C
$(PKG_BUILD_DIR
) $(IPTABLES_MAKEOPTS
) install
303 $(MAKE
) -C
$(PKG_BUILD_DIR
)/libipq
$(IPTABLES_MAKEOPTS
)
304 $(MAKE
) -C
$(PKG_BUILD_DIR
)/libipq
$(IPTABLES_MAKEOPTS
) install
307 define Build
/InstallDev
308 $(INSTALL_DIR
) $(1)/usr
/include
309 $(INSTALL_DIR
) $(1)/usr
/include/iptables
310 $(INSTALL_DIR
) $(1)/usr
/include/net
/netfilter
312 # XXX: iptables header fixup, some headers are not installed by iptables anymore
313 $(CP
) $(PKG_BUILD_DIR
)/include/net
/netfilter
/*.h
$(1)/usr
/include/net
/netfilter
/
314 $(CP
) $(PKG_BUILD_DIR
)/include/iptables
/*.h
$(1)/usr
/include/iptables
/
315 $(CP
) $(PKG_BUILD_DIR
)/include/iptables.h
$(1)/usr
/include/
316 $(CP
) $(PKG_BUILD_DIR
)/include/libipq
/libipq.h
$(1)/usr
/include/
317 $(CP
) $(PKG_BUILD_DIR
)/include/libipulog
$(1)/usr
/include/
318 $(CP
) $(PKG_BUILD_DIR
)/include/libiptc
$(1)/usr
/include/
320 $(CP
) $(PKG_INSTALL_DIR
)/usr
/include/* $(1)/usr
/include/
321 $(INSTALL_DIR
) $(1)/usr
/lib
322 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/libxtables.so
* $(1)/usr
/lib
/
323 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/libip
*tc.so
* $(1)/usr
/lib
/
324 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/libipq.a
$(1)/usr
/lib
/
325 $(INSTALL_DIR
) $(1)/usr
/lib
/pkgconfig
326 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/pkgconfig
/xtables.
pc $(1)/usr
/lib
/pkgconfig
/
327 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/pkgconfig
/libiptc.
pc $(1)/usr
/lib
/pkgconfig
/
330 define Package
/iptables
/install
331 $(INSTALL_DIR
) $(1)/usr
/sbin
332 $(INSTALL_BIN
) $(PKG_INSTALL_DIR
)/usr
/sbin
/iptables
$(1)/usr
/sbin
/
333 $(INSTALL_DIR
) $(1)/usr
/lib
/iptables
334 (cd
$(PKG_INSTALL_DIR
)/usr
/lib
/iptables
; \
335 for m in
$(patsubst xt_
%,ipt_
%,$(IPT_BUILTIN
)) $(patsubst ipt_
%,xt_
%,$(IPT_BUILTIN
)); do \
336 if
[ -f
$(PKG_INSTALL_DIR
)/usr
/lib
/iptables
/lib
$$$${m}.so
]; then \
337 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/iptables
/lib
$$$${m}.so
$(1)/usr
/lib
/iptables
/ ;\
343 define Package
/iptables-utils
/install
344 $(INSTALL_DIR
) $(1)/usr
/sbin
345 $(INSTALL_BIN
) $(PKG_INSTALL_DIR
)/usr
/sbin
/iptables-
{save
,restore
} $(1)/usr
/sbin
/
348 define Package
/ip6tables
/install
349 $(INSTALL_DIR
) $(1)/usr
/sbin
350 $(INSTALL_BIN
) $(PKG_INSTALL_DIR
)/usr
/sbin
/ip6tables
$(1)/usr
/sbin
/
351 $(INSTALL_DIR
) $(1)/usr
/lib
/iptables
352 (cd
$(PKG_INSTALL_DIR
)/usr
/lib
/iptables
; \
353 $(CP
) libip6t_
*.so
$(1)/usr
/lib
/iptables
/ \
357 define Package
/ip6tables-utils
/install
358 $(INSTALL_DIR
) $(1)/usr
/sbin
359 $(INSTALL_BIN
) $(PKG_INSTALL_DIR
)/usr
/sbin
/ip6tables-
{save
,restore
} $(1)/usr
/sbin
/
362 define Package
/libiptc
/install
363 $(INSTALL_DIR
) $(1)/usr
/lib
364 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/libiptc.so
* $(1)/usr
/lib
/
367 define Package
/libip4tc
/install
368 $(INSTALL_DIR
) $(1)/usr
/lib
369 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/libip4tc.so
* $(1)/usr
/lib
/
372 define Package
/libip6tc
/install
373 $(INSTALL_DIR
) $(1)/usr
/lib
374 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/libip6tc.so
* $(1)/usr
/lib
/
377 define Package
/libxtables
/install
378 $(INSTALL_DIR
) $(1)/usr
/lib
379 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/libxtables.so
* $(1)/usr
/lib
/
383 define Package
/$(1)/install
384 $(INSTALL_DIR
) $$(1)/usr
/lib
/iptables
385 for m in
$(patsubst xt_
%,ipt_
%,$(2)) $(patsubst ipt_
%,xt_
%,$(2)); do \
386 if
[ -f
$(PKG_INSTALL_DIR
)/usr
/lib
/iptables
/lib
$$$$$$$${m}.so
]; then \
387 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/iptables
/lib
$$$$$$$${m}.so
$$(1)/usr
/lib
/iptables
/ ; \
393 $$(eval
$$(call BuildPackage
,$(1)))
397 $(INSTALL_DIR
) $$(1)/etc
/l7-protocols
; \
398 $(CP
) files
/l7
/*.pat
$$(1)/etc
/l7-protocols
/
401 $(eval
$(call BuildPackage
,iptables
))
402 $(eval
$(call BuildPackage
,iptables-utils
))
403 $(eval
$(call BuildPlugin
,iptables-mod-conntrack
,$(IPT_CONNTRACK-m
)))
404 $(eval
$(call BuildPlugin
,iptables-mod-conntrack-extra
,$(IPT_CONNTRACK_EXTRA-m
)))
405 $(eval
$(call BuildPlugin
,iptables-mod-extra
,$(IPT_EXTRA-m
)))
406 $(eval
$(call BuildPlugin
,iptables-mod-filter
,$(IPT_FILTER-m
),$(L7_INSTALL
)))
407 $(eval
$(call BuildPlugin
,iptables-mod-hashlimit
,$(IPT_HASHLIMIT-m
)))
408 $(eval
$(call BuildPlugin
,iptables-mod-imq
,$(IPT_IMQ-m
)))
409 $(eval
$(call BuildPlugin
,iptables-mod-ipopt
,$(IPT_IPOPT-m
)))
410 $(eval
$(call BuildPlugin
,iptables-mod-ipsec
,$(IPT_IPSEC-m
)))
411 $(eval
$(call BuildPlugin
,iptables-mod-ipset
,ipt_set ipt_SET
))
412 $(eval
$(call BuildPlugin
,iptables-mod-nat
,$(IPT_NAT-m
)))
413 $(eval
$(call BuildPlugin
,iptables-mod-nat-extra
,$(IPT_NAT_EXTRA-m
)))
414 $(eval
$(call BuildPlugin
,iptables-mod-iprange
,$(IPT_IPRANGE-m
)))
415 $(eval
$(call BuildPlugin
,iptables-mod-ulog
,$(IPT_ULOG-m
)))
416 $(eval
$(call BuildPackage
,ip6tables
))
417 $(eval
$(call BuildPackage
,ip6tables-utils
))
418 $(eval
$(call BuildPackage
,libiptc
))
419 $(eval
$(call BuildPackage
,libip4tc
))
420 $(eval
$(call BuildPackage
,libip6tc
))
421 $(eval
$(call BuildPackage
,libxtables
))