package/kernel/modules/netfilter.mk

   1 #
   2 # Copyright (C) 2006 OpenWrt.org
   3 #
   4 # This is free software, licensed under the GNU General Public License v2.
   5 # See /LICENSE for more information.
   6 #
   7 # $Id$
   8
   9 NF_MENU:=Netfilter Extensions
  10 include $(INCLUDE_DIR)/netfilter.mk
  11
  12 define KernelPackage/ipt-conntrack
  13   SUBMENU:=$(NF_MENU)
  14   TITLE:=Modules for connection tracking
  15   KCONFIG:=$(KCONFIG_IPT_CONNTRACK)
  16   FILES:=$(foreach mod,$(IPT_CONNTRACK-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
  17   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_CONNTRACK-m)))
  18 endef
  19
  20 define KernelPackage/ipt-conntrack/description
  21  Netfilter (IPv4) kernel modules for connection tracking
  22  Includes:
  23  - ipt_conntrack
  24  - ipt_helper
  25  - ipt_connmark/CONNMARK
  26 endef
  27
  28 $(eval $(call KernelPackage,ipt-conntrack))
  29
  30
  31 define KernelPackage/ipt-filter
  32   SUBMENU:=$(NF_MENU)
  33   TITLE:=Modules for packet content inspection
  34   KCONFIG:=$(KCONFIG_IPT_FILTER)
  35   FILES:=$(foreach mod,$(IPT_FILTER-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
  36   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_FILTER-m)))
  37 endef
  38
  39 define KernelPackage/ipt-filter/description
  40  Netfilter (IPv4) kernel modules for packet content inspection
  41  Includes:
  42  - ipt_ipp2p
  43  - ipt_layer7
  44 endef
  45
  46 $(eval $(call KernelPackage,ipt-filter))
  47
  48
  49 define KernelPackage/ipt-ipopt
  50   SUBMENU:=$(NF_MENU)
  51   TITLE:=Modules for matching/changing IP packet options
  52   KCONFIG:=$(KCONFIG_IPT_IPOPT)
  53   FILES:=$(foreach mod,$(IPT_IPOPT-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
  54   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_IPOPT-m)))
  55 endef
  56
  57 define KernelPackage/ipt-ipopt/description
  58  Netfilter (IPv4) modules for matching/changing IP packet options
  59  Includes:
  60  - ipt_CLASSIFY
  61  - ipt_dscp/DSCP
  62  - ipt_ecn/ECN
  63  - ipt_length
  64  - ipt_mac
  65  - ipt_tos/TOS
  66  - ipt_tcpmms
  67  - ipt_ttl/TTL
  68  - ipt_unclean
  69 endef
  70
  71 $(eval $(call KernelPackage,ipt-ipopt))
  72
  73
  74 define KernelPackage/ipt-ipsec
  75   SUBMENU:=$(NF_MENU)
  76   TITLE:=Modules for matching IPSec packets
  77   KCONFIG:=$(KCONFIG_IPT_IPSEC)
  78   FILES:=$(foreach mod,$(IPT_IPSEC-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
  79   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_IPSEC-m)))
  80 endef
  81
  82 define KernelPackage/ipt-ipsec/description
  83  Netfilter (IPv4) modules for matching IPSec packets
  84  Includes:
  85  - ipt_ah
  86  - ipt_esp
  87 endef
  88
  89 $(eval $(call KernelPackage,ipt-ipsec))
  90
  91
  92 define KernelPackage/ipt-nat
  93   SUBMENU:=$(NF_MENU)
  94   TITLE:=Modules for extra NAT targets
  95   KCONFIG:=$(KCONFIG_IPT_NAT)
  96   FILES:=$(foreach mod,$(IPT_NAT-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
  97   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_NAT-m)))
  98 endef
  99
 100 define KernelPackage/ipt-nat/description
 101  Netfilter (IPv4) modules for extra NAT targets
 102  Includes:
 103  - ipt_REDIRECT
 104  - ipt_NETMAP
 105 endef
 106
 107 $(eval $(call KernelPackage,ipt-nat))
 108
 109
 110 define KernelPackage/ipt-nathelper
 111   SUBMENU:=$(NF_MENU)
 112   TITLE:=Default Conntrack and NAT helpers
 113   KCONFIG:=$(KCONFIG_IPT_NAT_DEFAULT)
 114   FILES:=$(foreach mod,$(IPT_NAT_DEFAULT-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 115   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_NAT_DEFAULT-m)))
 116 endef
 117
 118 define KernelPackage/ipt-nathelper/description
 119  Default Netfilter (IPv4) Conntrack and NAT helpers
 120  Includes:
 121  - ip_conntrack_ftp
 122  - ip_nat_ftp
 123  - ip_conntrack_irc
 124  - ip_nat_irc
 125  - ip_conntrack_tftp
 126 endef
 127
 128 $(eval $(call KernelPackage,ipt-nathelper))
 129
 130
 131 define KernelPackage/ipt-nathelper-extra
 132   SUBMENU:=$(NF_MENU)
 133   TITLE:=Extra Conntrack and NAT helpers
 134   KCONFIG:=$(KCONFIG_IPT_NAT_EXTRA)
 135   FILES:=$(foreach mod,$(IPT_NAT_EXTRA-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 136   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_NAT_EXTRA-m)))
 137 endef
 138
 139 define KernelPackage/ipt-nathelper-extra/description
 140  Extra Netfilter (IPv4) Conntrack and NAT helpers
 141  Includes:
 142  - ip_conntrack_amanda
 143  - ip_conntrack_proto_gre
 144  - ip_nat_proto_gre
 145  - ip_conntrack_pptp
 146  - ip_nat_pptp
 147  - ip_conntrack_sip
 148  - ip_nat_sip
 149  - ip_nat_snmp_basic
 150 endef
 151
 152 $(eval $(call KernelPackage,ipt-nathelper-extra))
 153
 154
 155 define KernelPackage/ipt-imq
 156   SUBMENU:=$(NF_MENU)
 157   TITLE:=Intermediate Queueing support
 158   KCONFIG:=CONFIG_IP_NF_TARGET_IMQ
 159   DEPENDS:=@!LINUX_2_6_25
 160   FILES:=$(LINUX_DIR)/net/ipv4/netfilter/*IMQ*.$(LINUX_KMOD_SUFFIX) $(LINUX_DIR)/drivers/net/imq.$(LINUX_KMOD_SUFFIX)
 161   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(patsubst %.ko,%,$(wildcard $(LINUX_DIR)/net/ipv4/netfilter/*IMQ*.$(LINUX_KMOD_SUFFIX) $(LINUX_DIR)/drivers/net/imq.$(LINUX_KMOD_SUFFIX)))))
 162 endef
 163
 164 define KernelPackage/ipt-imq/description
 165  Kernel support for Intermediate Queueing devices
 166 endef
 167
 168 $(eval $(call KernelPackage,ipt-imq))
 169
 170
 171 define KernelPackage/ipt-queue
 172   SUBMENU:=$(NF_MENU)
 173   TITLE:=Module for user-space packet queueing
 174   KCONFIG:=$(KCONFIG_IPT_QUEUE)
 175   FILES:=$(foreach mod,$(IPT_QUEUE-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 176   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_QUEUE-m)))
 177 endef
 178
 179 define KernelPackage/ipt-queue/description
 180  Netfilter (IPv4) module for user-space packet queueing
 181  Includes:
 182  - ipt_QUEUE
 183 endef
 184
 185 $(eval $(call KernelPackage,ipt-queue))
 186
 187
 188 define KernelPackage/ipt-ulog
 189   SUBMENU:=$(NF_MENU)
 190   TITLE:=Module for user-space packet logging
 191   KCONFIG:=$(KCONFIG_IPT_ULOG)
 192   FILES:=$(foreach mod,$(IPT_ULOG-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 193   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_ULOG-m)))
 194 endef
 195
 196 define KernelPackage/ipt-ulog/description
 197  Netfilter (IPv4) module for user-space packet logging
 198  Includes:
 199  - ipt_ULOG
 200 endef
 201
 202 $(eval $(call KernelPackage,ipt-ulog))
 203
 204
 205 define KernelPackage/ipt-iprange
 206   SUBMENU:=$(NF_MENU)
 207   TITLE:=Module for matching ip ranges
 208   FILES:=$(foreach mod,$(IPT_IPRANGE-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 209   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_IPRANGE-m)))
 210 endef
 211
 212 define KernelPackage/ipt-iprange/description
 213  Netfilter (IPv4) module for matching ip ranges
 214  Includes:
 215  - ipt_IPRANGE
 216 endef
 217
 218 $(eval $(call KernelPackage,ipt-iprange))
 219
 220
 221 define KernelPackage/ipt-ipset
 222   SUBMENU:=$(NF_MENU)
 223   TITLE:=IPSET Modules
 224   KCONFIG:=$(KCONFIG_IPT_IPSET)
 225   FILES:=$(foreach mod,$(IPT_IPSET-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 226   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_IPSET-m)))
 227 endef
 228
 229 define KernelPackage/ipt-ipset/description
 230  Netfilter kernel modules for ipset
 231  Includes:
 232  - ip_set
 233  - ip_set_iphash
 234  - ip_set_ipmap
 235  - ip_set_ipporthash
 236  - ip_set_iptree
 237  - ip_set_iptreemap
 238  - ip_set_macipmap
 239  - ip_set_nethash
 240  - ip_set_portmap
 241  - ipt_set
 242  - ipt_SET
 243 endef
 244
 245 $(eval $(call KernelPackage,ipt-ipset))
 246
 247
 248 define KernelPackage/ipt-extra
 249   SUBMENU:=$(NF_MENU)
 250   TITLE:=Extra modules
 251   KCONFIG:=$(KCONFIG_IPT_EXTRA)
 252   FILES:=$(foreach mod,$(IPT_EXTRA-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 253   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_EXTRA-m)))
 254 endef
 255
 256 define KernelPackage/ipt-extra/description
 257  Other Netfilter (IPv4) kernel modules
 258  Includes:
 259  - ipt_limit
 260  - ipt_owner
 261  - ipt_physdev
 262  - ipt_pkttype
 263  - ipt_recent
 264  - iptable_raw
 265  - xt_NOTRACK
 266  - xt_TARPIT
 267  - xt_DELUDE
 268  - xt_CHAOS
 269 endef
 270
 271 $(eval $(call KernelPackage,ipt-extra))
 272
 273
 274 define KernelPackage/ip6tables
 275   SUBMENU:=$(NF_MENU)
 276   TITLE:=IPv6 modules
 277   DEPENDS:=+kmod-ipv6
 278   KCONFIG:=CONFIG_IP6_NF_IPTABLES
 279   FILES:=$(foreach mod,$(IPT_IPV6-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 280   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_IPV6-m)))
 281 endef
 282
 283 define KernelPackage/ip6tables/description
 284  Netfilter IPv6 firewalling support
 285 endef
 286
 287 $(eval $(call KernelPackage,ip6tables))
 288
 289
 290 define KernelPackage/arptables
 291   SUBMENU:=$(NF_MENU)
 292   TITLE:=ARP firewalling modules
 293   FILES:=$(LINUX_DIR)/net/ipv4/netfilter/arp*.$(LINUX_KMOD_SUFFIX)
 294   KCONFIG:=CONFIG_IP_NF_ARPTABLES
 295   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(patsubst %.ko,%,$(wildcard $(LINUX_DIR)/net/ipv4/netfilter/arp*.$(LINUX_KMOD_SUFFIX)))))
 296 endef
 297
 298 define KernelPackage/arptables/description
 299  Kernel modules for ARP firewalling
 300 endef
 301
 302 $(eval $(call KernelPackage,arptables))
 303
 304
 305 define KernelPackage/ebtables
 306   SUBMENU:=$(NF_MENU)
 307   TITLE:=Bridge firewalling modules
 308   DEPENDS:=@LINUX_2_6
 309   FILES:=$(LINUX_DIR)/net/bridge/netfilter/*.$(LINUX_KMOD_SUFFIX)
 310   KCONFIG:=CONFIG_BRIDGE_NF_EBTABLES
 311   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(patsubst %.ko,%,ebtables.ko $(wildcard $(LINUX_DIR)/net/bridge/netfilter/ebtable_*.$(LINUX_KMOD_SUFFIX)) $(wildcard $(LINUX_DIR)/net/bridge/netfilter/ebt_*.$(LINUX_KMOD_SUFFIX)))))
 312 endef
 313
 314 define KernelPackage/ebtables/description
 315  Kernel modules for Ethernet Bridge firewalling
 316 endef
 317
 318 $(eval $(call KernelPackage,ebtables))