2 # Copyright (C) 2006 OpenWrt.org
4 # This is free software, licensed under the GNU General Public License v2.
5 # See /LICENSE for more information.
9 include $(TOPDIR
)/rules.mk
10 include $(INCLUDE_DIR
)/kernel.mk
16 PKG_SOURCE
:=$(PKG_NAME
)-$(PKG_VERSION
).
tar.bz2
17 PKG_SOURCE_URL
:=http
://www.netfilter.org
/projects
/iptables
/files \
18 ftp
://ftp.be.netfilter.org
/pub
/netfilter
/iptables
/ \
19 ftp
://ftp.de.netfilter.org
/pub
/netfilter
/iptables
/ \
20 ftp
://ftp.no.netfilter.org
/pub
/netfilter
/iptables
/
21 PKG_MD5SUM
:=0a9209f928002e5eee9cdff8fef4d4b3
23 include $(INCLUDE_DIR
)/package.mk
25 -include $(LINUX_DIR
)/.config
26 include $(INCLUDE_DIR
)/netfilter.mk
27 STAMP_CONFIGURED
:=$(strip $(STAMP_CONFIGURED
))_
$(shell grep
'NETFILTER' $(LINUX_DIR
)/.config | md5s
)
30 define Package
/iptables
/Default
33 URL
:=http
://netfilter.org
/
36 define Package
/iptables
37 $(call Package
/iptables
/Default
)
38 TITLE
:=IPv4 firewall administration tool
42 define Package
/iptables
/conffiles
47 define Package
/iptables-mod-conntrack
48 $(call Package
/iptables
/Default
)
49 DEPENDS
:=iptables
+kmod-ipt-conntrack
50 TITLE
:=connection tracking modules
52 iptables extensions for connection tracking.
\\\
55 - libipt_conntrack
\\\
57 - libipt_connmark
/CONNMARK
60 define Package
/iptables-mod-filter
61 $(call Package
/iptables
/Default
)
62 DEPENDS
:=iptables
+kmod-ipt-filter
65 iptables extensions for packet content inspection.
\\\
72 define Package
/iptables-mod-imq
73 $(call Package
/iptables
/Default
)
74 DEPENDS
:=iptables
+kmod-ipt-imq
77 iptables extension for IMQ support.
\\\
83 define Package
/iptables-mod-ipopt
84 $(call Package
/iptables
/Default
)
85 DEPENDS
:=iptables
+kmod-ipt-ipopt
86 TITLE
:=IP
/Packet option modules
88 iptables extensions for matching
/changing IP packet options.
\\\
92 - libipt_dscp
/DSCP
\\\
102 define Package
/iptables-mod-ipsec
103 $(call Package
/iptables
/Default
)
104 DEPENDS
:=iptables
+kmod-ipt-ipsec
105 TITLE
:=IPSec extensions
107 iptables extensions for matching ipsec traffic.
\\\
114 define Package
/iptables-mod-nat
115 $(call Package
/iptables
/Default
)
116 DEPENDS
:=iptables
+kmod-ipt-nat
117 TITLE
:=extra NAT targets
119 iptables extensions for different NAT targets.
\\\
125 define Package
/iptables-mod-ulog
126 $(call Package
/iptables
/Default
)
127 DEPENDS
:=iptables
+kmod-ipt-ulog
128 TITLE
:=user-space packet logging
130 iptables extensions for user-space packet logging.
\\\
136 define Package
/iptables-mod-iprange
137 $(call Package
/iptables
/Default
)
138 DEPENDS
:=iptables
+kmod-ipt-iprange
139 TITLE
:=ip range module
141 iptables extensions for matching ip ranges.
\\\
147 define Package
/iptables-mod-extra
148 $(call Package
/iptables
/Default
)
149 DEPENDS
:=iptables
+kmod-ipt-extra
150 TITLE
:=other extra iptables extensions
152 other extra iptables extensions.
\\\
163 define Package
/iptables-mod-ipset
164 $(call Package
/iptables
/Default
)
165 DEPENDS
:=iptables
+kmod-ipt-ipset
166 TITLE
:=ipset iptables extension
171 define Package
/iptables-utils
172 $(call Package
/iptables
/Default
)
174 TITLE
:=iptables save and restore utilities
177 define Package
/ip6tables
178 $(call Package
/iptables
/Default
)
181 TITLE
:=IPv6 firewall administration tool
184 define Package
/ip6tables-utils
185 $(call Package
/iptables
/Default
)
188 TITLE
:=ip6tables save and restore utilities
191 define Build
/Configure
192 rm -f
$(PKG_BUILD_DIR
)/.configured
*
193 $(MAKE
) -C
$(PKG_BUILD_DIR
) \
198 chmod a
+x
$(PKG_BUILD_DIR
)/extensions
/.
*-test*
199 mkdir
-p
$(PKG_INSTALL_DIR
)
200 $(MAKE
) -C
$(PKG_BUILD_DIR
) \
201 $(TARGET_CONFIGURE_OPTS
) \
202 COPT_FLAGS
="$(TARGET_CFLAGS)" \
203 LDFLAGS
="-rdynamic -static-libgcc" \
204 KERNEL_DIR
="$(LINUX_DIR)" PREFIX
=/usr \
205 DESTDIR
="$(PKG_INSTALL_DIR)" \
206 all experimental
install install-experimental
209 define Build
/InstallDev
210 $(MAKE
) -C
$(PKG_BUILD_DIR
) \
211 $(TARGET_CONFIGURE_OPTS
) \
212 COPT_FLAGS
="$(TARGET_CFLAGS)" \
213 KERNEL_DIR
="$(LINUX_DIR)" PREFIX
=/usr \
214 DESTDIR
="$(STAGING_DIR)" \
216 $(CP
) $(PKG_BUILD_DIR
)/include $(STAGING_DIR
)/usr
217 $(CP
) $(PKG_BUILD_DIR
)/libiptc
/libiptc.a
$(STAGING_DIR
)/usr
/lib
220 define Build
/UninstallDev
221 rm -rf
$(STAGING_DIR
)/usr
/include/libipq.h
222 rm -rf
$(STAGING_DIR
)/usr
/include/libipulog
223 rm -rf
$(STAGING_DIR
)/usr
/include/libipq
224 rm -rf
$(STAGING_DIR
)/usr
/include/libiptc
225 rm -rf
$(STAGING_DIR
)/usr
/include/linux
/netfilter
*
226 rm -rf
$(STAGING_DIR
)/usr
/include/iptables
*
227 rm -rf
$(STAGING_DIR
)/usr
/include/ip6tables
*
228 rm -rf
$(STAGING_DIR
)/usr
/lib
/libipq.a
229 rm -rf
$(STAGING_DIR
)/usr
/lib
/libiptc.a
232 define Package
/iptables
/install
233 $(INSTALL_DIR
) $(1)/etc
/config
234 $(INSTALL_DATA
) .
/files
/firewall.config
$(1)/etc
/config
/firewall
235 $(INSTALL_DIR
) $(1)/etc
/init.d
236 $(INSTALL_BIN
) .
/files
/firewall.init
$(1)/etc
/init.d
/firewall
237 $(INSTALL_BIN
) .
/files
/firewall.user
$(1)/etc
/
238 $(INSTALL_DIR
) $(1)/usr
/lib
239 $(INSTALL_DATA
) .
/files
/firewall.awk
$(1)/usr
/lib
240 $(INSTALL_DIR
) $(1)/usr
/sbin
241 $(CP
) $(PKG_INSTALL_DIR
)/usr
/sbin
/iptables
$(1)/usr
/sbin
/
242 $(INSTALL_DIR
) $(1)/usr
/lib
/iptables
243 (cd
$(PKG_INSTALL_DIR
)/usr
/lib
/iptables
; \
244 $(CP
) $(patsubst %,lib
%.so
,$(IPT_BUILTIN
:xt_
%=ipt_
%)) $(1)/usr
/lib
/iptables
/ \
248 define Package
/iptables-utils
/install
249 $(INSTALL_DIR
) $(1)/usr
/sbin
250 $(CP
) $(PKG_INSTALL_DIR
)/usr
/sbin
/iptables-
{save
,restore
} $(1)/usr
/sbin
/
253 define Package
/ip6tables
/install
254 $(INSTALL_DIR
) $(1)/usr
/sbin
255 $(CP
) $(PKG_INSTALL_DIR
)/usr
/sbin
/ip6tables
$(1)/usr
/sbin
/
256 $(INSTALL_DIR
) $(1)/usr
/lib
/iptables
257 (cd
$(PKG_INSTALL_DIR
)/usr
/lib
/iptables
; \
258 $(CP
) libip6t_
*.so
$(1)/usr
/lib
/iptables
/ \
262 define Package
/ip6tables-utils
/install
263 $(INSTALL_DIR
) $(1)/usr
/sbin
264 $(CP
) $(PKG_INSTALL_DIR
)/usr
/sbin
/ip6tables-
{save
,restore
} $(1)/usr
/sbin
/
268 define Package
/$(1)/install
269 $(INSTALL_DIR
) $$(1)/usr
/lib
/iptables
270 for m in
$$(patsubst xt_
%,ipt_
%,$(2)); do \
271 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/iptables
/lib
$$$$$$$${m}.so
$$(1)/usr
/lib
/iptables
/ ; \
276 $$(eval
$$(call BuildPackage
,$(1)))
280 $(INSTALL_DIR
) $$(1)/etc
/l7-protocols
; \
281 $(CP
) files
/l7
/*.pat
$$(1)/etc
/l7-protocols
/
283 $(eval
$(call BuildPackage
,iptables
))
284 $(eval
$(call BuildPackage
,iptables-utils
))
285 $(eval
$(call BuildPlugin
,iptables-mod-conntrack
,$(IPT_CONNTRACK-m
)))
286 $(eval
$(call BuildPlugin
,iptables-mod-extra
,$(IPT_EXTRA-m
)))
287 $(eval
$(call BuildPlugin
,iptables-mod-ipset
,$(IPT_IPSET-m
)))
288 $(eval
$(call BuildPlugin
,iptables-mod-filter
,$(IPT_FILTER-m
),$(L7_INSTALL
)))
289 $(eval
$(call BuildPlugin
,iptables-mod-imq
,$(IPT_IMQ-m
)))
290 $(eval
$(call BuildPlugin
,iptables-mod-ipopt
,$(IPT_IPOPT-m
)))
291 $(eval
$(call BuildPlugin
,iptables-mod-ipsec
,$(IPT_IPSEC-m
)))
292 $(eval
$(call BuildPlugin
,iptables-mod-nat
,$(IPT_NAT-m
)))
293 $(eval
$(call BuildPlugin
,iptables-mod-iprange
,$(IPT_IPRANGE-m
)))
294 $(eval
$(call BuildPlugin
,iptables-mod-ulog
,$(IPT_ULOG-m
)))
295 $(eval
$(call BuildPackage
,ip6tables
))
296 $(eval
$(call BuildPackage
,ip6tables-utils
))