iptables: update to 1.8.3
[openwrt/openwrt.git] / package / network / utils / iptables / Makefile
1 #
2 # Copyright (C) 2006-2016 OpenWrt.org
3 #
4 # This is free software, licensed under the GNU General Public License v2.
5 # See /LICENSE for more information.
6 #
7
8 include $(TOPDIR)/rules.mk
9 include $(INCLUDE_DIR)/kernel.mk
10
11 PKG_NAME:=iptables
12 PKG_VERSION:=1.8.3
13 PKG_RELEASE:=1
14
15 PKG_SOURCE_URL:=https://netfilter.org/projects/iptables/files
16 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
17 PKG_HASH:=a23cac034181206b4545f4e7e730e76e08b5f3dd78771ba9645a6756de9cdd80
18
19 PKG_FIXUP:=autoreconf
20 PKG_FLAGS:=nonshared
21
22 PKG_INSTALL:=1
23 PKG_BUILD_PARALLEL:=1
24 PKG_LICENSE:=GPL-2.0
25 PKG_CPE_ID:=cpe:/a:netfilter_core_team:iptables
26
27 include $(INCLUDE_DIR)/package.mk
28 ifeq ($(DUMP),)
29 -include $(LINUX_DIR)/.config
30 include $(INCLUDE_DIR)/netfilter.mk
31 STAMP_CONFIGURED:=$(strip $(STAMP_CONFIGURED))_$(shell grep 'NETFILTER' $(LINUX_DIR)/.config | mkhash md5)
32 endif
33
34
35 define Package/iptables/Default
36 SECTION:=net
37 CATEGORY:=Network
38 SUBMENU:=Firewall
39 URL:=https://netfilter.org/
40 endef
41
42 define Package/iptables/Module
43 $(call Package/iptables/Default)
44 DEPENDS:=iptables $(1)
45 endef
46
47 define Package/iptables
48 $(call Package/iptables/Default)
49 TITLE:=IP firewall administration tool
50 MENU:=1
51 DEPENDS+= +kmod-ipt-core +libip4tc +IPV6:libip6tc +libxtables
52 endef
53
54 define Package/iptables/config
55 config IPTABLES_CONNLABEL
56 bool "Enable Connlabel support"
57 default n
58 help
59 This enable connlabel support in iptables.
60
61 config IPTABLES_NFTABLES
62 bool "Enable Nftables support"
63 default n
64 help
65 This enable nftables support in iptables.
66 endef
67
68 define Package/iptables/description
69 IP firewall administration tool.
70
71 Matches:
72 - icmp
73 - tcp
74 - udp
75 - comment
76 - conntrack
77 - limit
78 - mac
79 - mark
80 - multiport
81 - set
82 - state
83 - time
84
85 Targets:
86 - ACCEPT
87 - CT
88 - DNAT
89 - DROP
90 - REJECT
91 - FLOWOFFLOAD
92 - LOG
93 - MARK
94 - MASQUERADE
95 - REDIRECT
96 - SET
97 - SNAT
98 - TCPMSS
99
100 Tables:
101 - filter
102 - mangle
103 - nat
104 - raw
105
106 endef
107
108 define Package/iptables-nft
109 $(call Package/iptables/Default)
110 TITLE:=IP firewall administration tool nft
111 DEPENDS:=iptables @IPTABLES_NFTABLES +libxtables-nft
112 endef
113
114 define Package/iptables-nft/description
115 Extra iptables nftables nft binaries.
116 iptables-nft
117 iptables-nft-restore
118 iptables-nft-save
119 iptables-translate
120 iptables-restore-translate
121 endef
122
123 define Package/iptables-mod-conntrack-extra
124 $(call Package/iptables/Module, +kmod-ipt-conntrack-extra +kmod-ipt-raw)
125 TITLE:=Extra connection tracking extensions
126 endef
127
128 define Package/iptables-mod-conntrack-extra/description
129 Extra iptables extensions for connection tracking.
130
131 Matches:
132 - connbytes
133 - connlimit
134 - connmark
135 - recent
136 - helper
137
138 Targets:
139 - CONNMARK
140
141 endef
142
143 define Package/iptables-mod-conntrack-label
144 $(call Package/iptables/Module, +kmod-ipt-conntrack-label @IPTABLES_CONNLABEL)
145 TITLE:=Connection tracking labeling extension
146 DEFAULT:=y if IPTABLES_CONNLABEL
147 endef
148
149 define Package/iptables-mod-conntrack-label/description
150 Match and set label(s) on connection tracking entries
151
152 Matches:
153 - connlabel
154
155 endef
156
157 define Package/iptables-mod-filter
158 $(call Package/iptables/Module, +kmod-ipt-filter)
159 TITLE:=Content inspection extensions
160 endef
161
162 define Package/iptables-mod-filter/description
163 iptables extensions for packet content inspection.
164 Includes support for:
165
166 Matches:
167 - string
168 - bpf
169
170 endef
171
172 define Package/iptables-mod-ipopt
173 $(call Package/iptables/Module, +kmod-ipt-ipopt)
174 TITLE:=IP/Packet option extensions
175 endef
176
177 define Package/iptables-mod-ipopt/description
178 iptables extensions for matching/changing IP packet options.
179
180 Matches:
181 - dscp
182 - ecn
183 - length
184 - statistic
185 - tcpmss
186 - unclean
187 - hl
188
189 Targets:
190 - DSCP
191 - CLASSIFY
192 - ECN
193 - HL
194
195 endef
196
197 define Package/iptables-mod-ipsec
198 $(call Package/iptables/Module, +kmod-ipt-ipsec)
199 TITLE:=IPsec extensions
200 endef
201
202 define Package/iptables-mod-ipsec/description
203 iptables extensions for matching ipsec traffic.
204
205 Matches:
206 - ah
207 - esp
208 - policy
209
210 endef
211
212 define Package/iptables-mod-nat-extra
213 $(call Package/iptables/Module, +kmod-ipt-nat-extra)
214 TITLE:=Extra NAT extensions
215 endef
216
217 define Package/iptables-mod-nat-extra/description
218 iptables extensions for extra NAT targets.
219
220 Targets:
221 - MIRROR
222 - NETMAP
223 endef
224
225 define Package/iptables-mod-ulog
226 $(call Package/iptables/Module, +kmod-ipt-ulog)
227 TITLE:=user-space packet logging
228 endef
229
230 define Package/iptables-mod-ulog/description
231 iptables extensions for user-space packet logging.
232
233 Targets:
234 - ULOG
235
236 endef
237
238 define Package/iptables-mod-nflog
239 $(call Package/iptables/Module, +kmod-nfnetlink-log +kmod-ipt-nflog)
240 TITLE:=Netfilter NFLOG target
241 endef
242
243 define Package/iptables-mod-nflog/description
244 iptables extension for user-space logging via NFNETLINK.
245
246 Includes:
247 - libxt_NFLOG
248
249 endef
250
251 define Package/iptables-mod-trace
252 $(call Package/iptables/Module, +kmod-ipt-debug)
253 TITLE:=Netfilter TRACE target
254 endef
255
256 define Package/iptables-mod-trace/description
257 iptables extension for TRACE target
258
259 Includes:
260 - libxt_TRACE
261
262 endef
263
264
265 define Package/iptables-mod-nfqueue
266 $(call Package/iptables/Module, +kmod-nfnetlink-queue +kmod-ipt-nfqueue)
267 TITLE:=Netfilter NFQUEUE target
268 endef
269
270 define Package/iptables-mod-nfqueue/description
271 iptables extension for user-space queuing via NFNETLINK.
272
273 Includes:
274 - libxt_NFQUEUE
275
276 endef
277
278 define Package/iptables-mod-hashlimit
279 $(call Package/iptables/Module, +kmod-ipt-hashlimit)
280 TITLE:=hashlimit matching
281 endef
282
283 define Package/iptables-mod-hashlimit/description
284 iptables extensions for hashlimit matching
285
286 Matches:
287 - hashlimit
288
289 endef
290
291 define Package/iptables-mod-rpfilter
292 $(call Package/iptables/Module, +kmod-ipt-rpfilter)
293 TITLE:=rpfilter iptables extension
294 endef
295
296 define Package/iptables-mod-rpfilter/description
297 iptables extensions for reverse path filter test on a packet
298
299 Matches:
300 - rpfilter
301
302 endef
303
304 define Package/iptables-mod-iprange
305 $(call Package/iptables/Module, +kmod-ipt-iprange)
306 TITLE:=IP range extension
307 endef
308
309 define Package/iptables-mod-iprange/description
310 iptables extensions for matching ip ranges.
311
312 Matches:
313 - iprange
314
315 endef
316
317 define Package/iptables-mod-cluster
318 $(call Package/iptables/Module, +kmod-ipt-cluster)
319 TITLE:=Match cluster extension
320 endef
321
322 define Package/iptables-mod-cluster/description
323 iptables extensions for matching cluster.
324
325 Netfilter (IPv4/IPv6) module for matching cluster
326 This option allows you to build work-load-sharing clusters of
327 network servers/stateful firewalls without having a dedicated
328 load-balancing router/server/switch. Basically, this match returns
329 true when the packet must be handled by this cluster node. Thus,
330 all nodes see all packets and this match decides which node handles
331 what packets. The work-load sharing algorithm is based on source
332 address hashing.
333
334 This module is usable for ipv4 and ipv6.
335
336 If you select it, it enables kmod-ipt-cluster.
337
338 see `iptables -m cluster --help` for more information.
339 endef
340
341 define Package/iptables-mod-clusterip
342 $(call Package/iptables/Module, +kmod-ipt-clusterip)
343 TITLE:=Clusterip extension
344 endef
345
346 define Package/iptables-mod-clusterip/description
347 iptables extensions for CLUSTERIP.
348 The CLUSTERIP target allows you to build load-balancing clusters of
349 network servers without having a dedicated load-balancing
350 router/server/switch.
351
352 If you select it, it enables kmod-ipt-clusterip.
353
354 see `iptables -j CLUSTERIP --help` for more information.
355 endef
356
357 define Package/iptables-mod-extra
358 $(call Package/iptables/Module, +kmod-ipt-extra)
359 TITLE:=Other extra iptables extensions
360 endef
361
362 define Package/iptables-mod-extra/description
363 Other extra iptables extensions.
364
365 Matches:
366 - addrtype
367 - condition
368 - owner
369 - pkttype
370 - quota
371
372 endef
373
374 define Package/iptables-mod-physdev
375 $(call Package/iptables/Module, +kmod-ipt-physdev)
376 TITLE:=physdev iptables extension
377 endef
378
379 define Package/iptables-mod-physdev/description
380 The iptables physdev match.
381 endef
382
383 define Package/iptables-mod-led
384 $(call Package/iptables/Module, +kmod-ipt-led)
385 TITLE:=LED trigger iptables extension
386 endef
387
388 define Package/iptables-mod-led/description
389 iptables extension for triggering a LED.
390
391 Targets:
392 - LED
393
394 endef
395
396 define Package/iptables-mod-tproxy
397 $(call Package/iptables/Module, +kmod-ipt-tproxy)
398 TITLE:=Transparent proxy iptables extensions
399 endef
400
401 define Package/iptables-mod-tproxy/description
402 Transparent proxy iptables extensions.
403
404 Matches:
405 - socket
406
407 Targets:
408 - TPROXY
409
410 endef
411
412 define Package/iptables-mod-tee
413 $(call Package/iptables/Module, +kmod-ipt-tee)
414 TITLE:=TEE iptables extensions
415 endef
416
417 define Package/iptables-mod-tee/description
418 TEE iptables extensions.
419
420 Targets:
421 - TEE
422
423 endef
424
425 define Package/iptables-mod-u32
426 $(call Package/iptables/Module, +kmod-ipt-u32)
427 TITLE:=U32 iptables extensions
428 endef
429
430 define Package/iptables-mod-u32/description
431 U32 iptables extensions.
432
433 Matches:
434 - u32
435
436 endef
437
438 define Package/iptables-mod-checksum
439 $(call Package/iptables/Module, +kmod-ipt-checksum)
440 TITLE:=IP CHECKSUM target extension
441 endef
442
443 define Package/iptables-mod-checksum/description
444 iptables extension for the CHECKSUM calculation target
445 endef
446
447 define Package/ip6tables
448 $(call Package/iptables/Default)
449 DEPENDS:=@IPV6 +kmod-ip6tables +iptables
450 CATEGORY:=Network
451 TITLE:=IPv6 firewall administration tool
452 MENU:=1
453 endef
454
455 define Package/ip6tables-nft
456 $(call Package/iptables/Default)
457 DEPENDS:=ip6tables @IPTABLES_NFTABLES +libxtables-nft
458 TITLE:=IP firewall administration tool nft
459 endef
460
461 define Package/ip6tables-nft/description
462 Extra ip6tables nftables nft binaries.
463 iptables-nft
464 iptables-nft-restore
465 iptables-nft-save
466 iptables-translate
467 iptables-restore-translate
468 endef
469
470 define Package/ip6tables-extra
471 $(call Package/iptables/Default)
472 DEPENDS:=ip6tables +kmod-ip6tables-extra
473 TITLE:=IPv6 header matching modules
474 endef
475
476 define Package/ip6tables-mod-extra/description
477 iptables header matching modules for IPv6
478 endef
479
480 define Package/ip6tables-mod-nat
481 $(call Package/iptables/Default)
482 DEPENDS:=ip6tables +kmod-ipt-nat6
483 TITLE:=IPv6 NAT extensions
484 endef
485
486 define Package/ip6tables-mod-nat/description
487 iptables extensions for IPv6-NAT targets.
488 endef
489
490 define Package/libiptc
491 $(call Package/iptables/Default)
492 SECTION:=libs
493 CATEGORY:=Libraries
494 DEPENDS:=+libip4tc +libip6tc +libxtables
495 ABI_VERSION:=0
496 TITLE:=IPv4/IPv6 firewall - shared libiptc library (nf compatibility stub)
497 endef
498
499 define Package/libip4tc
500 $(call Package/iptables/Default)
501 SECTION:=libs
502 CATEGORY:=Libraries
503 TITLE:=IPv4 firewall - shared libiptc library
504 ABI_VERSION:=2
505 DEPENDS:=+libxtables
506 endef
507
508 define Package/libip6tc
509 $(call Package/iptables/Default)
510 SECTION:=libs
511 CATEGORY:=Libraries
512 TITLE:=IPv6 firewall - shared libiptc library
513 ABI_VERSION:=2
514 DEPENDS:=+libxtables
515 endef
516
517 define Package/libxtables
518 $(call Package/iptables/Default)
519 SECTION:=libs
520 CATEGORY:=Libraries
521 TITLE:=IPv4/IPv6 firewall - shared xtables library
522 ABI_VERSION:=12
523 DEPENDS:= \
524 +IPTABLES_CONNLABEL:libnetfilter-conntrack \
525 +IPTABLES_NFTABLES:libnftnl
526 endef
527
528 define Package/libxtables-nft
529 $(call Package/iptables/Default)
530 SECTION:=libs
531 CATEGORY:=Libraries
532 TITLE:=IPv4/IPv6 firewall - shared xtables nft library
533 ABI_VERSION:=12
534 DEPENDS:=libxtables
535 endef
536
537 TARGET_CPPFLAGS := \
538 -I$(PKG_BUILD_DIR)/include \
539 -I$(LINUX_DIR)/user_headers/include \
540 $(TARGET_CPPFLAGS)
541
542 TARGET_CFLAGS += \
543 -I$(PKG_BUILD_DIR)/include \
544 -I$(LINUX_DIR)/user_headers/include \
545 -ffunction-sections -fdata-sections \
546 -DNO_LEGACY
547
548 TARGET_LDFLAGS += \
549 -Wl,--gc-sections
550
551 CONFIGURE_ARGS += \
552 --enable-shared \
553 --enable-static \
554 --enable-devel \
555 --with-kernel="$(LINUX_DIR)/user_headers" \
556 --with-xtlibdir=/usr/lib/iptables \
557 --with-xt-lock-name=/var/run/xtables.lock \
558 $(if $(CONFIG_IPTABLES_CONNLABEL),,--disable-connlabel) \
559 $(if $(CONFIG_IPTABLES_NFTABLES),,--disable-nftables) \
560 $(if $(CONFIG_IPV6),,--disable-ipv6)
561
562 MAKE_FLAGS := \
563 $(TARGET_CONFIGURE_OPTS) \
564 COPT_FLAGS="$(TARGET_CFLAGS)" \
565 KERNEL_DIR="$(LINUX_DIR)/user_headers/" PREFIX=/usr \
566 KBUILD_OUTPUT="$(LINUX_DIR)" \
567 BUILTIN_MODULES="$(patsubst ip6t_%,%,$(patsubst ipt_%,%,$(patsubst xt_%,%,$(IPT_BUILTIN) $(IPT_CONNTRACK-m) $(IPT_NAT-m))))"
568
569 ifneq ($(wildcard $(PKG_BUILD_DIR)/.config_*),$(subst .configured_,.config_,$(STAMP_CONFIGURED)))
570 define Build/Configure/rebuild
571 $(FIND) $(PKG_BUILD_DIR) -name \*.o -or -name \*.\?o -or -name \*.a | $(XARGS) rm -f
572 rm -f $(PKG_BUILD_DIR)/.config_*
573 rm -f $(PKG_BUILD_DIR)/.configured_*
574 touch $(subst .configured_,.config_,$(STAMP_CONFIGURED))
575 endef
576 endif
577
578 define Build/Configure
579 $(Build/Configure/rebuild)
580 $(Build/Configure/Default)
581 endef
582
583 define Build/InstallDev
584 $(INSTALL_DIR) $(1)/usr/include
585 $(INSTALL_DIR) $(1)/usr/include/iptables
586 $(INSTALL_DIR) $(1)/usr/include/net/netfilter
587
588 # XXX: iptables header fixup, some headers are not installed by iptables anymore
589 $(CP) $(PKG_BUILD_DIR)/include/iptables/*.h $(1)/usr/include/iptables/
590 $(CP) $(PKG_BUILD_DIR)/include/iptables.h $(1)/usr/include/
591 $(CP) $(PKG_BUILD_DIR)/include/ip6tables.h $(1)/usr/include/
592 $(CP) $(PKG_BUILD_DIR)/include/libipulog $(1)/usr/include/
593 $(CP) $(PKG_BUILD_DIR)/include/libiptc $(1)/usr/include/
594
595 $(CP) $(PKG_INSTALL_DIR)/usr/include/* $(1)/usr/include/
596 $(INSTALL_DIR) $(1)/usr/lib
597 $(CP) $(PKG_INSTALL_DIR)/usr/lib/libxtables.so* $(1)/usr/lib/
598 $(CP) $(PKG_INSTALL_DIR)/usr/lib/libip*tc.so* $(1)/usr/lib/
599 $(INSTALL_DIR) $(1)/usr/lib/pkgconfig
600 $(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/xtables.pc $(1)/usr/lib/pkgconfig/
601 $(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/libip*tc.pc $(1)/usr/lib/pkgconfig/
602
603 # XXX: needed by firewall3
604 $(CP) $(PKG_BUILD_DIR)/extensions/libiptext*.so $(1)/usr/lib/
605 endef
606
607 define Package/iptables/install
608 $(INSTALL_DIR) $(1)/usr/sbin
609 $(CP) $(PKG_INSTALL_DIR)/usr/sbin/xtables-legacy-multi $(1)/usr/sbin/
610 $(CP) $(PKG_INSTALL_DIR)/usr/sbin/iptables{,-restore,-save} $(1)/usr/sbin/
611 $(INSTALL_DIR) $(1)/usr/lib/iptables
612 endef
613
614 define Package/iptables-nft/install
615 $(INSTALL_DIR) $(1)/usr/sbin
616 $(CP) $(PKG_INSTALL_DIR)/usr/sbin/xtables-nft-multi $(1)/usr/sbin/
617 $(CP) $(PKG_INSTALL_DIR)/usr/sbin/iptables-nft{,-restore,-save} $(1)/usr/sbin/
618 $(CP) $(PKG_INSTALL_DIR)/usr/sbin/iptables{,-restore}-translate $(1)/usr/sbin/
619 endef
620
621 define Package/ip6tables/install
622 $(INSTALL_DIR) $(1)/usr/sbin
623 $(CP) $(PKG_INSTALL_DIR)/usr/sbin/ip6tables{,-restore,-save} $(1)/usr/sbin/
624 endef
625
626 define Package/ip6tables-nft/install
627 $(INSTALL_DIR) $(1)/usr/sbin
628 $(CP) $(PKG_INSTALL_DIR)/usr/sbin/ip6tables-nft{,-restore,-save} $(1)/usr/sbin/
629 $(CP) $(PKG_INSTALL_DIR)/usr/sbin/ip6tables{,-restore}-translate $(1)/usr/sbin/
630 endef
631
632 define Package/libiptc/install
633 $(INSTALL_DIR) $(1)/usr/lib
634 $(CP) $(PKG_INSTALL_DIR)/usr/lib/libiptc.so.* $(1)/usr/lib/
635 endef
636
637 define Package/libip4tc/install
638 $(INSTALL_DIR) $(1)/usr/lib
639 $(CP) $(PKG_INSTALL_DIR)/usr/lib/libip4tc.so.* $(1)/usr/lib/
640 $(CP) $(PKG_BUILD_DIR)/extensions/libiptext4.so $(1)/usr/lib/
641 endef
642
643 define Package/libip6tc/install
644 $(INSTALL_DIR) $(1)/usr/lib
645 $(CP) $(PKG_INSTALL_DIR)/usr/lib/libip6tc.so.* $(1)/usr/lib/
646 $(CP) $(PKG_BUILD_DIR)/extensions/libiptext6.so $(1)/usr/lib/
647 endef
648
649 define Package/libxtables/install
650 $(INSTALL_DIR) $(1)/usr/lib
651 $(CP) $(PKG_INSTALL_DIR)/usr/lib/libxtables.so.* $(1)/usr/lib/
652 $(CP) $(PKG_BUILD_DIR)/extensions/libiptext.so $(1)/usr/lib/
653 endef
654
655 define Package/libxtables-nft/install
656 $(INSTALL_DIR) $(1)/usr/lib
657 $(CP) $(PKG_BUILD_DIR)/extensions/libiptext_*.so $(1)/usr/lib/
658 endef
659
660 define BuildPlugin
661 define Package/$(1)/install
662 $(INSTALL_DIR) $$(1)/usr/lib/iptables
663 for m in $(patsubst xt_%,ipt_%,$(2)) $(patsubst ipt_%,xt_%,$(2)) $(patsubst xt_%,ip6t_%,$(2)) $(patsubst ip6t_%,xt_%,$(2)); do \
664 if [ -f $(PKG_INSTALL_DIR)/usr/lib/iptables/lib$$$$$$$${m}.so ]; then \
665 $(CP) $(PKG_INSTALL_DIR)/usr/lib/iptables/lib$$$$$$$${m}.so $$(1)/usr/lib/iptables/ ; \
666 fi; \
667 done
668 $(3)
669 endef
670
671 $$(eval $$(call BuildPackage,$(1)))
672 endef
673
674 $(eval $(call BuildPackage,iptables))
675 $(eval $(call BuildPackage,iptables-nft))
676 $(eval $(call BuildPlugin,iptables-mod-conntrack-extra,$(IPT_CONNTRACK_EXTRA-m)))
677 $(eval $(call BuildPlugin,iptables-mod-conntrack-label,$(IPT_CONNTRACK_LABEL-m)))
678 $(eval $(call BuildPlugin,iptables-mod-extra,$(IPT_EXTRA-m)))
679 $(eval $(call BuildPlugin,iptables-mod-physdev,$(IPT_PHYSDEV-m)))
680 $(eval $(call BuildPlugin,iptables-mod-filter,$(IPT_FILTER-m)))
681 $(eval $(call BuildPlugin,iptables-mod-ipopt,$(IPT_IPOPT-m)))
682 $(eval $(call BuildPlugin,iptables-mod-ipsec,$(IPT_IPSEC-m)))
683 $(eval $(call BuildPlugin,iptables-mod-nat-extra,$(IPT_NAT_EXTRA-m)))
684 $(eval $(call BuildPlugin,iptables-mod-iprange,$(IPT_IPRANGE-m)))
685 $(eval $(call BuildPlugin,iptables-mod-cluster,$(IPT_CLUSTER-m)))
686 $(eval $(call BuildPlugin,iptables-mod-clusterip,$(IPT_CLUSTERIP-m)))
687 $(eval $(call BuildPlugin,iptables-mod-ulog,$(IPT_ULOG-m)))
688 $(eval $(call BuildPlugin,iptables-mod-hashlimit,$(IPT_HASHLIMIT-m)))
689 $(eval $(call BuildPlugin,iptables-mod-rpfilter,$(IPT_RPFILTER-m)))
690 $(eval $(call BuildPlugin,iptables-mod-led,$(IPT_LED-m)))
691 $(eval $(call BuildPlugin,iptables-mod-tproxy,$(IPT_TPROXY-m)))
692 $(eval $(call BuildPlugin,iptables-mod-tee,$(IPT_TEE-m)))
693 $(eval $(call BuildPlugin,iptables-mod-u32,$(IPT_U32-m)))
694 $(eval $(call BuildPlugin,iptables-mod-nflog,$(IPT_NFLOG-m)))
695 $(eval $(call BuildPlugin,iptables-mod-trace,$(IPT_DEBUG-m)))
696 $(eval $(call BuildPlugin,iptables-mod-nfqueue,$(IPT_NFQUEUE-m)))
697 $(eval $(call BuildPlugin,iptables-mod-checksum,$(IPT_CHECKSUM-m)))
698 $(eval $(call BuildPackage,ip6tables))
699 $(eval $(call BuildPackage,ip6tables-nft))
700 $(eval $(call BuildPlugin,ip6tables-extra,$(IPT_IPV6_EXTRA-m)))
701 $(eval $(call BuildPlugin,ip6tables-mod-nat,$(IPT_NAT6-m)))
702 $(eval $(call BuildPackage,libiptc))
703 $(eval $(call BuildPackage,libip4tc))
704 $(eval $(call BuildPackage,libip6tc))
705 $(eval $(call BuildPackage,libxtables))
706 $(eval $(call BuildPackage,libxtables-nft))