2 # Copyright (C) 2006-2010 OpenWrt.org
4 # This is free software, licensed under the GNU General Public License v2.
5 # See /LICENSE for more information.
8 include $(TOPDIR
)/rules.mk
9 include $(INCLUDE_DIR
)/kernel.mk
15 PKG_MD5SUM
:=c67cf30e281a924def6426be0973df56
16 PKG_SOURCE
:=$(PKG_NAME
)-$(PKG_VERSION
).
tar.bz2
17 PKG_SOURCE_URL
:=http
://www.netfilter.org
/projects
/iptables
/files \
18 ftp
://ftp.be.netfilter.org
/pub
/netfilter
/iptables
/ \
19 ftp
://ftp.de.netfilter.org
/pub
/netfilter
/iptables
/ \
20 ftp
://ftp.no.netfilter.org
/pub
/netfilter
/iptables
/
24 include $(INCLUDE_DIR
)/package.mk
26 -include $(LINUX_DIR
)/.config
27 include $(INCLUDE_DIR
)/netfilter.mk
28 STAMP_CONFIGURED
:=$(strip $(STAMP_CONFIGURED
))_
$(shell grep
'NETFILTER' $(LINUX_DIR
)/.config | md5s
)
32 define Package
/iptables
/Default
35 URL
:=http
://netfilter.org
/
38 define Package
/iptables
/Module
39 $(call Package
/iptables
/Default
)
40 DEPENDS
:=iptables
$(1)
43 define Package
/iptables
44 $(call Package
/iptables
/Default
)
45 TITLE
:=IPv4 firewall administration tool
47 DEPENDS
+= +kmod-ipt-core
+libiptc
+libxtables
50 define Package
/iptables
/description
51 IPv4 firewall administration tool.
62 define Package
/iptables-mod-conntrack
63 $(call Package
/iptables
/Module
, +kmod-ipt-conntrack
)
64 TITLE
:=Basic connection tracking extensions
67 define Package
/iptables-mod-conntrack
/description
68 Basic iptables extensions for connection tracking.
75 define Package
/iptables-mod-conntrack-extra
76 $(call Package
/iptables
/Module
, +kmod-ipt-conntrack-extra
)
77 TITLE
:=Extra connection tracking extensions
80 define Package
/iptables-mod-conntrack-extra
/description
81 Extra iptables extensions for connection tracking.
85 - libipt_connmark
/CONNMARK
88 define Package
/iptables-mod-filter
89 $(call Package
/iptables
/Module
, +kmod-ipt-filter
)
90 TITLE
:=Content inspection extensions
93 define Package
/iptables-mod-filter
/description
94 iptables extensions for packet content inspection.
100 define Package
/iptables-mod-imq
101 $(call Package
/iptables
/Module
, +kmod-ipt-imq
)
105 define Package
/iptables-mod-imq
/description
106 iptables extension for IMQ support.
111 define Package
/iptables-mod-ipopt
112 $(call Package
/iptables
/Module
, +kmod-ipt-ipopt
)
113 TITLE
:=IP
/Packet option extensions
116 define Package
/iptables-mod-ipopt
/description
117 iptables extensions for matching
/changing IP packet options.
132 define Package
/iptables-mod-ipsec
133 $(call Package
/iptables
/Module
, +kmod-ipt-ipsec
)
134 TITLE
:=IPsec extensions
137 define Package
/iptables-mod-ipsec
/description
138 iptables extensions for matching ipsec traffic.
145 define Package
/iptables-mod-ipset
146 $(call Package
/iptables
/Module
, @LINUX_2_6
)
147 TITLE
:=IPset iptables extensions
150 define Package
/iptables-mod-ipset
/description
151 IPset iptables extensions.
157 define Package
/iptables-mod-nat
158 $(call Package
/iptables
/Module
, +kmod-ipt-nat
)
159 TITLE
:=Basic NAT extensions
162 define Package
/iptables-mod-nat
/description
163 iptables extensions for basic NAT targets.
170 define Package
/iptables-mod-nat-extra
171 $(call Package
/iptables
/Module
, +kmod-ipt-nat-extra
)
172 TITLE
:=Extra NAT extensions
175 define Package
/iptables-mod-nat-extra
/description
176 iptables extensions for extra NAT targets.
181 define Package
/iptables-mod-ulog
182 $(call Package
/iptables
/Module
, +kmod-ipt-ulog
)
183 TITLE
:=user-space packet logging
186 define Package
/iptables-mod-ulog
/description
187 iptables extensions for user-space packet logging.
192 define Package
/iptables-mod-hashlimit
193 $(call Package
/iptables
/Module
, +kmod-ipt-hashlimit
)
194 TITLE
:=hashlimit matching
197 define Package
/iptables-mod-hashlimit
/description
198 iptables extensions for hashlimit matching
203 define Package
/iptables-mod-iprange
204 $(call Package
/iptables
/Module
, +kmod-ipt-iprange
)
205 TITLE
:=IP range extension
208 define Package
/iptables-mod-iprange
/description
209 iptables extensions for matching ip ranges.
214 define Package
/iptables-mod-extra
215 $(call Package
/iptables
/Module
, +kmod-ipt-extra
)
216 TITLE
:=Other extra iptables extensions
219 define Package
/iptables-mod-extra
/description
220 Other extra iptables extensions.
228 define Package
/iptables-utils
229 $(call Package
/iptables
/Module
, )
230 TITLE
:=iptables save and restore utilities
233 define Package
/ip6tables
234 $(call Package
/iptables
/Default
)
235 DEPENDS
:=+kmod-ip6tables
237 TITLE
:=IPv6 firewall administration tool
241 define Package
/ip6tables-utils
242 $(call Package
/iptables
/Default
)
245 TITLE
:=ip6tables save and restore utilities
248 define Package
/libiptc
249 $(call Package
/iptables
/Default
)
252 TITLE
:=IPv4
/IPv6 firewall
- shared libiptc library
255 define Package
/libxtables
256 $(call Package
/iptables
/Default
)
259 TITLE
:=IPv4
/IPv6 firewall
- shared xtables library
264 -I
$(PKG_BUILD_DIR
)/include \
265 -I
$(LINUX_DIR
)/arch
/$(LINUX_KARCH
)/include \
272 --with-kernel
="$(LINUX_DIR)" \
273 --with-xtlibdir
=/usr
/lib
/iptables
275 IPTABLES_MAKEOPTS
= \
276 $(TARGET_CONFIGURE_OPTS
) \
277 COPT_FLAGS
="$(TARGET_CFLAGS)" \
278 LDFLAGS
="-rdynamic -static-libgcc" \
279 KERNEL_DIR
="$(LINUX_DIR)" PREFIX
=/usr \
280 KBUILD_OUTPUT
="$(LINUX_DIR)" \
281 DESTDIR
="$(PKG_INSTALL_DIR)" \
285 $(INSTALL_DIR
) $(PKG_INSTALL_DIR
)
286 $(MAKE
) -C
$(PKG_BUILD_DIR
) $(IPTABLES_MAKEOPTS
)
287 $(MAKE
) -C
$(PKG_BUILD_DIR
) $(IPTABLES_MAKEOPTS
) install
288 $(MAKE
) -C
$(PKG_BUILD_DIR
)/libipq
$(IPTABLES_MAKEOPTS
)
289 $(MAKE
) -C
$(PKG_BUILD_DIR
)/libipq
$(IPTABLES_MAKEOPTS
) install
292 define Build
/InstallDev
293 $(INSTALL_DIR
) $(1)/usr
/include
294 $(INSTALL_DIR
) $(1)/usr
/include/iptables
295 $(INSTALL_DIR
) $(1)/usr
/include/net
/netfilter
297 # XXX: iptables header fixup, some headers are not installed by iptables anymore
298 $(CP
) $(PKG_BUILD_DIR
)/include/net
/netfilter
/*.h
$(1)/usr
/include/net
/netfilter
/
299 $(CP
) $(PKG_BUILD_DIR
)/include/iptables
/*.h
$(1)/usr
/include/iptables
/
300 $(CP
) $(PKG_BUILD_DIR
)/include/iptables.h
$(1)/usr
/include/
301 $(CP
) $(PKG_BUILD_DIR
)/include/libipq
/libipq.h
$(1)/usr
/include/
302 $(CP
) $(PKG_BUILD_DIR
)/include/libipulog
$(1)/usr
/include/
303 $(CP
) $(PKG_BUILD_DIR
)/include/libiptc
$(1)/usr
/include/
305 $(CP
) $(PKG_INSTALL_DIR
)/usr
/include/* $(1)/usr
/include/
306 $(INSTALL_DIR
) $(1)/usr
/lib
307 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/libxtables.so
* $(1)/usr
/lib
/
308 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/libip
*tc.so
* $(1)/usr
/lib
/
309 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/libipq.a
$(1)/usr
/lib
/
310 $(INSTALL_DIR
) $(1)/usr
/lib
/pkgconfig
311 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/pkgconfig
/xtables.
pc $(1)/usr
/lib
/pkgconfig
/
312 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/pkgconfig
/libiptc.
pc $(1)/usr
/lib
/pkgconfig
/
315 define Package
/iptables
/install
316 $(INSTALL_DIR
) $(1)/usr
/sbin
317 $(INSTALL_BIN
) $(PKG_INSTALL_DIR
)/usr
/sbin
/iptables
$(1)/usr
/sbin
/
318 $(INSTALL_DIR
) $(1)/usr
/lib
/iptables
319 (cd
$(PKG_INSTALL_DIR
)/usr
/lib
/iptables
; \
320 for m in
$(patsubst xt_
%,ipt_
%,$(IPT_BUILTIN
)) $(patsubst ipt_
%,xt_
%,$(IPT_BUILTIN
)); do \
321 if
[ -f
$(PKG_INSTALL_DIR
)/usr
/lib
/iptables
/lib
$$$${m}.so
]; then \
322 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/iptables
/lib
$$$${m}.so
$(1)/usr
/lib
/iptables
/ ;\
328 define Package
/iptables-utils
/install
329 $(INSTALL_DIR
) $(1)/usr
/sbin
330 $(INSTALL_BIN
) $(PKG_INSTALL_DIR
)/usr
/sbin
/iptables-
{save
,restore
} $(1)/usr
/sbin
/
333 define Package
/ip6tables
/install
334 $(INSTALL_DIR
) $(1)/usr
/sbin
335 $(INSTALL_BIN
) $(PKG_INSTALL_DIR
)/usr
/sbin
/ip6tables
$(1)/usr
/sbin
/
336 $(INSTALL_DIR
) $(1)/usr
/lib
/iptables
337 (cd
$(PKG_INSTALL_DIR
)/usr
/lib
/iptables
; \
338 $(CP
) libip6t_
*.so
$(1)/usr
/lib
/iptables
/ \
342 define Package
/ip6tables-utils
/install
343 $(INSTALL_DIR
) $(1)/usr
/sbin
344 $(INSTALL_BIN
) $(PKG_INSTALL_DIR
)/usr
/sbin
/ip6tables-
{save
,restore
} $(1)/usr
/sbin
/
347 define Package
/libiptc
/install
348 $(INSTALL_DIR
) $(1)/usr
/lib
349 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/libip
*tc.so
* $(1)/usr
/lib
/
352 define Package
/libxtables
/install
353 $(INSTALL_DIR
) $(1)/usr
/lib
354 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/libxtables.so
* $(1)/usr
/lib
/
358 define Package
/$(1)/install
359 $(INSTALL_DIR
) $$(1)/usr
/lib
/iptables
360 for m in
$(patsubst xt_
%,ipt_
%,$(2)) $(patsubst ipt_
%,xt_
%,$(2)); do \
361 if
[ -f
$(PKG_INSTALL_DIR
)/usr
/lib
/iptables
/lib
$$$$$$$${m}.so
]; then \
362 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/iptables
/lib
$$$$$$$${m}.so
$$(1)/usr
/lib
/iptables
/ ; \
368 $$(eval
$$(call BuildPackage
,$(1)))
372 $(INSTALL_DIR
) $$(1)/etc
/l7-protocols
; \
373 $(CP
) files
/l7
/*.pat
$$(1)/etc
/l7-protocols
/
376 $(eval
$(call BuildPackage
,iptables
))
377 $(eval
$(call BuildPackage
,iptables-utils
))
378 $(eval
$(call BuildPlugin
,iptables-mod-conntrack
,$(IPT_CONNTRACK-m
)))
379 $(eval
$(call BuildPlugin
,iptables-mod-conntrack-extra
,$(IPT_CONNTRACK_EXTRA-m
)))
380 $(eval
$(call BuildPlugin
,iptables-mod-extra
,$(IPT_EXTRA-m
)))
381 $(eval
$(call BuildPlugin
,iptables-mod-filter
,$(IPT_FILTER-m
),$(L7_INSTALL
)))
382 $(eval
$(call BuildPlugin
,iptables-mod-hashlimit
,$(IPT_HASHLIMIT-m
)))
383 $(eval
$(call BuildPlugin
,iptables-mod-imq
,$(IPT_IMQ-m
)))
384 $(eval
$(call BuildPlugin
,iptables-mod-ipopt
,$(IPT_IPOPT-m
)))
385 $(eval
$(call BuildPlugin
,iptables-mod-ipsec
,$(IPT_IPSEC-m
)))
386 $(eval
$(call BuildPlugin
,iptables-mod-ipset
,ipt_set ipt_SET
))
387 $(eval
$(call BuildPlugin
,iptables-mod-nat
,$(IPT_NAT-m
)))
388 $(eval
$(call BuildPlugin
,iptables-mod-nat-extra
,$(IPT_NAT_EXTRA-m
)))
389 $(eval
$(call BuildPlugin
,iptables-mod-iprange
,$(IPT_IPRANGE-m
)))
390 $(eval
$(call BuildPlugin
,iptables-mod-ulog
,$(IPT_ULOG-m
)))
391 $(eval
$(call BuildPackage
,ip6tables
))
392 $(eval
$(call BuildPackage
,ip6tables-utils
))
393 $(eval
$(call BuildPackage
,libiptc
))
394 $(eval
$(call BuildPackage
,libxtables
))