package/network/utils/iptables/Makefile

   1 #
   2 # Copyright (C) 2006-2016 OpenWrt.org
   3 #
   4 # This is free software, licensed under the GNU General Public License v2.
   5 # See /LICENSE for more information.
   6 #
   7
   8 include $(TOPDIR)/rules.mk
   9 include $(INCLUDE_DIR)/kernel.mk
  10
  11 PKG_NAME:=iptables
  12 PKG_VERSION:=1.6.2
  13 PKG_RELEASE:=3
  14
  15 PKG_SOURCE_PROTO:=git
  16 PKG_SOURCE_URL:=https://git.netfilter.org/iptables
  17 PKG_SOURCE_VERSION:=c16bdec15137b241586310d0e61bc88cc3726004
  18 PKG_MIRROR_HASH:=72e4bec94a56dd600097846c773e1074ff705e38f800ef221db646c064371a53
  19
  20 PKG_FIXUP:=autoreconf
  21 PKG_FLAGS:=nonshared
  22
  23 PKG_INSTALL:=1
  24 PKG_BUILD_PARALLEL:=1
  25 PKG_LICENSE:=GPL-2.0
  26 PKG_CPE_ID:=cpe:/a:netfilter_core_team:iptables
  27
  28 include $(INCLUDE_DIR)/package.mk
  29 ifeq ($(DUMP),)
  30   -include $(LINUX_DIR)/.config
  31   include $(INCLUDE_DIR)/netfilter.mk
  32   STAMP_CONFIGURED:=$(strip $(STAMP_CONFIGURED))_$(shell grep 'NETFILTER' $(LINUX_DIR)/.config | mkhash md5)
  33 endif
  34
  35
  36 define Package/iptables/Default
  37   SECTION:=net
  38   CATEGORY:=Network
  39   SUBMENU:=Firewall
  40   URL:=http://netfilter.org/
  41 endef
  42
  43 define Package/iptables/Module
  44 $(call Package/iptables/Default)
  45   DEPENDS:=iptables $(1)
  46 endef
  47
  48 define Package/iptables
  49 $(call Package/iptables/Default)
  50   TITLE:=IP firewall administration tool
  51   MENU:=1
  52   DEPENDS+= +kmod-ipt-core +libip4tc +IPV6:libip6tc +libxtables
  53 endef
  54
  55 define Package/iptables/config
  56   config IPTABLES_CONNLABEL
  57         bool "Enable Connlabel support"
  58         default n
  59         help
  60                 This enable connlabel support in iptables.
  61
  62   config IPTABLES_NFTABLES
  63         bool "Enable Nftables support"
  64         default n
  65         help
  66                 This enable nftables support in iptables.
  67 endef
  68
  69 define Package/iptables/description
  70 IP firewall administration tool.
  71
  72  Matches:
  73   - icmp
  74   - tcp
  75   - udp
  76   - comment
  77   - conntrack
  78   - limit
  79   - mac
  80   - mark
  81   - multiport
  82   - set
  83   - state
  84   - time
  85
  86  Targets:
  87   - ACCEPT
  88   - CT
  89   - DNAT
  90   - DROP
  91   - REJECT
  92   - FLOWOFFLOAD
  93   - LOG
  94   - MARK
  95   - MASQUERADE
  96   - REDIRECT
  97   - SET
  98   - SNAT
  99   - TCPMSS
 100
 101  Tables:
 102   - filter
 103   - mangle
 104   - nat
 105   - raw
 106
 107 endef
 108
 109 define Package/iptables-compat
 110 $(call Package/iptables/Default)
 111   TITLE:=IP firewall administration tool compat
 112   DEPENDS:=iptables @IPTABLES_NFTABLES +libxtables-compat
 113 endef
 114
 115 define Package/iptables-compat/description
 116 Extra iptables nftables compat binaries.
 117   iptables-compat
 118   iptables-compat-restore
 119   iptables-compat-save
 120   iptables-translate
 121   iptables-restore-translate
 122 endef
 123
 124 define Package/iptables-mod-conntrack-extra
 125 $(call Package/iptables/Module, +kmod-ipt-conntrack-extra +kmod-ipt-raw)
 126   TITLE:=Extra connection tracking extensions
 127 endef
 128
 129 define Package/iptables-mod-conntrack-extra/description
 130 Extra iptables extensions for connection tracking.
 131
 132  Matches:
 133   - connbytes
 134   - connlimit
 135   - connmark
 136   - recent
 137   - helper
 138
 139  Targets:
 140   - CONNMARK
 141
 142 endef
 143
 144 define Package/iptables-mod-conntrack-label
 145 $(call Package/iptables/Module, +kmod-ipt-conntrack-label @IPTABLES_CONNLABEL)
 146   TITLE:=Connection tracking labeling extension
 147   DEFAULT:=y if IPTABLES_CONNLABEL
 148 endef
 149
 150 define Package/iptables-mod-conntrack-label/description
 151 Match and set label(s) on connection tracking entries
 152
 153  Matches:
 154   - connlabel
 155
 156 endef
 157
 158 define Package/iptables-mod-filter
 159 $(call Package/iptables/Module, +kmod-ipt-filter)
 160   TITLE:=Content inspection extensions
 161 endef
 162
 163 define Package/iptables-mod-filter/description
 164 iptables extensions for packet content inspection.
 165 Includes support for:
 166
 167  Matches:
 168   - string
 169   - bpf
 170
 171 endef
 172
 173 define Package/iptables-mod-ipopt
 174 $(call Package/iptables/Module, +kmod-ipt-ipopt)
 175   TITLE:=IP/Packet option extensions
 176 endef
 177
 178 define Package/iptables-mod-ipopt/description
 179 iptables extensions for matching/changing IP packet options.
 180
 181  Matches:
 182   - dscp
 183   - ecn
 184   - length
 185   - statistic
 186   - tcpmss
 187   - unclean
 188   - hl
 189
 190  Targets:
 191   - DSCP
 192   - CLASSIFY
 193   - ECN
 194   - HL
 195
 196 endef
 197
 198 define Package/iptables-mod-ipsec
 199 $(call Package/iptables/Module, +kmod-ipt-ipsec)
 200   TITLE:=IPsec extensions
 201 endef
 202
 203 define Package/iptables-mod-ipsec/description
 204 iptables extensions for matching ipsec traffic.
 205
 206  Matches:
 207   - ah
 208   - esp
 209   - policy
 210
 211 endef
 212
 213 define Package/iptables-mod-nat-extra
 214 $(call Package/iptables/Module, +kmod-ipt-nat-extra)
 215   TITLE:=Extra NAT extensions
 216 endef
 217
 218 define Package/iptables-mod-nat-extra/description
 219 iptables extensions for extra NAT targets.
 220
 221  Targets:
 222   - MIRROR
 223   - NETMAP
 224 endef
 225
 226 define Package/iptables-mod-ulog
 227 $(call Package/iptables/Module, +kmod-ipt-ulog)
 228   TITLE:=user-space packet logging
 229 endef
 230
 231 define Package/iptables-mod-ulog/description
 232 iptables extensions for user-space packet logging.
 233
 234  Targets:
 235   - ULOG
 236
 237 endef
 238
 239 define Package/iptables-mod-nflog
 240 $(call Package/iptables/Module, +kmod-nfnetlink-log +kmod-ipt-nflog)
 241   TITLE:=Netfilter NFLOG target
 242 endef
 243
 244 define Package/iptables-mod-nflog/description
 245  iptables extension for user-space logging via NFNETLINK.
 246
 247  Includes:
 248   - libxt_NFLOG
 249
 250 endef
 251
 252 define Package/iptables-mod-trace
 253 $(call Package/iptables/Module, +kmod-ipt-debug)
 254   TITLE:=Netfilter TRACE target
 255 endef
 256
 257 define Package/iptables-mod-trace/description
 258  iptables extension for TRACE target
 259
 260  Includes:
 261   - libxt_TRACE
 262
 263 endef
 264
 265
 266 define Package/iptables-mod-nfqueue
 267 $(call Package/iptables/Module, +kmod-nfnetlink-queue +kmod-ipt-nfqueue)
 268   TITLE:=Netfilter NFQUEUE target
 269 endef
 270
 271 define Package/iptables-mod-nfqueue/description
 272  iptables extension for user-space queuing via NFNETLINK.
 273
 274  Includes:
 275   - libxt_NFQUEUE
 276
 277 endef
 278
 279 define Package/iptables-mod-hashlimit
 280 $(call Package/iptables/Module, +kmod-ipt-hashlimit)
 281   TITLE:=hashlimit matching
 282 endef
 283
 284 define Package/iptables-mod-hashlimit/description
 285 iptables extensions for hashlimit matching
 286
 287  Matches:
 288   - hashlimit
 289
 290 endef
 291
 292 define Package/iptables-mod-rpfilter
 293 $(call Package/iptables/Module, +kmod-ipt-rpfilter)
 294   TITLE:=rpfilter iptables extension
 295 endef
 296
 297 define Package/iptables-mod-rpfilter/description
 298 iptables extensions for reverse path filter test on a packet
 299
 300  Matches:
 301   - rpfilter
 302
 303 endef
 304
 305 define Package/iptables-mod-iprange
 306 $(call Package/iptables/Module, +kmod-ipt-iprange)
 307   TITLE:=IP range extension
 308 endef
 309
 310 define Package/iptables-mod-iprange/description
 311 iptables extensions for matching ip ranges.
 312
 313  Matches:
 314   - iprange
 315
 316 endef
 317
 318 define Package/iptables-mod-cluster
 319 $(call Package/iptables/Module, +kmod-ipt-cluster)
 320   TITLE:=Match cluster extension
 321 endef
 322
 323 define Package/iptables-mod-cluster/description
 324 iptables extensions for matching cluster.
 325
 326  Netfilter (IPv4/IPv6) module for matching cluster
 327  This option allows you to build work-load-sharing clusters of
 328  network servers/stateful firewalls without having a dedicated
 329  load-balancing router/server/switch. Basically, this match returns
 330  true when the packet must be handled by this cluster node. Thus,
 331  all nodes see all packets and this match decides which node handles
 332  what packets. The work-load sharing algorithm is based on source
 333  address hashing.
 334
 335  This module is usable for ipv4 and ipv6.
 336
 337  If you select it, it enables kmod-ipt-cluster.
 338
 339  see `iptables -m cluster --help` for more information.
 340 endef
 341
 342 define Package/iptables-mod-clusterip
 343 $(call Package/iptables/Module, +kmod-ipt-clusterip)
 344   TITLE:=Clusterip extension
 345 endef
 346
 347 define Package/iptables-mod-clusterip/description
 348 iptables extensions for CLUSTERIP.
 349  The CLUSTERIP target allows you to build load-balancing clusters of
 350  network servers without having a dedicated load-balancing
 351  router/server/switch.
 352
 353  If you select it, it enables kmod-ipt-clusterip.
 354
 355  see `iptables -j CLUSTERIP --help` for more information.
 356 endef
 357
 358 define Package/iptables-mod-extra
 359 $(call Package/iptables/Module, +kmod-ipt-extra)
 360   TITLE:=Other extra iptables extensions
 361 endef
 362
 363 define Package/iptables-mod-extra/description
 364 Other extra iptables extensions.
 365
 366  Matches:
 367   - addrtype
 368   - condition
 369   - owner
 370   - pkttype
 371   - quota
 372
 373 endef
 374
 375 define Package/iptables-mod-physdev
 376 $(call Package/iptables/Module, +kmod-ipt-physdev)
 377   TITLE:=physdev iptables extension
 378 endef
 379
 380 define Package/iptables-mod-physdev/description
 381 The iptables physdev match.
 382 endef
 383
 384 define Package/iptables-mod-led
 385 $(call Package/iptables/Module, +kmod-ipt-led)
 386   TITLE:=LED trigger iptables extension
 387 endef
 388
 389 define Package/iptables-mod-led/description
 390 iptables extension for triggering a LED.
 391
 392  Targets:
 393   - LED
 394
 395 endef
 396
 397 define Package/iptables-mod-tproxy
 398 $(call Package/iptables/Module, +kmod-ipt-tproxy)
 399   TITLE:=Transparent proxy iptables extensions
 400 endef
 401
 402 define Package/iptables-mod-tproxy/description
 403 Transparent proxy iptables extensions.
 404
 405  Matches:
 406   - socket
 407
 408  Targets:
 409   - TPROXY
 410
 411 endef
 412
 413 define Package/iptables-mod-tee
 414 $(call Package/iptables/Module, +kmod-ipt-tee)
 415   TITLE:=TEE iptables extensions
 416 endef
 417
 418 define Package/iptables-mod-tee/description
 419 TEE iptables extensions.
 420
 421  Targets:
 422   - TEE
 423
 424 endef
 425
 426 define Package/iptables-mod-u32
 427 $(call Package/iptables/Module, +kmod-ipt-u32)
 428   TITLE:=U32 iptables extensions
 429 endef
 430
 431 define Package/iptables-mod-u32/description
 432 U32 iptables extensions.
 433
 434  Matches:
 435   - u32
 436
 437 endef
 438
 439 define Package/iptables-mod-checksum
 440 $(call Package/iptables/Module, +kmod-ipt-checksum)
 441   TITLE:=IP CHECKSUM target extension
 442 endef
 443
 444 define Package/iptables-mod-checksum/description
 445 iptables extension for the CHECKSUM calculation target
 446 endef
 447
 448 define Package/ip6tables
 449 $(call Package/iptables/Default)
 450   DEPENDS:=@IPV6 +kmod-ip6tables +iptables
 451   CATEGORY:=Network
 452   TITLE:=IPv6 firewall administration tool
 453   MENU:=1
 454 endef
 455
 456 define Package/ip6tables-compat
 457 $(call Package/iptables/Default)
 458   DEPENDS:=ip6tables @IPTABLES_NFTABLES +libxtables-compat
 459   TITLE:=IP firewall administration tool compat
 460 endef
 461
 462 define Package/ip6tables-compat/description
 463 Extra ip6tables nftables compat binaries.
 464   iptables-compat
 465   iptables-compat-restore
 466   iptables-compat-save
 467   iptables-translate
 468   iptables-restore-translate
 469 endef
 470
 471 define Package/ip6tables-extra
 472 $(call Package/iptables/Default)
 473   DEPENDS:=ip6tables +kmod-ip6tables-extra
 474   TITLE:=IPv6 header matching modules
 475 endef
 476
 477 define Package/ip6tables-mod-extra/description
 478 iptables header matching modules for IPv6
 479 endef
 480
 481 define Package/ip6tables-mod-nat
 482 $(call Package/iptables/Default)
 483   DEPENDS:=ip6tables +kmod-ipt-nat6
 484   TITLE:=IPv6 NAT extensions
 485 endef
 486
 487 define Package/ip6tables-mod-nat/description
 488 iptables extensions for IPv6-NAT targets.
 489 endef
 490
 491 define Package/libiptc
 492 $(call Package/iptables/Default)
 493   SECTION:=libs
 494   CATEGORY:=Libraries
 495   DEPENDS:=+libip4tc +IPV6:libip6tc +libxtables
 496   ABI_VERSION:=$(PKG_VERSION)
 497   TITLE:=IPv4/IPv6 firewall - shared libiptc library (compatibility stub)
 498 endef
 499
 500 define Package/libip4tc
 501 $(call Package/iptables/Default)
 502   SECTION:=libs
 503   CATEGORY:=Libraries
 504   TITLE:=IPv4 firewall - shared libiptc library
 505   ABI_VERSION:=$(PKG_VERSION)
 506   DEPENDS:=+libxtables
 507 endef
 508
 509 define Package/libip6tc
 510 $(call Package/iptables/Default)
 511   SECTION:=libs
 512   CATEGORY:=Libraries
 513   TITLE:=IPv6 firewall - shared libiptc library
 514   ABI_VERSION:=$(PKG_VERSION)
 515   DEPENDS:=@IPV6 +libxtables
 516 endef
 517
 518 define Package/libxtables
 519  $(call Package/iptables/Default)
 520  SECTION:=libs
 521  CATEGORY:=Libraries
 522  TITLE:=IPv4/IPv6 firewall - shared xtables library
 523  ABI_VERSION:=$(PKG_VERSION)
 524  DEPENDS:= \
 525         +IPTABLES_CONNLABEL:libnetfilter-conntrack \
 526         +IPTABLES_NFTABLES:libnftnl
 527 endef
 528
 529 define Package/libxtables-compat
 530  $(call Package/iptables/Default)
 531  SECTION:=libs
 532  CATEGORY:=Libraries
 533  TITLE:=IPv4/IPv6 firewall - shared xtables compat library
 534  ABI_VERSION:=$(PKG_VERSION)
 535  DEPENDS:=libxtables
 536 endef
 537
 538 TARGET_CPPFLAGS := \
 539         -I$(PKG_BUILD_DIR)/include \
 540         -I$(LINUX_DIR)/user_headers/include \
 541         $(TARGET_CPPFLAGS)
 542
 543 TARGET_CFLAGS += \
 544         -I$(PKG_BUILD_DIR)/include \
 545         -I$(LINUX_DIR)/user_headers/include \
 546         -ffunction-sections -fdata-sections \
 547         -DNO_LEGACY
 548
 549 TARGET_LDFLAGS += \
 550         -Wl,--gc-sections
 551
 552 CONFIGURE_ARGS += \
 553         --enable-shared \
 554         --enable-static \
 555         --enable-devel \
 556         --with-kernel="$(LINUX_DIR)/user_headers" \
 557         --with-xtlibdir=/usr/lib/iptables \
 558         --with-xt-lock-name=/var/run/xtables.lock \
 559         $(if $(CONFIG_IPTABLES_CONNLABEL),,--disable-connlabel) \
 560         $(if $(CONFIG_IPTABLES_NFTABLES),,--disable-nftables) \
 561         $(if $(CONFIG_IPV6),,--disable-ipv6)
 562
 563 MAKE_FLAGS := \
 564         $(TARGET_CONFIGURE_OPTS) \
 565         COPT_FLAGS="$(TARGET_CFLAGS)" \
 566         KERNEL_DIR="$(LINUX_DIR)/user_headers/" PREFIX=/usr \
 567         KBUILD_OUTPUT="$(LINUX_DIR)" \
 568         BUILTIN_MODULES="$(patsubst ip6t_%,%,$(patsubst ipt_%,%,$(patsubst xt_%,%,$(IPT_BUILTIN) $(IPT_CONNTRACK-m) $(IPT_NAT-m))))"
 569
 570 ifneq ($(wildcard $(PKG_BUILD_DIR)/.config_*),$(subst .configured_,.config_,$(STAMP_CONFIGURED)))
 571   define Build/Configure/rebuild
 572         $(FIND) $(PKG_BUILD_DIR) -name \*.o -or -name \*.\?o -or -name \*.a | $(XARGS) rm -f
 573         rm -f $(PKG_BUILD_DIR)/.config_*
 574         rm -f $(PKG_BUILD_DIR)/.configured_*
 575         touch $(subst .configured_,.config_,$(STAMP_CONFIGURED))
 576   endef
 577 endif
 578
 579 define Build/Configure
 580 $(Build/Configure/rebuild)
 581 $(Build/Configure/Default)
 582 endef
 583
 584 define Build/InstallDev
 585         $(INSTALL_DIR) $(1)/usr/include
 586         $(INSTALL_DIR) $(1)/usr/include/iptables
 587         $(INSTALL_DIR) $(1)/usr/include/net/netfilter
 588
 589         # XXX: iptables header fixup, some headers are not installed by iptables anymore
 590         $(CP) $(PKG_BUILD_DIR)/include/iptables/*.h $(1)/usr/include/iptables/
 591         $(CP) $(PKG_BUILD_DIR)/include/iptables.h $(1)/usr/include/
 592         $(CP) $(PKG_BUILD_DIR)/include/ip6tables.h $(1)/usr/include/
 593         $(CP) $(PKG_BUILD_DIR)/include/libipulog $(1)/usr/include/
 594         $(CP) $(PKG_BUILD_DIR)/include/libiptc $(1)/usr/include/
 595
 596         $(CP) $(PKG_INSTALL_DIR)/usr/include/* $(1)/usr/include/
 597         $(INSTALL_DIR) $(1)/usr/lib
 598         $(CP) $(PKG_INSTALL_DIR)/usr/lib/libxtables.so* $(1)/usr/lib/
 599         $(CP) $(PKG_INSTALL_DIR)/usr/lib/libip*tc.so* $(1)/usr/lib/
 600         $(INSTALL_DIR) $(1)/usr/lib/pkgconfig
 601         $(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/xtables.pc $(1)/usr/lib/pkgconfig/
 602         $(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/libip*tc.pc $(1)/usr/lib/pkgconfig/
 603
 604         # XXX: needed by firewall3
 605         $(CP) $(PKG_BUILD_DIR)/extensions/libiptext*.so $(1)/usr/lib/
 606 endef
 607
 608 define Package/iptables/install
 609         $(INSTALL_DIR) $(1)/usr/sbin
 610         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/xtables-multi $(1)/usr/sbin/
 611         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/iptables{,-restore,-save} $(1)/usr/sbin/
 612         $(INSTALL_DIR) $(1)/usr/lib/iptables
 613 endef
 614
 615 define Package/iptables-compat/install
 616         $(INSTALL_DIR) $(1)/usr/sbin
 617         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/xtables-compat-multi $(1)/usr/sbin/
 618         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/iptables-compat{,-restore,-save} $(1)/usr/sbin/
 619         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/iptables{,-restore}-translate $(1)/usr/sbin/
 620 endef
 621
 622 define Package/ip6tables/install
 623         $(INSTALL_DIR) $(1)/usr/sbin
 624         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/ip6tables{,-restore,-save} $(1)/usr/sbin/
 625 endef
 626
 627 define Package/ip6tables-compat/install
 628         $(INSTALL_DIR) $(1)/usr/sbin
 629         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/ip6tables-compat{,-restore,-save} $(1)/usr/sbin/
 630         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/ip6tables{,-restore}-translate $(1)/usr/sbin/
 631 endef
 632
 633 define Package/libiptc/install
 634         $(INSTALL_DIR) $(1)/usr/lib
 635         $(CP) $(PKG_INSTALL_DIR)/usr/lib/libiptc.so* $(1)/usr/lib/
 636 endef
 637
 638 define Package/libip4tc/install
 639         $(INSTALL_DIR) $(1)/usr/lib
 640         $(CP) $(PKG_INSTALL_DIR)/usr/lib/libip4tc.so* $(1)/usr/lib/
 641         $(CP) $(PKG_BUILD_DIR)/extensions/libiptext4.so $(1)/usr/lib/
 642 endef
 643
 644 define Package/libip6tc/install
 645         $(INSTALL_DIR) $(1)/usr/lib
 646         $(CP) $(PKG_INSTALL_DIR)/usr/lib/libip6tc.so* $(1)/usr/lib/
 647         $(CP) $(PKG_BUILD_DIR)/extensions/libiptext6.so $(1)/usr/lib/
 648 endef
 649
 650 define Package/libxtables/install
 651         $(INSTALL_DIR) $(1)/usr/lib
 652         $(CP) $(PKG_INSTALL_DIR)/usr/lib/libxtables.so* $(1)/usr/lib/
 653         $(CP) $(PKG_BUILD_DIR)/extensions/libiptext.so $(1)/usr/lib/
 654 endef
 655
 656 define Package/libxtables-compat/install
 657         $(INSTALL_DIR) $(1)/usr/lib
 658         $(CP) $(PKG_BUILD_DIR)/extensions/libiptext_*.so $(1)/usr/lib/
 659 endef
 660
 661 define BuildPlugin
 662   define Package/$(1)/install
 663         $(INSTALL_DIR) $$(1)/usr/lib/iptables
 664         for m in $(patsubst xt_%,ipt_%,$(2)) $(patsubst ipt_%,xt_%,$(2)) $(patsubst xt_%,ip6t_%,$(2)) $(patsubst ip6t_%,xt_%,$(2)); do \
 665                 if [ -f $(PKG_INSTALL_DIR)/usr/lib/iptables/lib$$$$$$$${m}.so ]; then \
 666                         $(CP) $(PKG_INSTALL_DIR)/usr/lib/iptables/lib$$$$$$$${m}.so $$(1)/usr/lib/iptables/ ; \
 667                 fi; \
 668         done
 669         $(3)
 670   endef
 671
 672   $$(eval $$(call BuildPackage,$(1)))
 673 endef
 674
 675 $(eval $(call BuildPackage,iptables))
 676 $(eval $(call BuildPackage,iptables-compat))
 677 $(eval $(call BuildPlugin,iptables-mod-conntrack-extra,$(IPT_CONNTRACK_EXTRA-m)))
 678 $(eval $(call BuildPlugin,iptables-mod-conntrack-label,$(IPT_CONNTRACK_LABEL-m)))
 679 $(eval $(call BuildPlugin,iptables-mod-extra,$(IPT_EXTRA-m)))
 680 $(eval $(call BuildPlugin,iptables-mod-physdev,$(IPT_PHYSDEV-m)))
 681 $(eval $(call BuildPlugin,iptables-mod-filter,$(IPT_FILTER-m)))
 682 $(eval $(call BuildPlugin,iptables-mod-ipopt,$(IPT_IPOPT-m)))
 683 $(eval $(call BuildPlugin,iptables-mod-ipsec,$(IPT_IPSEC-m)))
 684 $(eval $(call BuildPlugin,iptables-mod-nat-extra,$(IPT_NAT_EXTRA-m)))
 685 $(eval $(call BuildPlugin,iptables-mod-iprange,$(IPT_IPRANGE-m)))
 686 $(eval $(call BuildPlugin,iptables-mod-cluster,$(IPT_CLUSTER-m)))
 687 $(eval $(call BuildPlugin,iptables-mod-clusterip,$(IPT_CLUSTERIP-m)))
 688 $(eval $(call BuildPlugin,iptables-mod-ulog,$(IPT_ULOG-m)))
 689 $(eval $(call BuildPlugin,iptables-mod-hashlimit,$(IPT_HASHLIMIT-m)))
 690 $(eval $(call BuildPlugin,iptables-mod-rpfilter,$(IPT_RPFILTER-m)))
 691 $(eval $(call BuildPlugin,iptables-mod-led,$(IPT_LED-m)))
 692 $(eval $(call BuildPlugin,iptables-mod-tproxy,$(IPT_TPROXY-m)))
 693 $(eval $(call BuildPlugin,iptables-mod-tee,$(IPT_TEE-m)))
 694 $(eval $(call BuildPlugin,iptables-mod-u32,$(IPT_U32-m)))
 695 $(eval $(call BuildPlugin,iptables-mod-nflog,$(IPT_NFLOG-m)))
 696 $(eval $(call BuildPlugin,iptables-mod-trace,$(IPT_DEBUG-m)))
 697 $(eval $(call BuildPlugin,iptables-mod-nfqueue,$(IPT_NFQUEUE-m)))
 698 $(eval $(call BuildPlugin,iptables-mod-checksum,$(IPT_CHECKSUM-m)))
 699 $(eval $(call BuildPackage,ip6tables))
 700 $(eval $(call BuildPackage,ip6tables-compat))
 701 $(eval $(call BuildPlugin,ip6tables-extra,$(IPT_IPV6_EXTRA-m)))
 702 $(eval $(call BuildPlugin,ip6tables-mod-nat,$(IPT_NAT6-m)))
 703 $(eval $(call BuildPackage,libiptc))
 704 $(eval $(call BuildPackage,libip4tc))
 705 $(eval $(call BuildPackage,libip6tc))
 706 $(eval $(call BuildPackage,libxtables))
 707 $(eval $(call BuildPackage,libxtables-compat))