package/kernel/modules/netfilter.mk

   1
   2 #
   3 # Copyright (C) 2006-2008 OpenWrt.org
   4 #
   5 # This is free software, licensed under the GNU General Public License v2.
   6 # See /LICENSE for more information.
   7 #
   8
   9 NF_MENU:=Netfilter Extensions
  10 NF_KMOD:=1
  11 include $(INCLUDE_DIR)/netfilter.mk
  12
  13 define KernelPackage/ipt-core
  14   SUBMENU:=$(NF_MENU)
  15   TITLE:=Netfilter core
  16   KCONFIG:=$(KCONFIG_IPT_CORE)
  17   FILES:=$(foreach mod,$(IPT_CORE-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
  18   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_CORE-m)))
  19 endef
  20
  21 define KernelPackage/ipt-core/description
  22  Netfilter core kernel modules
  23  Includes:
  24  - limit
  25  - LOG
  26  - mac
  27  - multiport
  28  - TCPMSS
  29  - REJECT
  30 endef
  31
  32 $(eval $(call KernelPackage,ipt-core))
  33
  34
  35 define KernelPackage/ipt/Depends
  36   SUBMENU:=$(NF_MENU)
  37   DEPENDS:= kmod-ipt-core $(1)
  38 endef
  39
  40
  41 define KernelPackage/ipt-conntrack
  42 $(call KernelPackage/ipt/Depends,)
  43   TITLE:=Basic connection tracking modules
  44   KCONFIG:=$(KCONFIG_IPT_CONNTRACK)
  45   FILES:=$(foreach mod,$(IPT_CONNTRACK-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
  46   AUTOLOAD:=$(call AutoLoad,41,$(notdir $(IPT_CONNTRACK-m)))
  47 endef
  48
  49 define KernelPackage/ipt-conntrack/description
  50  Netfilter (IPv4) kernel modules for connection tracking
  51  Includes:
  52  - state
  53 endef
  54
  55 $(eval $(call KernelPackage,ipt-conntrack))
  56
  57
  58 define KernelPackage/ipt-conntrack-extra
  59 $(call KernelPackage/ipt/Depends,+kmod-ipt-conntrack)
  60   TITLE:=Extra connection tracking modules
  61   KCONFIG:=$(KCONFIG_IPT_CONNTRACK_EXTRA)
  62   FILES:=$(foreach mod,$(IPT_CONNTRACK_EXTRA-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
  63   AUTOLOAD:=$(call AutoLoad,42,$(notdir $(IPT_CONNTRACK_EXTRA-m)))
  64 endef
  65
  66 define KernelPackage/ipt-conntrack-extra/description
  67  Netfilter (IPv4) extra kernel modules for connection tracking
  68  Includes:
  69  - connbytes
  70  - connmark/CONNMARK
  71  - conntrack
  72  - helper
  73  - recent
  74  - NOTRACK
  75 endef
  76
  77 $(eval $(call KernelPackage,ipt-conntrack-extra))
  78
  79
  80 define KernelPackage/ipt-filter
  81 $(call KernelPackage/ipt/Depends,+LINUX_2_6:kmod-textsearch)
  82   TITLE:=Modules for packet content inspection
  83   KCONFIG:=$(KCONFIG_IPT_FILTER)
  84   FILES:=$(foreach mod,$(IPT_FILTER-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
  85   AUTOLOAD:=$(call AutoLoad,45,$(notdir $(IPT_FILTER-m)))
  86 endef
  87
  88 define KernelPackage/ipt-filter/description
  89  Netfilter (IPv4) kernel modules for packet content inspection
  90  Includes:
  91  - ipt_layer7
  92  - ipt_string
  93 endef
  94
  95 $(eval $(call KernelPackage,ipt-filter))
  96
  97
  98 define KernelPackage/ipt-ipopt
  99 $(call KernelPackage/ipt/Depends,)
 100   TITLE:=Modules for matching/changing IP packet options
 101   KCONFIG:=$(KCONFIG_IPT_IPOPT)
 102   FILES:=$(foreach mod,$(IPT_IPOPT-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 103   AUTOLOAD:=$(call AutoLoad,45,$(notdir $(IPT_IPOPT-m)))
 104 endef
 105
 106 define KernelPackage/ipt-ipopt/description
 107  Netfilter (IPv4) modules for matching/changing IP packet options
 108  Includes:
 109  - ipt_CLASSIFY
 110  - ipt_dscp/DSCP
 111  - ipt_ecn/ECN
 112  - ipt_length
 113  - ipt_tos/TOS
 114  - ipt_tcpmms
 115  - ipt_ttl/TTL
 116  - ipt_unclean
 117 endef
 118
 119 $(eval $(call KernelPackage,ipt-ipopt))
 120
 121
 122 define KernelPackage/ipt-ipsec
 123 $(call KernelPackage/ipt/Depends,)
 124   TITLE:=Modules for matching IPSec packets
 125   KCONFIG:=$(KCONFIG_IPT_IPSEC)
 126   FILES:=$(foreach mod,$(IPT_IPSEC-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 127   AUTOLOAD:=$(call AutoLoad,45,$(notdir $(IPT_IPSEC-m)))
 128 endef
 129
 130 define KernelPackage/ipt-ipsec/description
 131  Netfilter (IPv4) modules for matching IPSec packets
 132  Includes:
 133  - ipt_ah
 134  - ipt_esp
 135 endef
 136
 137 $(eval $(call KernelPackage,ipt-ipsec))
 138
 139
 140 define KernelPackage/ipt-nat
 141 $(call KernelPackage/ipt/Depends,+kmod-ipt-conntrack)
 142   TITLE:=Basic NAT targets
 143   KCONFIG:=$(KCONFIG_IPT_NAT)
 144   FILES:=$(foreach mod,$(IPT_NAT-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 145   AUTOLOAD:=$(call AutoLoad,42,$(notdir $(IPT_NAT-m)))
 146 endef
 147
 148 define KernelPackage/ipt-nat/description
 149  Netfilter (IPv4) kernel modules for basic NAT targets
 150  Includes:
 151  - MASQUERADE
 152 endef
 153
 154 $(eval $(call KernelPackage,ipt-nat))
 155
 156
 157 define KernelPackage/ipt-nat-extra
 158 $(call KernelPackage/ipt/Depends,+kmod-ipt-nat)
 159   TITLE:=Extra NAT targets
 160   KCONFIG:=$(KCONFIG_IPT_NAT_EXTRA)
 161   FILES:=$(foreach mod,$(IPT_NAT_EXTRA-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 162   AUTOLOAD:=$(call AutoLoad,43,$(notdir $(IPT_NAT_EXTRA-m)))
 163 endef
 164
 165 define KernelPackage/ipt-nat-extra/description
 166  Netfilter (IPv4) kernel modules for extra NAT targets
 167  Includes:
 168  - MIRROR
 169  - NETMAP
 170  - REDIRECT
 171 endef
 172
 173 $(eval $(call KernelPackage,ipt-nat-extra))
 174
 175
 176 define KernelPackage/ipt-nathelper
 177 $(call KernelPackage/ipt/Depends,+kmod-ipt-nat)
 178   TITLE:=Basic Conntrack and NAT helpers
 179   KCONFIG:=$(KCONFIG_IPT_NATHELPER)
 180   FILES:=$(foreach mod,$(IPT_NATHELPER-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 181   AUTOLOAD:=$(call AutoLoad,45,$(notdir $(IPT_NATHELPER-m)))
 182 endef
 183
 184 define KernelPackage/ipt-nathelper/description
 185  Default Netfilter (IPv4) Conntrack and NAT helpers
 186  Includes:
 187  - conntrack_ftp
 188  - nat_ftp
 189  - conntrack_irc
 190  - nat_irc
 191  - conntrack_tftp
 192  - nat_tftp
 193 endef
 194
 195 $(eval $(call KernelPackage,ipt-nathelper))
 196
 197
 198 define KernelPackage/ipt-nathelper-extra
 199 $(call KernelPackage/ipt/Depends,+kmod-ipt-nat +LINUX_2_6:kmod-textsearch)
 200   TITLE:=Extra Conntrack and NAT helpers
 201   KCONFIG:=$(KCONFIG_IPT_NATHELPER_EXTRA)
 202   FILES:=$(foreach mod,$(IPT_NATHELPER_EXTRA-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 203   AUTOLOAD:=$(call AutoLoad,45,$(notdir $(IPT_NATHELPER_EXTRA-m)))
 204 endef
 205
 206 define KernelPackage/ipt-nathelper-extra/description
 207  Extra Netfilter (IPv4) Conntrack and NAT helpers
 208  Includes:
 209  - ip_conntrack_amanda
 210  - ip_conntrack_proto_gre
 211  - ip_nat_proto_gre
 212  - ip_conntrack_pptp
 213  - ip_nat_pptp
 214  - ip_conntrack_sip
 215  - ip_nat_sip
 216  - ip_nat_snmp_basic
 217 endef
 218
 219 $(eval $(call KernelPackage,ipt-nathelper-extra))
 220
 221
 222 define KernelPackage/ipt-imq
 223 $(call KernelPackage/ipt/Depends,)
 224   TITLE:=Intermediate Queueing support
 225   KCONFIG:= \
 226         CONFIG_IMQ \
 227         CONFIG_IMQ_BEHAVIOR_BA=y \
 228         CONFIG_IMQ_NUM_DEVS=2 \
 229         CONFIG_NETFILTER_XT_TARGET_IMQ
 230   FILES:= \
 231         $(LINUX_DIR)/drivers/net/imq.$(LINUX_KMOD_SUFFIX) \
 232         $(foreach mod,$(IPT_IMQ-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 233   AUTOLOAD:=$(call AutoLoad,45,$(notdir \
 234         imq \
 235         $(IPT_IMQ-m) \
 236   ))
 237 endef
 238
 239 define KernelPackage/ipt-imq/description
 240  Kernel support for Intermediate Queueing devices
 241 endef
 242
 243 $(eval $(call KernelPackage,ipt-imq))
 244
 245
 246 define KernelPackage/ipt-queue
 247 $(call KernelPackage/ipt/Depends,)
 248   TITLE:=Module for user-space packet queueing
 249   KCONFIG:=$(KCONFIG_IPT_QUEUE)
 250   FILES:=$(foreach mod,$(IPT_QUEUE-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 251   AUTOLOAD:=$(call AutoLoad,45,$(notdir $(IPT_QUEUE-m)))
 252 endef
 253
 254 define KernelPackage/ipt-queue/description
 255  Netfilter (IPv4) module for user-space packet queueing
 256  Includes:
 257  - QUEUE
 258 endef
 259
 260 $(eval $(call KernelPackage,ipt-queue))
 261
 262
 263 define KernelPackage/ipt-ulog
 264 $(call KernelPackage/ipt/Depends,)
 265   TITLE:=Module for user-space packet logging
 266   KCONFIG:=$(KCONFIG_IPT_ULOG)
 267   FILES:=$(foreach mod,$(IPT_ULOG-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 268   AUTOLOAD:=$(call AutoLoad,45,$(notdir $(IPT_ULOG-m)))
 269 endef
 270
 271 define KernelPackage/ipt-ulog/description
 272  Netfilter (IPv4) module for user-space packet logging
 273  Includes:
 274  - ipt_ULOG
 275 endef
 276
 277 $(eval $(call KernelPackage,ipt-ulog))
 278
 279
 280 define KernelPackage/ipt-iprange
 281 $(call KernelPackage/ipt/Depends,)
 282   TITLE:=Module for matching ip ranges
 283   KCONFIG:=$(KCONFIG_IPT_IPRANGE)
 284   FILES:=$(foreach mod,$(IPT_IPRANGE-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 285   AUTOLOAD:=$(call AutoLoad,45,$(notdir $(IPT_IPRANGE-m)))
 286 endef
 287
 288 define KernelPackage/ipt-iprange/description
 289  Netfilter (IPv4) module for matching ip ranges
 290  Includes:
 291  - ipt_IPRANGE
 292 endef
 293
 294 $(eval $(call KernelPackage,ipt-iprange))
 295
 296
 297 define KernelPackage/ipt-extra
 298 $(call KernelPackage/ipt/Depends,)
 299   TITLE:=Extra modules
 300   KCONFIG:=$(KCONFIG_IPT_EXTRA)
 301   FILES:=$(foreach mod,$(IPT_EXTRA-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 302   AUTOLOAD:=$(call AutoLoad,45,$(notdir $(IPT_EXTRA-m)))
 303 endef
 304
 305 define KernelPackage/ipt-extra/description
 306  Other Netfilter (IPv4) kernel modules
 307  Includes:
 308  - ipt_owner
 309  - ipt_physdev
 310  - ipt_pkttype
 311  - ipt_recent
 312  - iptable_raw
 313  - xt_NOTRACK
 314 endef
 315
 316 $(eval $(call KernelPackage,ipt-extra))
 317
 318
 319 define KernelPackage/ip6tables
 320   SUBMENU:=$(NF_MENU)
 321   TITLE:=IPv6 modules
 322   DEPENDS:=+kmod-ipv6
 323   KCONFIG:=$(KCONFIG_IPT_IPV6)
 324   FILES:=$(foreach mod,$(IPT_IPV6-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 325   AUTOLOAD:=$(call AutoLoad,49,$(notdir $(IPT_IPV6-m)))
 326 endef
 327
 328 define KernelPackage/ip6tables/description
 329  Netfilter IPv6 firewalling support
 330 endef
 331
 332 $(eval $(call KernelPackage,ip6tables))
 333
 334
 335 define KernelPackage/arptables
 336   SUBMENU:=$(NF_MENU)
 337   TITLE:=ARP firewalling modules
 338   FILES:=$(LINUX_DIR)/net/ipv4/netfilter/arp*.$(LINUX_KMOD_SUFFIX)
 339   KCONFIG:=CONFIG_IP_NF_ARPTABLES \
 340     CONFIG_IP_NF_ARPFILTER \
 341     CONFIG_IP_NF_ARP_MANGLE
 342   AUTOLOAD:=$(call AutoLoad,49,$(notdir $(patsubst %.$(LINUX_KMOD_SUFFIX),%,$(wildcard $(LINUX_DIR)/net/ipv4/netfilter/arp*.$(LINUX_KMOD_SUFFIX)))))
 343 endef
 344
 345 define KernelPackage/arptables/description
 346  Kernel modules for ARP firewalling
 347 endef
 348
 349 $(eval $(call KernelPackage,arptables))
 350
 351
 352 define KernelPackage/ebtables
 353   SUBMENU:=$(NF_MENU)
 354   TITLE:=Bridge firewalling modules
 355   DEPENDS:=@LINUX_2_6
 356   FILES:=$(foreach mod,$(EBTABLES-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 357   KCONFIG:=CONFIG_BRIDGE_NETFILTER=y \
 358         $(KCONFIG_EBTABLES)
 359   AUTOLOAD:=$(call AutoLoad,49,$(notdir $(EBTABLES-m)))
 360 endef
 361
 362 define KernelPackage/ebtables/description
 363   ebtables is a general, extensible frame/packet identification
 364   framework. It provides you to do Ethernet
 365   filtering/NAT/brouting on the Ethernet bridge.
 366 endef
 367
 368 $(eval $(call KernelPackage,ebtables))
 369
 370
 371 define KernelPackage/ebtables/Depends
 372   SUBMENU:=$(NF_MENU)
 373   DEPENDS:=kmod-ebtables $(1)
 374 endef
 375
 376
 377 define KernelPackage/ebtables-ipv4
 378 $(call KernelPackage/ebtables/Depends,)
 379   TITLE:=ebtables: IPv4 support
 380   FILES:=$(foreach mod,$(EBTABLES_IP4-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 381   KCONFIG:=$(KCONFIG_EBTABLES_IP4)
 382   AUTOLOAD:=$(call AutoLoad,49,$(notdir $(EBTABLES_IP4-m)))
 383 endef
 384
 385 define KernelPackage/ebtables-ipv4/description
 386  This option adds the IPv4 support to ebtables, which allows basic
 387  IPv4 header field filtering, ARP filtering as well as SNAT, DNAT targets.
 388 endef
 389
 390 $(eval $(call KernelPackage,ebtables-ipv4))
 391
 392
 393 define KernelPackage/ebtables-ipv6
 394 $(call KernelPackage/ebtables/Depends,)
 395   TITLE:=ebtables: IPv6 support
 396   FILES:=$(foreach mod,$(EBTABLES_IP6-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 397   KCONFIG:=$(KCONFIG_EBTABLES_IP6)
 398   AUTOLOAD:=$(call AutoLoad,49,$(notdir $(EBTABLES_IP6-m)))
 399 endef
 400
 401 define KernelPackage/ebtables-ipv6/description
 402  This option adds the IPv6 support to ebtables, which allows basic
 403  IPv6 header field filtering and target support.
 404 endef
 405
 406 $(eval $(call KernelPackage,ebtables-ipv6))
 407
 408
 409 define KernelPackage/ebtables-watchers
 410 $(call KernelPackage/ebtables/Depends,)
 411   TITLE:=ebtables: watchers support
 412   FILES:=$(foreach mod,$(EBTABLES_WATCHERS-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 413   KCONFIG:=$(KCONFIG_EBTABLES_WATCHERS)
 414   AUTOLOAD:=$(call AutoLoad,49,$(notdir $(EBTABLES_WATCHERS-m)))
 415 endef
 416
 417 define KernelPackage/ebtables-watchers/description
 418  This option adds the log watchers, that you can use in any rule
 419  in any ebtables table.
 420 endef
 421
 422 $(eval $(call KernelPackage,ebtables-watchers))
 423
 424
 425 define KernelPackage/nfnetlink
 426   SUBMENU:=$(NF_MENU)
 427   TITLE:=Netlink-based userspace interface
 428   DEPENDS:=@LINUX_2_6 +kmod-ipt-core
 429   FILES:=$(LINUX_DIR)/net/netfilter/nfnetlink.$(LINUX_KMOD_SUFFIX)
 430   KCONFIG:=CONFIG_NETFILTER_NETLINK
 431   AUTOLOAD:=$(call AutoLoad,48,nfnetlink)
 432 endef
 433
 434 define KernelPackage/nfnetlink/description
 435  Kernel modules support for a netlink-based userspace interface
 436 endef
 437
 438 $(eval $(call KernelPackage,nfnetlink))
 439
 440
 441 define KernelPackage/nfnetlink/Depends
 442   SUBMENU:=$(NF_MENU)
 443   DEPENDS:=@LINUX_2_6 +kmod-nfnetlink $(1)
 444 endef
 445
 446
 447 define KernelPackage/nfnetlink-log
 448 $(call KernelPackage/nfnetlink/Depends,)
 449   TITLE:=Netfilter LOG over NFNETLINK interface
 450   FILES:=$(LINUX_DIR)/net/netfilter/nfnetlink_log.$(LINUX_KMOD_SUFFIX)
 451   KCONFIG:=CONFIG_NETFILTER_NETLINK_LOG
 452   AUTOLOAD:=$(call AutoLoad,48,nfnetlink_log)
 453 endef
 454
 455 define KernelPackage/nfnetlink-log/description
 456  Kernel modules support for logging packets via NFNETLINK
 457 endef
 458
 459 $(eval $(call KernelPackage,nfnetlink-log))
 460
 461
 462 define KernelPackage/nfnetlink-queue
 463 $(call KernelPackage/nfnetlink/Depends,)
 464   TITLE:=Netfilter QUEUE over NFNETLINK interface
 465   FILES:=$(LINUX_DIR)/net/netfilter/nfnetlink_queue.$(LINUX_KMOD_SUFFIX)
 466   KCONFIG:=CONFIG_NETFILTER_NETLINK_QUEUE
 467   AUTOLOAD:=$(call AutoLoad,48,nfnetlink_queue)
 468 endef
 469
 470 define KernelPackage/nfnetlink-queue/description
 471  Kernel modules support for queueing packets via NFNETLINK
 472 endef
 473
 474 $(eval $(call KernelPackage,nfnetlink-queue))
 475
 476
 477 define KernelPackage/nf-conntrack-netlink
 478 $(call KernelPackage/nfnetlink/Depends,+kmod-ipt-conntrack)
 479   TITLE:=Connection tracking netlink interface
 480   FILES:=$(LINUX_DIR)/net/netfilter/nf_conntrack_netlink.$(LINUX_KMOD_SUFFIX)
 481   KCONFIG:=CONFIG_NF_CT_NETLINK
 482   AUTOLOAD:=$(call AutoLoad,49,nf_conntrack_netlink)
 483 endef
 484
 485 define KernelPackage/nf-conntrack-netlink/description
 486  Kernel modules support for a netlink-based connection tracking
 487  userspace interface
 488 endef
 489
 490 $(eval $(call KernelPackage,nf-conntrack-netlink))