2 # Copyright (C) 2006 OpenWrt.org
4 # This is free software, licensed under the GNU General Public License v2.
5 # See /LICENSE for more information.
9 NF_MENU
:=Netfilter Extensions
10 include $(INCLUDE_DIR
)/netfilter.mk
12 define KernelPackage
/ipt-conntrack
14 TITLE
:=Modules for connection tracking
15 KCONFIG
:=$(KCONFIG_IPT_CONNTRACK
)
16 FILES
:=$(foreach mod
,$(IPT_CONNTRACK-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
17 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(IPT_CONNTRACK-m
)))
20 define KernelPackage
/ipt-conntrack
/description
21 Netfilter
(IPv4
) kernel modules for connection tracking
25 - ipt_connmark
/CONNMARK
28 $(eval
$(call KernelPackage
,ipt-conntrack
))
31 define KernelPackage
/ipt-filter
33 TITLE
:=Modules for packet content inspection
34 KCONFIG
:=$(KCONFIG_IPT_FILTER
)
35 FILES
:=$(foreach mod
,$(IPT_FILTER-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
36 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(IPT_FILTER-m
)))
39 define KernelPackage
/ipt-filter
/description
40 Netfilter
(IPv4
) kernel modules for packet content inspection
46 $(eval
$(call KernelPackage
,ipt-filter
))
49 define KernelPackage
/ipt-ipopt
51 TITLE
:=Modules for matching
/changing IP packet options
52 KCONFIG
:=$(KCONFIG_IPT_IPOPT
)
53 FILES
:=$(foreach mod
,$(IPT_IPOPT-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
54 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(IPT_IPOPT-m
)))
57 define KernelPackage
/ipt-ipopt
/description
58 Netfilter
(IPv4
) modules for matching
/changing IP packet options
71 $(eval
$(call KernelPackage
,ipt-ipopt
))
74 define KernelPackage
/ipt-ipsec
76 TITLE
:=Modules for matching IPSec packets
77 KCONFIG
:=$(KCONFIG_IPT_IPSEC
)
78 FILES
:=$(foreach mod
,$(IPT_IPSEC-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
79 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(IPT_IPSEC-m
)))
82 define KernelPackage
/ipt-ipsec
/description
83 Netfilter
(IPv4
) modules for matching IPSec packets
89 $(eval
$(call KernelPackage
,ipt-ipsec
))
92 define KernelPackage
/ipt-nat
94 TITLE
:=Modules for extra NAT targets
95 KCONFIG
:=$(KCONFIG_IPT_NAT
)
96 FILES
:=$(foreach mod
,$(IPT_NAT-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
97 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(IPT_NAT-m
)))
100 define KernelPackage
/ipt-nat
/description
101 Netfilter
(IPv4
) modules for extra NAT targets
107 $(eval
$(call KernelPackage
,ipt-nat
))
110 define KernelPackage
/ipt-nathelper
112 TITLE
:=Default Conntrack and NAT helpers
113 KCONFIG
:=$(KCONFIG_IPT_NAT_DEFAULT
)
114 FILES
:=$(foreach mod
,$(IPT_NAT_DEFAULT-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
115 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(IPT_NAT_DEFAULT-m
)))
118 define KernelPackage
/ipt-nathelper
/description
119 Default Netfilter
(IPv4
) Conntrack and NAT helpers
128 $(eval
$(call KernelPackage
,ipt-nathelper
))
131 define KernelPackage
/ipt-nathelper-extra
133 TITLE
:=Extra Conntrack and NAT helpers
134 KCONFIG
:=$(KCONFIG_IPT_NAT_EXTRA
)
135 FILES
:=$(foreach mod
,$(IPT_NAT_EXTRA-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
136 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(IPT_NAT_EXTRA-m
)))
139 define KernelPackage
/ipt-nathelper-extra
/description
140 Extra Netfilter
(IPv4
) Conntrack and NAT helpers
142 - ip_conntrack_amanda
143 - ip_conntrack_proto_gre
152 $(eval
$(call KernelPackage
,ipt-nathelper-extra
))
155 define KernelPackage
/ipt-imq
157 TITLE
:=Intermediate Queueing support
158 KCONFIG
:=CONFIG_IP_NF_TARGET_IMQ
159 DEPENDS
:=@
!LINUX_2_6_25
160 FILES
:=$(LINUX_DIR
)/net
/ipv4
/netfilter
/*IMQ
*.
$(LINUX_KMOD_SUFFIX
) $(LINUX_DIR
)/drivers
/net
/imq.
$(LINUX_KMOD_SUFFIX
)
161 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(patsubst %.ko
,%,$(wildcard $(LINUX_DIR
)/net
/ipv4
/netfilter
/*IMQ
*.
$(LINUX_KMOD_SUFFIX
) $(LINUX_DIR
)/drivers
/net
/imq.
$(LINUX_KMOD_SUFFIX
)))))
164 define KernelPackage
/ipt-imq
/description
165 Kernel support for Intermediate Queueing devices
168 $(eval
$(call KernelPackage
,ipt-imq
))
171 define KernelPackage
/ipt-queue
173 TITLE
:=Module for user-space packet queueing
174 KCONFIG
:=$(KCONFIG_IPT_QUEUE
)
175 FILES
:=$(foreach mod
,$(IPT_QUEUE-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
176 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(IPT_QUEUE-m
)))
179 define KernelPackage
/ipt-queue
/description
180 Netfilter
(IPv4
) module for user-space packet queueing
185 $(eval
$(call KernelPackage
,ipt-queue
))
188 define KernelPackage
/ipt-ulog
190 TITLE
:=Module for user-space packet logging
191 KCONFIG
:=$(KCONFIG_IPT_ULOG
)
192 FILES
:=$(foreach mod
,$(IPT_ULOG-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
193 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(IPT_ULOG-m
)))
196 define KernelPackage
/ipt-ulog
/description
197 Netfilter
(IPv4
) module for user-space packet logging
202 $(eval
$(call KernelPackage
,ipt-ulog
))
205 define KernelPackage
/ipt-iprange
207 TITLE
:=Module for matching ip ranges
208 FILES
:=$(foreach mod
,$(IPT_IPRANGE-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
209 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(IPT_IPRANGE-m
)))
212 define KernelPackage
/ipt-iprange
/description
213 Netfilter
(IPv4
) module for matching ip ranges
218 $(eval
$(call KernelPackage
,ipt-iprange
))
221 define KernelPackage
/ipt-ipset
224 KCONFIG
:=$(KCONFIG_IPT_IPSET
)
225 FILES
:=$(foreach mod
,$(IPT_IPSET-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
226 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(IPT_IPSET-m
)))
229 define KernelPackage
/ipt-ipset
/description
230 Netfilter kernel modules for ipset
245 $(eval
$(call KernelPackage
,ipt-ipset
))
248 define KernelPackage
/ipt-extra
251 KCONFIG
:=$(KCONFIG_IPT_EXTRA
)
252 FILES
:=$(foreach mod
,$(IPT_EXTRA-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
253 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(IPT_EXTRA-m
)))
256 define KernelPackage
/ipt-extra
/description
257 Other Netfilter
(IPv4
) kernel modules
271 $(eval
$(call KernelPackage
,ipt-extra
))
274 define KernelPackage
/ip6tables
278 KCONFIG
:=CONFIG_IP6_NF_IPTABLES
279 FILES
:=$(foreach mod
,$(IPT_IPV6-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
280 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(IPT_IPV6-m
)))
283 define KernelPackage
/ip6tables
/description
284 Netfilter IPv6 firewalling support
287 $(eval
$(call KernelPackage
,ip6tables
))
290 define KernelPackage
/arptables
292 TITLE
:=ARP firewalling modules
293 FILES
:=$(LINUX_DIR
)/net
/ipv4
/netfilter
/arp
*.
$(LINUX_KMOD_SUFFIX
)
294 KCONFIG
:=CONFIG_IP_NF_ARPTABLES
295 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(patsubst %.ko
,%,$(wildcard $(LINUX_DIR
)/net
/ipv4
/netfilter
/arp
*.
$(LINUX_KMOD_SUFFIX
)))))
298 define KernelPackage
/arptables
/description
299 Kernel modules for ARP firewalling
302 $(eval
$(call KernelPackage
,arptables
))
305 define KernelPackage
/ebtables
307 TITLE
:=Bridge firewalling modules
309 FILES
:=$(LINUX_DIR
)/net
/bridge
/netfilter
/*.
$(LINUX_KMOD_SUFFIX
)
310 KCONFIG
:=CONFIG_BRIDGE_NF_EBTABLES
311 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(patsubst %.ko
,%,ebtables.ko
$(wildcard $(LINUX_DIR
)/net
/bridge
/netfilter
/ebtable_
*.
$(LINUX_KMOD_SUFFIX
)) $(wildcard $(LINUX_DIR
)/net
/bridge
/netfilter
/ebt_
*.
$(LINUX_KMOD_SUFFIX
)))))
314 define KernelPackage
/ebtables
/description
315 Kernel modules for Ethernet Bridge firewalling
318 $(eval
$(call KernelPackage
,ebtables
))