2 # Copyright (C) 2006-2008 OpenWrt.org
4 # This is free software, licensed under the GNU General Public License v2.
5 # See /LICENSE for more information.
9 NF_MENU
:=Netfilter Extensions
11 include $(INCLUDE_DIR
)/netfilter.mk
13 define KernelPackage
/ipt-core
16 KCONFIG
:=$(KCONFIG_IPT_CORE
)
17 FILES
:=$(foreach mod
,$(IPT_CORE-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
18 AUTOLOAD
:=$(call AutoLoad
,40,$(notdir $(IPT_CORE-m
)))
21 define KernelPackage
/ipt-core
/description
22 Netfilter core kernel modules
32 $(eval
$(call KernelPackage
,ipt-core
))
35 define KernelPackage
/ipt-conntrack
37 TITLE
:=Basic connection tracking modules
38 KCONFIG
:=$(KCONFIG_IPT_CONNTRACK
)
39 FILES
:=$(foreach mod
,$(IPT_CONNTRACK-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
40 AUTOLOAD
:=$(call AutoLoad
,41,$(notdir $(IPT_CONNTRACK-m
)))
41 DEPENDS
:= kmod-ipt-core
44 define KernelPackage
/ipt-conntrack
/description
45 Netfilter
(IPv4
) kernel modules for connection tracking
50 $(eval
$(call KernelPackage
,ipt-conntrack
))
53 define KernelPackage
/ipt-conntrack-extra
55 TITLE
:=Extra connection tracking modules
56 KCONFIG
:=$(KCONFIG_IPT_CONNTRACK_EXTRA
)
57 FILES
:=$(foreach mod
,$(IPT_CONNTRACK_EXTRA-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
58 AUTOLOAD
:=$(call AutoLoad
,42,$(notdir $(IPT_CONNTRACK_EXTRA-m
)))
59 DEPENDS
:= kmod-ipt-core
+kmod-ipt-conntrack
62 define KernelPackage
/ipt-conntrack-extra
/description
63 Netfilter
(IPv4
) extra kernel modules for connection tracking
73 $(eval
$(call KernelPackage
,ipt-conntrack-extra
))
76 define KernelPackage
/ipt-filter
78 TITLE
:=Modules for packet content inspection
79 KCONFIG
:=$(KCONFIG_IPT_FILTER
)
80 FILES
:=$(foreach mod
,$(IPT_FILTER-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
81 AUTOLOAD
:=$(call AutoLoad
,45,$(notdir $(IPT_FILTER-m
)))
82 DEPENDS
:= kmod-ipt-core
85 define KernelPackage
/ipt-filter
/description
86 Netfilter
(IPv4
) kernel modules for packet content inspection
92 $(eval
$(call KernelPackage
,ipt-filter
))
95 define KernelPackage
/ipt-ipopt
97 TITLE
:=Modules for matching
/changing IP packet options
98 KCONFIG
:=$(KCONFIG_IPT_IPOPT
)
99 FILES
:=$(foreach mod
,$(IPT_IPOPT-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
100 AUTOLOAD
:=$(call AutoLoad
,45,$(notdir $(IPT_IPOPT-m
)))
101 DEPENDS
:= kmod-ipt-core
104 define KernelPackage
/ipt-ipopt
/description
105 Netfilter
(IPv4
) modules for matching
/changing IP packet options
117 $(eval
$(call KernelPackage
,ipt-ipopt
))
120 define KernelPackage
/ipt-ipsec
122 TITLE
:=Modules for matching IPSec packets
123 KCONFIG
:=$(KCONFIG_IPT_IPSEC
)
124 FILES
:=$(foreach mod
,$(IPT_IPSEC-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
125 AUTOLOAD
:=$(call AutoLoad
,45,$(notdir $(IPT_IPSEC-m
)))
126 DEPENDS
:= kmod-ipt-core
129 define KernelPackage
/ipt-ipsec
/description
130 Netfilter
(IPv4
) modules for matching IPSec packets
136 $(eval
$(call KernelPackage
,ipt-ipsec
))
139 define KernelPackage
/ipt-nat
141 TITLE
:=Basic NAT targets
142 KCONFIG
:=$(KCONFIG_IPT_NAT
)
143 FILES
:=$(foreach mod
,$(IPT_NAT-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
144 AUTOLOAD
:=$(call AutoLoad
,42,$(notdir $(IPT_NAT-m
)))
145 DEPENDS
:= kmod-ipt-core
+kmod-ipt-conntrack
148 define KernelPackage
/ipt-nat
/description
149 Netfilter
(IPv4
) kernel modules for basic NAT targets
154 $(eval
$(call KernelPackage
,ipt-nat
))
157 define KernelPackage
/ipt-nat-extra
159 TITLE
:=Extra NAT targets
160 KCONFIG
:=$(KCONFIG_IPT_NAT_EXTRA
)
161 FILES
:=$(foreach mod
,$(IPT_NAT_EXTRA-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
162 AUTOLOAD
:=$(call AutoLoad
,43,$(notdir $(IPT_NAT_EXTRA-m
)))
163 DEPENDS
:= kmod-ipt-core
+kmod-ipt-nat
166 define KernelPackage
/ipt-nat-extra
/description
167 Netfilter
(IPv4
) kernel modules for extra NAT targets
174 $(eval
$(call KernelPackage
,ipt-nat-extra
))
177 define KernelPackage
/ipt-nathelper
179 TITLE
:=Basic Conntrack and NAT helpers
180 KCONFIG
:=$(KCONFIG_IPT_NATHELPER
)
181 FILES
:=$(foreach mod
,$(IPT_NATHELPER-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
182 AUTOLOAD
:=$(call AutoLoad
,45,$(notdir $(IPT_NATHELPER-m
)))
183 DEPENDS
:= kmod-ipt-core
+kmod-ipt-nat
186 define KernelPackage
/ipt-nathelper
/description
187 Default Netfilter
(IPv4
) Conntrack and NAT helpers
197 $(eval
$(call KernelPackage
,ipt-nathelper
))
200 define KernelPackage
/ipt-nathelper-extra
202 TITLE
:=Extra Conntrack and NAT helpers
203 KCONFIG
:=$(KCONFIG_IPT_NATHELPER_EXTRA
)
204 FILES
:=$(foreach mod
,$(IPT_NATHELPER_EXTRA-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
205 AUTOLOAD
:=$(call AutoLoad
,45,$(notdir $(IPT_NATHELPER_EXTRA-m
)))
206 DEPENDS
:= kmod-ipt-core
+kmod-ipt-nat
209 define KernelPackage
/ipt-nathelper-extra
/description
210 Extra Netfilter
(IPv4
) Conntrack and NAT helpers
212 - ip_conntrack_amanda
213 - ip_conntrack_proto_gre
222 $(eval
$(call KernelPackage
,ipt-nathelper-extra
))
225 define KernelPackage
/ipt-imq
227 TITLE
:=Intermediate Queueing support
230 CONFIG_IMQ_BEHAVIOR_BA
=y \
231 CONFIG_IMQ_NUM_DEVS
=2 \
232 CONFIG_IP_NF_TARGET_IMQ
234 $(LINUX_DIR
)/drivers
/net
/imq.
$(LINUX_KMOD_SUFFIX
) \
235 $(foreach mod
,$(IPT_IMQ-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
236 AUTOLOAD
:=$(call AutoLoad
,45,$(notdir \
240 DEPENDS
:= kmod-ipt-core @
!LINUX_2_6_27 @
!LINUX_2_6_28
243 define KernelPackage
/ipt-imq
/description
244 Kernel support for Intermediate Queueing devices
247 $(eval
$(call KernelPackage
,ipt-imq
))
250 define KernelPackage
/ipt-queue
252 TITLE
:=Module for user-space packet queueing
253 KCONFIG
:=$(KCONFIG_IPT_QUEUE
)
254 FILES
:=$(foreach mod
,$(IPT_QUEUE-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
255 AUTOLOAD
:=$(call AutoLoad
,45,$(notdir $(IPT_QUEUE-m
)))
256 DEPENDS
:= kmod-ipt-core
259 define KernelPackage
/ipt-queue
/description
260 Netfilter
(IPv4
) module for user-space packet queueing
265 $(eval
$(call KernelPackage
,ipt-queue
))
268 define KernelPackage
/ipt-ulog
270 TITLE
:=Module for user-space packet logging
271 KCONFIG
:=$(KCONFIG_IPT_ULOG
)
272 FILES
:=$(foreach mod
,$(IPT_ULOG-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
273 AUTOLOAD
:=$(call AutoLoad
,45,$(notdir $(IPT_ULOG-m
)))
274 DEPENDS
:= kmod-ipt-core
277 define KernelPackage
/ipt-ulog
/description
278 Netfilter
(IPv4
) module for user-space packet logging
283 $(eval
$(call KernelPackage
,ipt-ulog
))
286 define KernelPackage
/ipt-iprange
288 TITLE
:=Module for matching ip ranges
289 FILES
:=$(foreach mod
,$(IPT_IPRANGE-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
290 AUTOLOAD
:=$(call AutoLoad
,45,$(notdir $(IPT_IPRANGE-m
)))
291 DEPENDS
:= kmod-ipt-core
294 define KernelPackage
/ipt-iprange
/description
295 Netfilter
(IPv4
) module for matching ip ranges
300 $(eval
$(call KernelPackage
,ipt-iprange
))
303 define KernelPackage
/ipt-ipset
306 KCONFIG
:=$(KCONFIG_IPT_IPSET
)
307 FILES
:=$(foreach mod
,$(IPT_IPSET-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
308 AUTOLOAD
:=$(call AutoLoad
,45,$(notdir $(IPT_IPSET-m
)))
309 DEPENDS
:= kmod-ipt-core
312 define KernelPackage
/ipt-ipset
/description
313 Netfilter kernel modules for ipset
328 $(eval
$(call KernelPackage
,ipt-ipset
))
331 define KernelPackage
/ipt-extra
334 KCONFIG
:=$(KCONFIG_IPT_EXTRA
)
335 FILES
:=$(foreach mod
,$(IPT_EXTRA-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
336 AUTOLOAD
:=$(call AutoLoad
,45,$(notdir $(IPT_EXTRA-m
)))
337 DEPENDS
:= kmod-ipt-core
340 define KernelPackage
/ipt-extra
/description
341 Other Netfilter
(IPv4
) kernel modules
354 $(eval
$(call KernelPackage
,ipt-extra
))
357 # XXX: disabled on 2.6.27 due to broken IMQ
358 define KernelPackage
/ip6tables
361 DEPENDS
:=+kmod-ipv6 @
!LINUX_2_6_27 @
!LINUX_2_6_28
362 KCONFIG
:=CONFIG_IP6_NF_IPTABLES
363 FILES
:=$(foreach mod
,$(IPT_IPV6-m
),$(LINUX_DIR
)/net
/$(mod
).
$(LINUX_KMOD_SUFFIX
))
364 AUTOLOAD
:=$(call AutoLoad
,49,$(notdir $(IPT_IPV6-m
)))
367 define KernelPackage
/ip6tables
/description
368 Netfilter IPv6 firewalling support
371 $(eval
$(call KernelPackage
,ip6tables
))
374 define KernelPackage
/arptables
376 TITLE
:=ARP firewalling modules
377 FILES
:=$(LINUX_DIR
)/net
/ipv4
/netfilter
/arp
*.
$(LINUX_KMOD_SUFFIX
)
378 KCONFIG
:=CONFIG_IP_NF_ARPTABLES
379 AUTOLOAD
:=$(call AutoLoad
,49,$(notdir $(patsubst %.ko
,%,$(wildcard $(LINUX_DIR
)/net
/ipv4
/netfilter
/arp
*.
$(LINUX_KMOD_SUFFIX
)))))
382 define KernelPackage
/arptables
/description
383 Kernel modules for ARP firewalling
386 $(eval
$(call KernelPackage
,arptables
))
388 define KernelPackage
/ebtables
390 TITLE
:=Bridge firewalling modules
392 FILES
:=$(LINUX_DIR
)/net
/bridge
/netfilter
/*.
$(LINUX_KMOD_SUFFIX
)
393 KCONFIG
:=CONFIG_BRIDGE_NETFILTER
=y \
394 CONFIG_BRIDGE_NF_EBTABLES
395 AUTOLOAD
:=$(call AutoLoad
,49,$(notdir $(patsubst %.ko
,%,ebtables.ko
$(wildcard $(LINUX_DIR
)/net
/bridge
/netfilter
/ebtable_
*.
$(LINUX_KMOD_SUFFIX
)) $(wildcard $(LINUX_DIR
)/net
/bridge
/netfilter
/ebt_
*.
$(LINUX_KMOD_SUFFIX
)))))
398 define KernelPackage
/ebtables
/description
399 Kernel modules for Ethernet Bridge firewalling
402 $(eval
$(call KernelPackage
,ebtables
))