package/network/utils/iptables/Makefile

   1 #
   2 # Copyright (C) 2006-2016 OpenWrt.org
   3 #
   4 # This is free software, licensed under the GNU General Public License v2.
   5 # See /LICENSE for more information.
   6 #
   7
   8 include $(TOPDIR)/rules.mk
   9 include $(INCLUDE_DIR)/kernel.mk
  10
  11 PKG_NAME:=iptables
  12 PKG_VERSION:=1.8.7
  13 PKG_RELEASE:=1
  14
  15 PKG_SOURCE_URL:=https://netfilter.org/projects/iptables/files
  16 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
  17 PKG_HASH:=c109c96bb04998cd44156622d36f8e04b140701ec60531a10668cfdff5e8d8f0
  18
  19 PKG_FIXUP:=autoreconf
  20 PKG_FLAGS:=nonshared
  21
  22 PKG_INSTALL:=1
  23 PKG_BUILD_PARALLEL:=1
  24 PKG_LICENSE:=GPL-2.0
  25 PKG_CPE_ID:=cpe:/a:netfilter_core_team:iptables
  26
  27 include $(INCLUDE_DIR)/package.mk
  28 ifeq ($(DUMP),)
  29   -include $(LINUX_DIR)/.config
  30   include $(INCLUDE_DIR)/netfilter.mk
  31   STAMP_CONFIGURED:=$(strip $(STAMP_CONFIGURED))_$(shell grep 'NETFILTER' $(LINUX_DIR)/.config | mkhash md5)
  32 endif
  33
  34
  35 define Package/iptables/Default
  36   SECTION:=net
  37   CATEGORY:=Network
  38   SUBMENU:=Firewall
  39   URL:=https://netfilter.org/
  40 endef
  41
  42 define Package/iptables/Module
  43 $(call Package/iptables/Default)
  44   DEPENDS:=iptables $(1)
  45 endef
  46
  47 define Package/iptables
  48 $(call Package/iptables/Default)
  49   TITLE:=IP firewall administration tool
  50   MENU:=1
  51   DEPENDS+= +kmod-ipt-core +libip4tc +IPV6:libip6tc +libxtables
  52 endef
  53
  54 define Package/iptables/config
  55   config IPTABLES_CONNLABEL
  56         bool "Enable Connlabel support"
  57         default n
  58         help
  59                 This enable connlabel support in iptables.
  60
  61   config IPTABLES_NFTABLES
  62         bool "Enable Nftables support"
  63         default n
  64         help
  65                 This enable nftables support in iptables.
  66 endef
  67
  68 define Package/iptables/description
  69 IP firewall administration tool.
  70
  71  Matches:
  72   - icmp
  73   - tcp
  74   - udp
  75   - comment
  76   - conntrack
  77   - limit
  78   - mac
  79   - mark
  80   - multiport
  81   - set
  82   - state
  83   - time
  84
  85  Targets:
  86   - ACCEPT
  87   - CT
  88   - DNAT
  89   - DROP
  90   - REJECT
  91   - FLOWOFFLOAD
  92   - LOG
  93   - MARK
  94   - MASQUERADE
  95   - REDIRECT
  96   - SET
  97   - SNAT
  98   - TCPMSS
  99
 100  Tables:
 101   - filter
 102   - mangle
 103   - nat
 104   - raw
 105
 106 endef
 107
 108 define Package/iptables-nft
 109 $(call Package/iptables/Default)
 110   TITLE:=IP firewall administration tool nft
 111   DEPENDS:=iptables @IPTABLES_NFTABLES +libxtables-nft
 112 endef
 113
 114 define Package/iptables-nft/description
 115 Extra iptables nftables nft binaries.
 116   iptables-nft
 117   iptables-nft-restore
 118   iptables-nft-save
 119   iptables-translate
 120   iptables-restore-translate
 121 endef
 122
 123 define Package/iptables-mod-conntrack-extra
 124 $(call Package/iptables/Module, +kmod-ipt-conntrack-extra +kmod-ipt-raw)
 125   TITLE:=Extra connection tracking extensions
 126 endef
 127
 128 define Package/iptables-mod-conntrack-extra/description
 129 Extra iptables extensions for connection tracking.
 130
 131  Matches:
 132   - connbytes
 133   - connlimit
 134   - connmark
 135   - recent
 136   - helper
 137
 138  Targets:
 139   - CONNMARK
 140
 141 endef
 142
 143 define Package/iptables-mod-conntrack-label
 144 $(call Package/iptables/Module, +kmod-ipt-conntrack-label @IPTABLES_CONNLABEL)
 145   TITLE:=Connection tracking labeling extension
 146   DEFAULT:=y if IPTABLES_CONNLABEL
 147 endef
 148
 149 define Package/iptables-mod-conntrack-label/description
 150 Match and set label(s) on connection tracking entries
 151
 152  Matches:
 153   - connlabel
 154
 155 endef
 156
 157 define Package/iptables-mod-filter
 158 $(call Package/iptables/Module, +kmod-ipt-filter)
 159   TITLE:=Content inspection extensions
 160 endef
 161
 162 define Package/iptables-mod-filter/description
 163 iptables extensions for packet content inspection.
 164 Includes support for:
 165
 166  Matches:
 167   - string
 168   - bpf
 169
 170 endef
 171
 172 define Package/iptables-mod-ipopt
 173 $(call Package/iptables/Module, +kmod-ipt-ipopt)
 174   TITLE:=IP/Packet option extensions
 175 endef
 176
 177 define Package/iptables-mod-ipopt/description
 178 iptables extensions for matching/changing IP packet options.
 179
 180  Matches:
 181   - dscp
 182   - ecn
 183   - length
 184   - statistic
 185   - tcpmss
 186   - unclean
 187   - hl
 188
 189  Targets:
 190   - DSCP
 191   - CLASSIFY
 192   - ECN
 193   - HL
 194
 195 endef
 196
 197 define Package/iptables-mod-ipsec
 198 $(call Package/iptables/Module, +kmod-ipt-ipsec)
 199   TITLE:=IPsec extensions
 200 endef
 201
 202 define Package/iptables-mod-ipsec/description
 203 iptables extensions for matching ipsec traffic.
 204
 205  Matches:
 206   - ah
 207   - esp
 208   - policy
 209
 210 endef
 211
 212 define Package/iptables-mod-nat-extra
 213 $(call Package/iptables/Module, +kmod-ipt-nat-extra)
 214   TITLE:=Extra NAT extensions
 215 endef
 216
 217 define Package/iptables-mod-nat-extra/description
 218 iptables extensions for extra NAT targets.
 219
 220  Targets:
 221   - MIRROR
 222   - NETMAP
 223 endef
 224
 225 define Package/iptables-mod-nflog
 226 $(call Package/iptables/Module, +kmod-nfnetlink-log +kmod-ipt-nflog)
 227   TITLE:=Netfilter NFLOG target
 228 endef
 229
 230 define Package/iptables-mod-nflog/description
 231  iptables extension for user-space logging via NFNETLINK.
 232
 233  Includes:
 234   - libxt_NFLOG
 235
 236 endef
 237
 238 define Package/iptables-mod-trace
 239 $(call Package/iptables/Module, +kmod-ipt-debug)
 240   TITLE:=Netfilter TRACE target
 241 endef
 242
 243 define Package/iptables-mod-trace/description
 244  iptables extension for TRACE target
 245
 246  Includes:
 247   - libxt_TRACE
 248
 249 endef
 250
 251
 252 define Package/iptables-mod-nfqueue
 253 $(call Package/iptables/Module, +kmod-nfnetlink-queue +kmod-ipt-nfqueue)
 254   TITLE:=Netfilter NFQUEUE target
 255 endef
 256
 257 define Package/iptables-mod-nfqueue/description
 258  iptables extension for user-space queuing via NFNETLINK.
 259
 260  Includes:
 261   - libxt_NFQUEUE
 262
 263 endef
 264
 265 define Package/iptables-mod-hashlimit
 266 $(call Package/iptables/Module, +kmod-ipt-hashlimit)
 267   TITLE:=hashlimit matching
 268 endef
 269
 270 define Package/iptables-mod-hashlimit/description
 271 iptables extensions for hashlimit matching
 272
 273  Matches:
 274   - hashlimit
 275
 276 endef
 277
 278 define Package/iptables-mod-rpfilter
 279 $(call Package/iptables/Module, +kmod-ipt-rpfilter)
 280   TITLE:=rpfilter iptables extension
 281 endef
 282
 283 define Package/iptables-mod-rpfilter/description
 284 iptables extensions for reverse path filter test on a packet
 285
 286  Matches:
 287   - rpfilter
 288
 289 endef
 290
 291 define Package/iptables-mod-iprange
 292 $(call Package/iptables/Module, +kmod-ipt-iprange)
 293   TITLE:=IP range extension
 294 endef
 295
 296 define Package/iptables-mod-iprange/description
 297 iptables extensions for matching ip ranges.
 298
 299  Matches:
 300   - iprange
 301
 302 endef
 303
 304 define Package/iptables-mod-cluster
 305 $(call Package/iptables/Module, +kmod-ipt-cluster)
 306   TITLE:=Match cluster extension
 307 endef
 308
 309 define Package/iptables-mod-cluster/description
 310 iptables extensions for matching cluster.
 311
 312  Netfilter (IPv4/IPv6) module for matching cluster
 313  This option allows you to build work-load-sharing clusters of
 314  network servers/stateful firewalls without having a dedicated
 315  load-balancing router/server/switch. Basically, this match returns
 316  true when the packet must be handled by this cluster node. Thus,
 317  all nodes see all packets and this match decides which node handles
 318  what packets. The work-load sharing algorithm is based on source
 319  address hashing.
 320
 321  This module is usable for ipv4 and ipv6.
 322
 323  If you select it, it enables kmod-ipt-cluster.
 324
 325  see `iptables -m cluster --help` for more information.
 326 endef
 327
 328 define Package/iptables-mod-clusterip
 329 $(call Package/iptables/Module, +kmod-ipt-clusterip)
 330   TITLE:=Clusterip extension
 331 endef
 332
 333 define Package/iptables-mod-clusterip/description
 334 iptables extensions for CLUSTERIP.
 335  The CLUSTERIP target allows you to build load-balancing clusters of
 336  network servers without having a dedicated load-balancing
 337  router/server/switch.
 338
 339  If you select it, it enables kmod-ipt-clusterip.
 340
 341  see `iptables -j CLUSTERIP --help` for more information.
 342 endef
 343
 344 define Package/iptables-mod-extra
 345 $(call Package/iptables/Module, +kmod-ipt-extra)
 346   TITLE:=Other extra iptables extensions
 347 endef
 348
 349 define Package/iptables-mod-extra/description
 350 Other extra iptables extensions.
 351
 352  Matches:
 353   - addrtype
 354   - condition
 355   - owner
 356   - pkttype
 357   - quota
 358
 359 endef
 360
 361 define Package/iptables-mod-physdev
 362 $(call Package/iptables/Module, +kmod-ipt-physdev)
 363   TITLE:=physdev iptables extension
 364 endef
 365
 366 define Package/iptables-mod-physdev/description
 367 The iptables physdev match.
 368 endef
 369
 370 define Package/iptables-mod-led
 371 $(call Package/iptables/Module, +kmod-ipt-led)
 372   TITLE:=LED trigger iptables extension
 373 endef
 374
 375 define Package/iptables-mod-led/description
 376 iptables extension for triggering a LED.
 377
 378  Targets:
 379   - LED
 380
 381 endef
 382
 383 define Package/iptables-mod-tproxy
 384 $(call Package/iptables/Module, +kmod-ipt-tproxy)
 385   TITLE:=Transparent proxy iptables extensions
 386 endef
 387
 388 define Package/iptables-mod-tproxy/description
 389 Transparent proxy iptables extensions.
 390
 391  Matches:
 392   - socket
 393
 394  Targets:
 395   - TPROXY
 396
 397 endef
 398
 399 define Package/iptables-mod-tee
 400 $(call Package/iptables/Module, +kmod-ipt-tee)
 401   TITLE:=TEE iptables extensions
 402 endef
 403
 404 define Package/iptables-mod-tee/description
 405 TEE iptables extensions.
 406
 407  Targets:
 408   - TEE
 409
 410 endef
 411
 412 define Package/iptables-mod-u32
 413 $(call Package/iptables/Module, +kmod-ipt-u32)
 414   TITLE:=U32 iptables extensions
 415 endef
 416
 417 define Package/iptables-mod-u32/description
 418 U32 iptables extensions.
 419
 420  Matches:
 421   - u32
 422
 423 endef
 424
 425 define Package/iptables-mod-checksum
 426 $(call Package/iptables/Module, +kmod-ipt-checksum)
 427   TITLE:=IP CHECKSUM target extension
 428 endef
 429
 430 define Package/iptables-mod-checksum/description
 431 iptables extension for the CHECKSUM calculation target
 432 endef
 433
 434 define Package/ip6tables
 435 $(call Package/iptables/Default)
 436   DEPENDS:=@IPV6 +kmod-ip6tables +iptables
 437   CATEGORY:=Network
 438   TITLE:=IPv6 firewall administration tool
 439   MENU:=1
 440 endef
 441
 442 define Package/ip6tables-nft
 443 $(call Package/iptables/Default)
 444   DEPENDS:=ip6tables @IPTABLES_NFTABLES +libxtables-nft
 445   TITLE:=IP firewall administration tool nft
 446 endef
 447
 448 define Package/ip6tables-nft/description
 449 Extra ip6tables nftables nft binaries.
 450   iptables-nft
 451   iptables-nft-restore
 452   iptables-nft-save
 453   iptables-translate
 454   iptables-restore-translate
 455 endef
 456
 457 define Package/ip6tables-extra
 458 $(call Package/iptables/Default)
 459   DEPENDS:=ip6tables +kmod-ip6tables-extra
 460   TITLE:=IPv6 header matching modules
 461 endef
 462
 463 define Package/ip6tables-mod-extra/description
 464 iptables header matching modules for IPv6
 465 endef
 466
 467 define Package/ip6tables-mod-nat
 468 $(call Package/iptables/Default)
 469   DEPENDS:=ip6tables +kmod-ipt-nat6
 470   TITLE:=IPv6 NAT extensions
 471 endef
 472
 473 define Package/ip6tables-mod-nat/description
 474 iptables extensions for IPv6-NAT targets.
 475 endef
 476
 477 define Package/libip4tc
 478 $(call Package/iptables/Default)
 479   SECTION:=libs
 480   CATEGORY:=Libraries
 481   TITLE:=IPv4 firewall - shared libiptc library
 482   ABI_VERSION:=2
 483   DEPENDS:=+libxtables
 484 endef
 485
 486 define Package/libip6tc
 487 $(call Package/iptables/Default)
 488   SECTION:=libs
 489   CATEGORY:=Libraries
 490   TITLE:=IPv6 firewall - shared libiptc library
 491   ABI_VERSION:=2
 492   DEPENDS:=+libxtables
 493 endef
 494
 495 define Package/libxtables
 496  $(call Package/iptables/Default)
 497  SECTION:=libs
 498  CATEGORY:=Libraries
 499  TITLE:=IPv4/IPv6 firewall - shared xtables library
 500  ABI_VERSION:=12
 501  DEPENDS:= \
 502         +IPTABLES_CONNLABEL:libnetfilter-conntrack \
 503         +IPTABLES_NFTABLES:libnftnl
 504 endef
 505
 506 define Package/libxtables-nft
 507  $(call Package/iptables/Default)
 508  SECTION:=libs
 509  CATEGORY:=Libraries
 510  TITLE:=IPv4/IPv6 firewall - shared xtables nft library
 511  ABI_VERSION:=12
 512  DEPENDS:=libxtables
 513 endef
 514
 515 TARGET_CPPFLAGS := \
 516         -I$(PKG_BUILD_DIR)/include \
 517         -I$(LINUX_DIR)/user_headers/include \
 518         $(TARGET_CPPFLAGS)
 519
 520 TARGET_CFLAGS += \
 521         -I$(PKG_BUILD_DIR)/include \
 522         -I$(LINUX_DIR)/user_headers/include \
 523         -ffunction-sections -fdata-sections \
 524         -DNO_LEGACY
 525
 526 TARGET_LDFLAGS += \
 527         -Wl,--gc-sections
 528
 529 CONFIGURE_ARGS += \
 530         --enable-shared \
 531         --enable-static \
 532         --enable-devel \
 533         --with-kernel="$(LINUX_DIR)/user_headers" \
 534         --with-xtlibdir=/usr/lib/iptables \
 535         --with-xt-lock-name=/var/run/xtables.lock \
 536         $(if $(CONFIG_IPTABLES_CONNLABEL),,--disable-connlabel) \
 537         $(if $(CONFIG_IPTABLES_NFTABLES),,--disable-nftables) \
 538         $(if $(CONFIG_IPV6),,--disable-ipv6)
 539
 540 MAKE_FLAGS := \
 541         $(TARGET_CONFIGURE_OPTS) \
 542         COPT_FLAGS="$(TARGET_CFLAGS)" \
 543         KERNEL_DIR="$(LINUX_DIR)/user_headers/" PREFIX=/usr \
 544         KBUILD_OUTPUT="$(LINUX_DIR)" \
 545         BUILTIN_MODULES="$(patsubst ip6t_%,%,$(patsubst ipt_%,%,$(patsubst xt_%,%,$(IPT_BUILTIN) $(IPT_CONNTRACK-m) $(IPT_NAT-m))))"
 546
 547 ifneq ($(wildcard $(PKG_BUILD_DIR)/.config_*),$(subst .configured_,.config_,$(STAMP_CONFIGURED)))
 548   define Build/Configure/rebuild
 549         $(FIND) $(PKG_BUILD_DIR) -name \*.o -or -name \*.\?o -or -name \*.a | $(XARGS) rm -f
 550         rm -f $(PKG_BUILD_DIR)/.config_*
 551         rm -f $(PKG_BUILD_DIR)/.configured_*
 552         touch $(subst .configured_,.config_,$(STAMP_CONFIGURED))
 553   endef
 554 endif
 555
 556 define Build/Configure
 557 $(Build/Configure/rebuild)
 558 $(Build/Configure/Default)
 559 endef
 560
 561 define Build/InstallDev
 562         $(INSTALL_DIR) $(1)/usr/include
 563         $(INSTALL_DIR) $(1)/usr/include/iptables
 564         $(INSTALL_DIR) $(1)/usr/include/net/netfilter
 565
 566         # XXX: iptables header fixup, some headers are not installed by iptables anymore
 567         $(CP) $(PKG_BUILD_DIR)/include/iptables/*.h $(1)/usr/include/iptables/
 568         $(CP) $(PKG_BUILD_DIR)/include/iptables.h $(1)/usr/include/
 569         $(CP) $(PKG_BUILD_DIR)/include/ip6tables.h $(1)/usr/include/
 570         $(CP) $(PKG_BUILD_DIR)/include/libipulog $(1)/usr/include/
 571         $(CP) $(PKG_BUILD_DIR)/include/libiptc $(1)/usr/include/
 572
 573         $(CP) $(PKG_INSTALL_DIR)/usr/include/* $(1)/usr/include/
 574         $(INSTALL_DIR) $(1)/usr/lib
 575         $(CP) $(PKG_INSTALL_DIR)/usr/lib/libxtables.so* $(1)/usr/lib/
 576         $(CP) $(PKG_INSTALL_DIR)/usr/lib/libip*tc.so* $(1)/usr/lib/
 577         $(INSTALL_DIR) $(1)/usr/lib/pkgconfig
 578         $(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/xtables.pc $(1)/usr/lib/pkgconfig/
 579         $(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/libip*tc.pc $(1)/usr/lib/pkgconfig/
 580
 581         # XXX: needed by firewall3
 582         $(CP) $(PKG_BUILD_DIR)/extensions/libiptext*.so $(1)/usr/lib/
 583 endef
 584
 585 define Package/iptables/install
 586         $(INSTALL_DIR) $(1)/usr/sbin
 587         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/xtables-legacy-multi $(1)/usr/sbin/
 588         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/iptables{,-restore,-save} $(1)/usr/sbin/
 589         $(INSTALL_DIR) $(1)/usr/lib/iptables
 590 endef
 591
 592 define Package/iptables-nft/install
 593         $(INSTALL_DIR) $(1)/usr/sbin
 594         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/xtables-nft-multi $(1)/usr/sbin/
 595         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/iptables-nft{,-restore,-save} $(1)/usr/sbin/
 596         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/iptables{,-restore}-translate $(1)/usr/sbin/
 597 endef
 598
 599 define Package/ip6tables/install
 600         $(INSTALL_DIR) $(1)/usr/sbin
 601         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/ip6tables{,-restore,-save} $(1)/usr/sbin/
 602 endef
 603
 604 define Package/ip6tables-nft/install
 605         $(INSTALL_DIR) $(1)/usr/sbin
 606         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/ip6tables-nft{,-restore,-save} $(1)/usr/sbin/
 607         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/ip6tables{,-restore}-translate $(1)/usr/sbin/
 608 endef
 609
 610 define Package/libip4tc/install
 611         $(INSTALL_DIR) $(1)/usr/lib
 612         $(CP) $(PKG_INSTALL_DIR)/usr/lib/libip4tc.so.* $(1)/usr/lib/
 613         $(CP) $(PKG_BUILD_DIR)/extensions/libiptext4.so $(1)/usr/lib/
 614 endef
 615
 616 define Package/libip6tc/install
 617         $(INSTALL_DIR) $(1)/usr/lib
 618         $(CP) $(PKG_INSTALL_DIR)/usr/lib/libip6tc.so.* $(1)/usr/lib/
 619         $(CP) $(PKG_BUILD_DIR)/extensions/libiptext6.so $(1)/usr/lib/
 620 endef
 621
 622 define Package/libxtables/install
 623         $(INSTALL_DIR) $(1)/usr/lib
 624         $(CP) $(PKG_INSTALL_DIR)/usr/lib/libxtables.so.* $(1)/usr/lib/
 625         $(CP) $(PKG_BUILD_DIR)/extensions/libiptext.so $(1)/usr/lib/
 626 endef
 627
 628 define Package/libxtables-nft/install
 629         $(INSTALL_DIR) $(1)/usr/lib
 630         $(CP) $(PKG_BUILD_DIR)/extensions/libiptext_*.so $(1)/usr/lib/
 631 endef
 632
 633 define BuildPlugin
 634   define Package/$(1)/install
 635         $(INSTALL_DIR) $$(1)/usr/lib/iptables
 636         for m in $(patsubst xt_%,ipt_%,$(2)) $(patsubst ipt_%,xt_%,$(2)) $(patsubst xt_%,ip6t_%,$(2)) $(patsubst ip6t_%,xt_%,$(2)); do \
 637                 if [ -f $(PKG_INSTALL_DIR)/usr/lib/iptables/lib$$$$$$$${m}.so ]; then \
 638                         $(CP) $(PKG_INSTALL_DIR)/usr/lib/iptables/lib$$$$$$$${m}.so $$(1)/usr/lib/iptables/ ; \
 639                 fi; \
 640         done
 641         $(3)
 642   endef
 643
 644   $$(eval $$(call BuildPackage,$(1)))
 645 endef
 646
 647 $(eval $(call BuildPackage,libxtables))
 648 $(eval $(call BuildPackage,libxtables-nft))
 649 $(eval $(call BuildPackage,libip4tc))
 650 $(eval $(call BuildPackage,libip6tc))
 651 $(eval $(call BuildPackage,iptables))
 652 $(eval $(call BuildPackage,iptables-nft))
 653 $(eval $(call BuildPlugin,iptables-mod-conntrack-extra,$(IPT_CONNTRACK_EXTRA-m)))
 654 $(eval $(call BuildPlugin,iptables-mod-conntrack-label,$(IPT_CONNTRACK_LABEL-m)))
 655 $(eval $(call BuildPlugin,iptables-mod-extra,$(IPT_EXTRA-m)))
 656 $(eval $(call BuildPlugin,iptables-mod-physdev,$(IPT_PHYSDEV-m)))
 657 $(eval $(call BuildPlugin,iptables-mod-filter,$(IPT_FILTER-m)))
 658 $(eval $(call BuildPlugin,iptables-mod-ipopt,$(IPT_IPOPT-m)))
 659 $(eval $(call BuildPlugin,iptables-mod-ipsec,$(IPT_IPSEC-m)))
 660 $(eval $(call BuildPlugin,iptables-mod-nat-extra,$(IPT_NAT_EXTRA-m)))
 661 $(eval $(call BuildPlugin,iptables-mod-iprange,$(IPT_IPRANGE-m)))
 662 $(eval $(call BuildPlugin,iptables-mod-cluster,$(IPT_CLUSTER-m)))
 663 $(eval $(call BuildPlugin,iptables-mod-clusterip,$(IPT_CLUSTERIP-m)))
 664 $(eval $(call BuildPlugin,iptables-mod-hashlimit,$(IPT_HASHLIMIT-m)))
 665 $(eval $(call BuildPlugin,iptables-mod-rpfilter,$(IPT_RPFILTER-m)))
 666 $(eval $(call BuildPlugin,iptables-mod-led,$(IPT_LED-m)))
 667 $(eval $(call BuildPlugin,iptables-mod-tproxy,$(IPT_TPROXY-m)))
 668 $(eval $(call BuildPlugin,iptables-mod-tee,$(IPT_TEE-m)))
 669 $(eval $(call BuildPlugin,iptables-mod-u32,$(IPT_U32-m)))
 670 $(eval $(call BuildPlugin,iptables-mod-nflog,$(IPT_NFLOG-m)))
 671 $(eval $(call BuildPlugin,iptables-mod-trace,$(IPT_DEBUG-m)))
 672 $(eval $(call BuildPlugin,iptables-mod-nfqueue,$(IPT_NFQUEUE-m)))
 673 $(eval $(call BuildPlugin,iptables-mod-checksum,$(IPT_CHECKSUM-m)))
 674 $(eval $(call BuildPackage,ip6tables))
 675 $(eval $(call BuildPackage,ip6tables-nft))
 676 $(eval $(call BuildPlugin,ip6tables-extra,$(IPT_IPV6_EXTRA-m)))
 677 $(eval $(call BuildPlugin,ip6tables-mod-nat,$(IPT_NAT6-m)))
 678