package/kernel/linux/modules/netfilter.mk

   1
   2 #
   3 # Copyright (C) 2006-2010 OpenWrt.org
   4 #
   5 # This is free software, licensed under the GNU General Public License v2.
   6 # See /LICENSE for more information.
   7 #
   8
   9 NF_MENU:=Netfilter Extensions
  10 NF_KMOD:=1
  11 include $(INCLUDE_DIR)/netfilter.mk
  12
  13 define KernelPackage/ipt-core
  14   SUBMENU:=$(NF_MENU)
  15   TITLE:=Netfilter core
  16   KCONFIG:= \
  17         CONFIG_NETFILTER=y \
  18         CONFIG_NETFILTER_ADVANCED=y \
  19         $(KCONFIG_IPT_CORE)
  20   FILES:=$(foreach mod,$(IPT_CORE-m),$(LINUX_DIR)/net/$(mod).ko)
  21   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_CORE-m)))
  22 endef
  23
  24 define KernelPackage/ipt-core/description
  25  Netfilter core kernel modules
  26  Includes:
  27  - comment
  28  - limit
  29  - LOG
  30  - mac
  31  - multiport
  32  - REJECT
  33  - TCPMSS
  34 endef
  35
  36 $(eval $(call KernelPackage,ipt-core))
  37
  38
  39 define AddDepends/ipt
  40   SUBMENU:=$(NF_MENU)
  41   DEPENDS+= +kmod-ipt-core $(1)
  42 endef
  43
  44
  45 define KernelPackage/ipt-conntrack
  46   TITLE:=Basic connection tracking modules
  47   KCONFIG:=$(KCONFIG_IPT_CONNTRACK)
  48   FILES:=$(foreach mod,$(IPT_CONNTRACK-m),$(LINUX_DIR)/net/$(mod).ko)
  49   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_CONNTRACK-m)))
  50   $(call AddDepends/ipt)
  51 endef
  52
  53 define KernelPackage/ipt-conntrack/description
  54  Netfilter (IPv4) kernel modules for connection tracking
  55  Includes:
  56  - conntrack
  57  - defrag
  58  - iptables_raw
  59  - NOTRACK
  60  - state
  61 endef
  62
  63 $(eval $(call KernelPackage,ipt-conntrack))
  64
  65
  66 define KernelPackage/ipt-conntrack-extra
  67   TITLE:=Extra connection tracking modules
  68   KCONFIG:=$(KCONFIG_IPT_CONNTRACK_EXTRA)
  69   FILES:=$(foreach mod,$(IPT_CONNTRACK_EXTRA-m),$(LINUX_DIR)/net/$(mod).ko)
  70   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_CONNTRACK_EXTRA-m)))
  71   $(call AddDepends/ipt,+kmod-ipt-conntrack)
  72 endef
  73
  74 define KernelPackage/ipt-conntrack-extra/description
  75  Netfilter (IPv4) extra kernel modules for connection tracking
  76  Includes:
  77  - connbytes
  78  - connmark/CONNMARK
  79  - conntrack
  80  - helper
  81  - recent
  82 endef
  83
  84 $(eval $(call KernelPackage,ipt-conntrack-extra))
  85
  86
  87 define KernelPackage/ipt-filter
  88   TITLE:=Modules for packet content inspection
  89   KCONFIG:=$(KCONFIG_IPT_FILTER)
  90   FILES:=$(foreach mod,$(IPT_FILTER-m),$(LINUX_DIR)/net/$(mod).ko)
  91   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_FILTER-m)))
  92   $(call AddDepends/ipt,+kmod-lib-textsearch +kmod-ipt-conntrack)
  93 endef
  94
  95 define KernelPackage/ipt-filter/description
  96  Netfilter (IPv4) kernel modules for packet content inspection
  97  Includes:
  98  - layer7
  99  - string
 100 endef
 101
 102 $(eval $(call KernelPackage,ipt-filter))
 103
 104
 105 define KernelPackage/ipt-ipopt
 106   TITLE:=Modules for matching/changing IP packet options
 107   KCONFIG:=$(KCONFIG_IPT_IPOPT)
 108   FILES:=$(foreach mod,$(IPT_IPOPT-m),$(LINUX_DIR)/net/$(mod).ko)
 109   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_IPOPT-m)))
 110   $(call AddDepends/ipt)
 111 endef
 112
 113 define KernelPackage/ipt-ipopt/description
 114  Netfilter (IPv4) modules for matching/changing IP packet options
 115  Includes:
 116  - CLASSIFY
 117  - dscp/DSCP
 118  - ecn/ECN
 119  - hl/HL
 120  - length
 121  - mark/MARK
 122  - statistic
 123  - tcpmss
 124  - time
 125  - ttl/TTL
 126  - unclean
 127 endef
 128
 129 $(eval $(call KernelPackage,ipt-ipopt))
 130
 131
 132 define KernelPackage/ipt-ipsec
 133   TITLE:=Modules for matching IPSec packets
 134   KCONFIG:=$(KCONFIG_IPT_IPSEC)
 135   FILES:=$(foreach mod,$(IPT_IPSEC-m),$(LINUX_DIR)/net/$(mod).ko)
 136   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_IPSEC-m)))
 137   $(call AddDepends/ipt)
 138 endef
 139
 140 define KernelPackage/ipt-ipsec/description
 141  Netfilter (IPv4) modules for matching IPSec packets
 142  Includes:
 143  - ah
 144  - esp
 145  - policy
 146 endef
 147
 148 $(eval $(call KernelPackage,ipt-ipsec))
 149
 150
 151 define KernelPackage/ipt-nat
 152   TITLE:=Basic NAT targets
 153   KCONFIG:=$(KCONFIG_IPT_NAT)
 154   FILES:=$(foreach mod,$(IPT_NAT-m),$(LINUX_DIR)/net/$(mod).ko)
 155   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_NAT-m)))
 156   $(call AddDepends/ipt,+kmod-ipt-conntrack)
 157 endef
 158
 159 define KernelPackage/ipt-nat/description
 160  Netfilter (IPv4) kernel modules for basic NAT targets
 161  Includes:
 162  - MASQUERADE
 163 endef
 164
 165 $(eval $(call KernelPackage,ipt-nat))
 166
 167
 168 define KernelPackage/ipt-nat6
 169   TITLE:=IPv6 NAT targets
 170   KCONFIG:=$(KCONFIG_IPT_NAT6)
 171   FILES:=$(foreach mod,$(IPT_NAT6-m),$(LINUX_DIR)/net/$(mod).ko)
 172   AUTOLOAD:=$(call AutoLoad,43,$(notdir $(IPT_NAT6-m)))
 173   $(call AddDepends/ipt,+kmod-ipt-conntrack)
 174   $(call AddDepends/ipt,+kmod-ipt-nat)
 175   $(call AddDepends/ipt,+kmod-ip6tables)
 176 endef
 177
 178 define KernelPackage/ipt-nat6/description
 179  Netfilter (IPv6) kernel modules for NAT targets
 180 endef
 181
 182 $(eval $(call KernelPackage,ipt-nat6))
 183
 184
 185 define KernelPackage/ipt-nat-extra
 186   TITLE:=Extra NAT targets
 187   KCONFIG:=$(KCONFIG_IPT_NAT_EXTRA)
 188   FILES:=$(foreach mod,$(IPT_NAT_EXTRA-m),$(LINUX_DIR)/net/$(mod).ko)
 189   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_NAT_EXTRA-m)))
 190   $(call AddDepends/ipt,+kmod-ipt-nat)
 191 endef
 192
 193 define KernelPackage/ipt-nat-extra/description
 194  Netfilter (IPv4) kernel modules for extra NAT targets
 195  Includes:
 196  - NETMAP
 197  - REDIRECT
 198 endef
 199
 200 $(eval $(call KernelPackage,ipt-nat-extra))
 201
 202
 203 define KernelPackage/ipt-nathelper
 204   TITLE:=Basic Conntrack and NAT helpers
 205   KCONFIG:=$(KCONFIG_IPT_NATHELPER)
 206   FILES:=$(foreach mod,$(IPT_NATHELPER-m),$(LINUX_DIR)/net/$(mod).ko)
 207   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_NATHELPER-m)))
 208   $(call AddDepends/ipt,+kmod-ipt-nat)
 209 endef
 210
 211 define KernelPackage/ipt-nathelper/description
 212  Default Netfilter (IPv4) Conntrack and NAT helpers
 213  Includes:
 214  - ftp
 215  - irc
 216  - tftp
 217 endef
 218
 219 $(eval $(call KernelPackage,ipt-nathelper))
 220
 221
 222 define KernelPackage/ipt-nathelper-extra
 223   TITLE:=Extra Conntrack and NAT helpers
 224   KCONFIG:=$(KCONFIG_IPT_NATHELPER_EXTRA)
 225   FILES:=$(foreach mod,$(IPT_NATHELPER_EXTRA-m),$(LINUX_DIR)/net/$(mod).ko)
 226   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_NATHELPER_EXTRA-m)))
 227   $(call AddDepends/ipt,+kmod-ipt-nat +kmod-lib-textsearch)
 228 endef
 229
 230 define KernelPackage/ipt-nathelper-extra/description
 231  Extra Netfilter (IPv4) Conntrack and NAT helpers
 232  Includes:
 233  - amanda
 234  - h323
 235  - mms
 236  - pptp
 237  - proto_gre
 238  - sip
 239  - snmp_basic
 240  - broadcast
 241 endef
 242
 243 $(eval $(call KernelPackage,ipt-nathelper-extra))
 244
 245
 246 define KernelPackage/ipt-queue
 247   TITLE:=Module for user-space packet queueing
 248   KCONFIG:=$(KCONFIG_IPT_QUEUE)
 249   DEPENDS:=@!LINUX_3_6
 250   FILES:=$(foreach mod,$(IPT_QUEUE-m),$(LINUX_DIR)/net/$(mod).ko)
 251   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_QUEUE-m)))
 252   $(call AddDepends/ipt)
 253 endef
 254
 255 define KernelPackage/ipt-queue/description
 256  Netfilter (IPv4) module for user-space packet queueing
 257  Includes:
 258  - QUEUE
 259 endef
 260
 261 $(eval $(call KernelPackage,ipt-queue))
 262
 263
 264 define KernelPackage/ipt-ulog
 265   TITLE:=Module for user-space packet logging
 266   KCONFIG:=$(KCONFIG_IPT_ULOG)
 267   FILES:=$(foreach mod,$(IPT_ULOG-m),$(LINUX_DIR)/net/$(mod).ko)
 268   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_ULOG-m)))
 269   $(call AddDepends/ipt)
 270 endef
 271
 272 define KernelPackage/ipt-ulog/description
 273  Netfilter (IPv4) module for user-space packet logging
 274  Includes:
 275  - ULOG
 276 endef
 277
 278 $(eval $(call KernelPackage,ipt-ulog))
 279
 280
 281 define KernelPackage/ipt-nflog
 282   TITLE:=Module for user-space packet logging
 283   KCONFIG:=$(KCONFIG_IPT_NFLOG)
 284   FILES:=$(foreach mod,$(IPT_NFLOG-m),$(LINUX_DIR)/net/$(mod).ko)
 285   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_NFLOG-m)))
 286   $(call AddDepends/ipt,+kmod-nfnetlink-log)
 287 endef
 288
 289 define KernelPackage/ipt-nflog/description
 290  Netfilter module for user-space packet logging
 291  Includes:
 292  - NFLOG
 293 endef
 294
 295 $(eval $(call KernelPackage,ipt-nflog))
 296
 297
 298 define KernelPackage/ipt-nfqueue
 299   TITLE:=Module for user-space packet queuing
 300   KCONFIG:=$(KCONFIG_IPT_NFQUEUE)
 301   FILES:=$(foreach mod,$(IPT_NFQUEUE-m),$(LINUX_DIR)/net/$(mod).ko)
 302   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_NFQUEUE-m)))
 303   $(call AddDepends/ipt,+kmod-nfnetlink-queue)
 304 endef
 305
 306 define KernelPackage/ipt-nfqueue/description
 307  Netfilter module for user-space packet queuing
 308  Includes:
 309  - NFQUEUE
 310 endef
 311
 312 $(eval $(call KernelPackage,ipt-nfqueue))
 313
 314
 315 define KernelPackage/ipt-debug
 316   TITLE:=Module for debugging/development
 317   KCONFIG:=$(KCONFIG_IPT_DEBUG)
 318   DEFAULT:=n
 319   FILES:=$(foreach mod,$(IPT_DEBUG-m),$(LINUX_DIR)/net/$(mod).ko)
 320   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_DEBUG-m)))
 321   $(call AddDepends/ipt)
 322 endef
 323
 324 define KernelPackage/ipt-debug/description
 325  Netfilter modules for debugging/development of the firewall
 326  Includes:
 327  - TRACE
 328 endef
 329
 330 $(eval $(call KernelPackage,ipt-debug))
 331
 332
 333 define KernelPackage/ipt-led
 334   TITLE:=Module to trigger a LED with a Netfilter rule
 335   KCONFIG:=$(KCONFIG_IPT_LED)
 336   FILES:=$(foreach mod,$(IPT_LED-m),$(LINUX_DIR)/net/$(mod).ko)
 337   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_LED-m)))
 338   $(call AddDepends/ipt)
 339 endef
 340
 341 define KernelPackage/ipt-led/description
 342  Netfilter target to trigger a LED when a network packet is matched.
 343 endef
 344
 345 $(eval $(call KernelPackage,ipt-led))
 346
 347 define KernelPackage/ipt-tproxy
 348   TITLE:=Transparent proxying support
 349   DEPENDS+=+kmod-ipt-conntrack +IPV6:kmod-ipv6 +IPV6:kmod-ip6tables
 350   KCONFIG:= \
 351         CONFIG_NETFILTER_TPROXY \
 352         CONFIG_NETFILTER_XT_MATCH_SOCKET \
 353         CONFIG_NETFILTER_XT_TARGET_TPROXY
 354   FILES:= \
 355         $(if $(call kernel_patchver_lt,3.12),$(LINUX_DIR)/net/netfilter/nf_tproxy_core.ko) \
 356         $(foreach mod,$(IPT_TPROXY-m),$(LINUX_DIR)/net/$(mod).ko)
 357   AUTOLOAD:=$(call AutoProbe,$(notdir nf_tproxy_core $(IPT_TPROXY-m)))
 358   $(call AddDepends/ipt)
 359 endef
 360
 361 define KernelPackage/ipt-tproxy/description
 362   Kernel modules for Transparent Proxying
 363 endef
 364
 365 $(eval $(call KernelPackage,ipt-tproxy))
 366
 367 define KernelPackage/ipt-tee
 368   TITLE:=TEE support
 369   DEPENDS:=+kmod-ipt-conntrack +IPV6:kmod-ipv6
 370   KCONFIG:= \
 371         CONFIG_NETFILTER_XT_TARGET_TEE
 372   FILES:= \
 373         $(LINUX_DIR)/net/netfilter/xt_TEE.ko \
 374         $(foreach mod,$(IPT_TEE-m),$(LINUX_DIR)/net/$(mod).ko)
 375   AUTOLOAD:=$(call AutoProbe,$(notdir nf_tee $(IPT_TEE-m)))
 376   $(call AddDepends/ipt)
 377 endef
 378
 379 define KernelPackage/ipt-tee/description
 380   Kernel modules for TEE
 381 endef
 382
 383 $(eval $(call KernelPackage,ipt-tee))
 384
 385
 386 define KernelPackage/ipt-u32
 387   TITLE:=U32 support
 388   KCONFIG:= \
 389         CONFIG_NETFILTER_XT_MATCH_U32
 390   FILES:= \
 391         $(LINUX_DIR)/net/netfilter/xt_u32.ko \
 392         $(foreach mod,$(IPT_U32-m),$(LINUX_DIR)/net/$(mod).ko)
 393   AUTOLOAD:=$(call AutoProbe,$(notdir nf_tee $(IPT_U32-m)))
 394   $(call AddDepends/ipt)
 395 endef
 396
 397 define KernelPackage/ipt-u32/description
 398   Kernel modules for U32
 399 endef
 400
 401 $(eval $(call KernelPackage,ipt-u32))
 402
 403
 404 define KernelPackage/ipt-iprange
 405   TITLE:=Module for matching ip ranges
 406   KCONFIG:=$(KCONFIG_IPT_IPRANGE)
 407   FILES:=$(foreach mod,$(IPT_IPRANGE-m),$(LINUX_DIR)/net/$(mod).ko)
 408   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_IPRANGE-m)))
 409   $(call AddDepends/ipt)
 410 endef
 411
 412 define KernelPackage/ipt-iprange/description
 413  Netfilter (IPv4) module for matching ip ranges
 414  Includes:
 415  - iprange
 416 endef
 417
 418 $(eval $(call KernelPackage,ipt-iprange))
 419
 420
 421 define KernelPackage/ipt-extra
 422   TITLE:=Extra modules
 423   KCONFIG:=$(KCONFIG_IPT_EXTRA)
 424   FILES:=$(foreach mod,$(IPT_EXTRA-m),$(LINUX_DIR)/net/$(mod).ko)
 425   AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_EXTRA-m)))
 426   $(call AddDepends/ipt)
 427 endef
 428
 429 define KernelPackage/ipt-extra/description
 430  Other Netfilter (IPv4) kernel modules
 431  Includes:
 432  - addrtype
 433  - owner
 434  - physdev (if bridge support was enabled in kernel)
 435  - pkttype
 436  - quota
 437 endef
 438
 439 $(eval $(call KernelPackage,ipt-extra))
 440
 441
 442 define KernelPackage/ip6tables
 443   SUBMENU:=$(NF_MENU)
 444   TITLE:=IPv6 modules
 445   DEPENDS:=+kmod-ipv6 +kmod-ipt-core +kmod-ipt-conntrack
 446   KCONFIG:=$(KCONFIG_IPT_IPV6)
 447   FILES:=$(foreach mod,$(IPT_IPV6-m),$(LINUX_DIR)/net/$(mod).ko)
 448   AUTOLOAD:=$(call AutoLoad,42,$(notdir $(IPT_IPV6-m)))
 449 endef
 450
 451 define KernelPackage/ip6tables/description
 452  Netfilter IPv6 firewalling support
 453 endef
 454
 455 $(eval $(call KernelPackage,ip6tables))
 456
 457 define KernelPackage/ip6tables-extra
 458   SUBMENU:=$(NF_MENU)
 459   TITLE:=Extra IPv6 modules
 460   DEPENDS:=+kmod-ip6tables
 461   KCONFIG:=$(KCONFIG_IPT_IPV6_EXTRA)
 462   FILES:=$(foreach mod,$(IPT_IPV6_EXTRA-m),$(LINUX_DIR)/net/$(mod).ko)
 463   AUTOLOAD:=$(call AutoLoad,43,$(notdir $(IPT_IPV6_EXTRA-m)))
 464 endef
 465
 466 define KernelPackage/ip6tables-extra/description
 467  Netfilter IPv6 extra header matching modules
 468 endef
 469
 470 $(eval $(call KernelPackage,ip6tables-extra))
 471
 472 ARP_MODULES = arp_tables arpt_mangle arptable_filter
 473 define KernelPackage/arptables
 474   SUBMENU:=$(NF_MENU)
 475   TITLE:=ARP firewalling modules
 476   DEPENDS:=+kmod-ipt-core
 477   FILES:=$(LINUX_DIR)/net/ipv4/netfilter/arp*.ko
 478   KCONFIG:=CONFIG_IP_NF_ARPTABLES \
 479     CONFIG_IP_NF_ARPFILTER \
 480     CONFIG_IP_NF_ARP_MANGLE
 481   AUTOLOAD:=$(call AutoProbe,$(ARP_MODULES))
 482 endef
 483
 484 define KernelPackage/arptables/description
 485  Kernel modules for ARP firewalling
 486 endef
 487
 488 $(eval $(call KernelPackage,arptables))
 489
 490
 491 define KernelPackage/ebtables
 492   SUBMENU:=$(NF_MENU)
 493   TITLE:=Bridge firewalling modules
 494   DEPENDS:=+kmod-ipt-core +kmod-bridge
 495   FILES:=$(foreach mod,$(EBTABLES-m),$(LINUX_DIR)/net/$(mod).ko)
 496   KCONFIG:=CONFIG_BRIDGE_NETFILTER=y \
 497         $(KCONFIG_EBTABLES)
 498   AUTOLOAD:=$(call AutoProbe,$(notdir $(EBTABLES-m)))
 499 endef
 500
 501 define KernelPackage/ebtables/description
 502   ebtables is a general, extensible frame/packet identification
 503   framework. It provides you to do Ethernet
 504   filtering/NAT/brouting on the Ethernet bridge.
 505 endef
 506
 507 $(eval $(call KernelPackage,ebtables))
 508
 509
 510 define AddDepends/ebtables
 511   SUBMENU:=$(NF_MENU)
 512   DEPENDS+=kmod-ebtables $(1)
 513 endef
 514
 515
 516 define KernelPackage/ebtables-ipv4
 517   TITLE:=ebtables: IPv4 support
 518   FILES:=$(foreach mod,$(EBTABLES_IP4-m),$(LINUX_DIR)/net/$(mod).ko)
 519   KCONFIG:=$(KCONFIG_EBTABLES_IP4)
 520   AUTOLOAD:=$(call AutoProbe,$(notdir $(EBTABLES_IP4-m)))
 521   $(call AddDepends/ebtables)
 522 endef
 523
 524 define KernelPackage/ebtables-ipv4/description
 525  This option adds the IPv4 support to ebtables, which allows basic
 526  IPv4 header field filtering, ARP filtering as well as SNAT, DNAT targets.
 527 endef
 528
 529 $(eval $(call KernelPackage,ebtables-ipv4))
 530
 531
 532 define KernelPackage/ebtables-ipv6
 533   TITLE:=ebtables: IPv6 support
 534   FILES:=$(foreach mod,$(EBTABLES_IP6-m),$(LINUX_DIR)/net/$(mod).ko)
 535   KCONFIG:=$(KCONFIG_EBTABLES_IP6)
 536   AUTOLOAD:=$(call AutoProbe,$(notdir $(EBTABLES_IP6-m)))
 537   $(call AddDepends/ebtables)
 538 endef
 539
 540 define KernelPackage/ebtables-ipv6/description
 541  This option adds the IPv6 support to ebtables, which allows basic
 542  IPv6 header field filtering and target support.
 543 endef
 544
 545 $(eval $(call KernelPackage,ebtables-ipv6))
 546
 547
 548 define KernelPackage/ebtables-watchers
 549   TITLE:=ebtables: watchers support
 550   FILES:=$(foreach mod,$(EBTABLES_WATCHERS-m),$(LINUX_DIR)/net/$(mod).ko)
 551   KCONFIG:=$(KCONFIG_EBTABLES_WATCHERS)
 552   AUTOLOAD:=$(call AutoProbe,$(notdir $(EBTABLES_WATCHERS-m)))
 553   $(call AddDepends/ebtables)
 554 endef
 555
 556 define KernelPackage/ebtables-watchers/description
 557  This option adds the log watchers, that you can use in any rule
 558  in any ebtables table.
 559 endef
 560
 561 $(eval $(call KernelPackage,ebtables-watchers))
 562
 563
 564 define KernelPackage/nfnetlink
 565   SUBMENU:=$(NF_MENU)
 566   TITLE:=Netlink-based userspace interface
 567   FILES:=$(foreach mod,$(NFNETLINK-m),$(LINUX_DIR)/net/$(mod).ko)
 568   KCONFIG:=$(KCONFIG_NFNETLINK)
 569   AUTOLOAD:=$(call AutoProbe,$(notdir $(NFNETLINK-m)))
 570   $(call AddDepends/ipt)
 571 endef
 572
 573 define KernelPackage/nfnetlink/description
 574  Kernel modules support for a netlink-based userspace interface
 575 endef
 576
 577 $(eval $(call KernelPackage,nfnetlink))
 578
 579
 580 define AddDepends/nfnetlink
 581   SUBMENU:=$(NF_MENU)
 582   DEPENDS+=+kmod-nfnetlink $(1)
 583 endef
 584
 585
 586 define KernelPackage/nfnetlink-log
 587   TITLE:=Netfilter LOG over NFNETLINK interface
 588   FILES:=$(foreach mod,$(NFNETLINK_LOG-m),$(LINUX_DIR)/net/$(mod).ko)
 589   KCONFIG:=$(KCONFIG_NFNETLINK_LOG)
 590   AUTOLOAD:=$(call AutoProbe,$(notdir $(NFNETLINK_LOG-m)))
 591   $(call AddDepends/nfnetlink)
 592 endef
 593
 594 define KernelPackage/nfnetlink-log/description
 595  Kernel modules support for logging packets via NFNETLINK
 596  Includes:
 597  - NFLOG
 598 endef
 599
 600 $(eval $(call KernelPackage,nfnetlink-log))
 601
 602
 603 define KernelPackage/nfnetlink-queue
 604   TITLE:=Netfilter QUEUE over NFNETLINK interface
 605   FILES:=$(foreach mod,$(NFNETLINK_QUEUE-m),$(LINUX_DIR)/net/$(mod).ko)
 606   KCONFIG:=$(KCONFIG_NFNETLINK_QUEUE)
 607   AUTOLOAD:=$(call AutoProbe,$(notdir $(NFNETLINK_QUEUE-m)))
 608   $(call AddDepends/nfnetlink)
 609 endef
 610
 611 define KernelPackage/nfnetlink-queue/description
 612  Kernel modules support for queueing packets via NFNETLINK
 613  Includes:
 614  - NFQUEUE
 615 endef
 616
 617 $(eval $(call KernelPackage,nfnetlink-queue))
 618
 619
 620 define KernelPackage/nf-conntrack-netlink
 621   TITLE:=Connection tracking netlink interface
 622   FILES:=$(LINUX_DIR)/net/netfilter/nf_conntrack_netlink.ko
 623   KCONFIG:=CONFIG_NF_CT_NETLINK
 624   AUTOLOAD:=$(call AutoProbe,nf_conntrack_netlink)
 625   $(call AddDepends/nfnetlink,+kmod-ipt-conntrack)
 626 endef
 627
 628 define KernelPackage/nf-conntrack-netlink/description
 629  Kernel modules support for a netlink-based connection tracking
 630  userspace interface
 631 endef
 632
 633 $(eval $(call KernelPackage,nf-conntrack-netlink))
 634
 635 define KernelPackage/ipt-hashlimit
 636   SUBMENU:=$(NF_MENU)
 637   TITLE:=Netfilter hashlimit match
 638   DEPENDS:=+kmod-ipt-core
 639   KCONFIG:=$(KCONFIG_IPT_HASHLIMIT)
 640   FILES:=$(LINUX_DIR)/net/netfilter/xt_hashlimit.ko
 641   AUTOLOAD:=$(call AutoProbe,xt_hashlimit)
 642   $(call KernelPackage/ipt)
 643 endef
 644
 645 define KernelPackage/ipt-hashlimit/description
 646  Kernel modules support for the hashlimit bucket match module
 647 endef
 648
 649 $(eval $(call KernelPackage,ipt-hashlimit))