package/kernel/modules/netfilter.mk

   1 #
   2 # Copyright (C) 2006-2008 OpenWrt.org
   3 #
   4 # This is free software, licensed under the GNU General Public License v2.
   5 # See /LICENSE for more information.
   6 #
   7 # $Id$
   8
   9 NF_MENU:=Netfilter Extensions
  10 NF_KMOD:=1
  11 include $(INCLUDE_DIR)/netfilter.mk
  12
  13 define KernelPackage/ipt-conntrack
  14   SUBMENU:=$(NF_MENU)
  15   TITLE:=Modules for connection tracking
  16   KCONFIG:=$(KCONFIG_IPT_CONNTRACK)
  17   FILES:=$(foreach mod,$(IPT_CONNTRACK-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
  18   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_CONNTRACK-m)))
  19 endef
  20
  21 define KernelPackage/ipt-conntrack/description
  22  Netfilter (IPv4) kernel modules for connection tracking
  23  Includes:
  24  - ipt_conntrack
  25  - ipt_helper
  26  - ipt_connmark/CONNMARK
  27 endef
  28
  29 $(eval $(call KernelPackage,ipt-conntrack))
  30
  31
  32 define KernelPackage/ipt-filter
  33   SUBMENU:=$(NF_MENU)
  34   TITLE:=Modules for packet content inspection
  35   KCONFIG:=$(KCONFIG_IPT_FILTER)
  36   FILES:=$(foreach mod,$(IPT_FILTER-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
  37   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_FILTER-m)))
  38 endef
  39
  40 define KernelPackage/ipt-filter/description
  41  Netfilter (IPv4) kernel modules for packet content inspection
  42  Includes:
  43  - ipt_ipp2p
  44  - ipt_layer7
  45 endef
  46
  47 $(eval $(call KernelPackage,ipt-filter))
  48
  49
  50 define KernelPackage/ipt-ipopt
  51   SUBMENU:=$(NF_MENU)
  52   TITLE:=Modules for matching/changing IP packet options
  53   KCONFIG:=$(KCONFIG_IPT_IPOPT)
  54   FILES:=$(foreach mod,$(IPT_IPOPT-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
  55   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_IPOPT-m)))
  56 endef
  57
  58 define KernelPackage/ipt-ipopt/description
  59  Netfilter (IPv4) modules for matching/changing IP packet options
  60  Includes:
  61  - ipt_CLASSIFY
  62  - ipt_dscp/DSCP
  63  - ipt_ecn/ECN
  64  - ipt_length
  65  - ipt_mac
  66  - ipt_tos/TOS
  67  - ipt_tcpmms
  68  - ipt_ttl/TTL
  69  - ipt_unclean
  70 endef
  71
  72 $(eval $(call KernelPackage,ipt-ipopt))
  73
  74
  75 define KernelPackage/ipt-ipsec
  76   SUBMENU:=$(NF_MENU)
  77   TITLE:=Modules for matching IPSec packets
  78   KCONFIG:=$(KCONFIG_IPT_IPSEC)
  79   FILES:=$(foreach mod,$(IPT_IPSEC-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
  80   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_IPSEC-m)))
  81 endef
  82
  83 define KernelPackage/ipt-ipsec/description
  84  Netfilter (IPv4) modules for matching IPSec packets
  85  Includes:
  86  - ipt_ah
  87  - ipt_esp
  88 endef
  89
  90 $(eval $(call KernelPackage,ipt-ipsec))
  91
  92
  93 define KernelPackage/ipt-nat
  94   SUBMENU:=$(NF_MENU)
  95   TITLE:=Modules for extra NAT targets
  96   KCONFIG:=$(KCONFIG_IPT_NAT)
  97   FILES:=$(foreach mod,$(IPT_NAT-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
  98   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_NAT-m)))
  99 endef
 100
 101 define KernelPackage/ipt-nat/description
 102  Netfilter (IPv4) modules for extra NAT targets
 103  Includes:
 104  - ipt_REDIRECT
 105  - ipt_NETMAP
 106 endef
 107
 108 $(eval $(call KernelPackage,ipt-nat))
 109
 110
 111 define KernelPackage/ipt-nathelper
 112   SUBMENU:=$(NF_MENU)
 113   TITLE:=Default Conntrack and NAT helpers
 114   KCONFIG:=$(KCONFIG_IPT_NATHELPER)
 115   FILES:=$(foreach mod,$(IPT_NATHELPER-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 116   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_NATHELPER-m)))
 117 endef
 118
 119 define KernelPackage/ipt-nathelper/description
 120  Default Netfilter (IPv4) Conntrack and NAT helpers
 121  Includes:
 122  - ip_conntrack_ftp
 123  - ip_nat_ftp
 124  - ip_conntrack_irc
 125  - ip_nat_irc
 126  - ip_conntrack_tftp
 127 endef
 128
 129 $(eval $(call KernelPackage,ipt-nathelper))
 130
 131
 132 define KernelPackage/ipt-nathelper-extra
 133   SUBMENU:=$(NF_MENU)
 134   TITLE:=Extra Conntrack and NAT helpers
 135   KCONFIG:=$(KCONFIG_IPT_NATHELPER_EXTRA)
 136   FILES:=$(foreach mod,$(IPT_NATHELPER_EXTRA-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 137   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_NATHELPER_EXTRA-m)))
 138 endef
 139
 140 define KernelPackage/ipt-nathelper-extra/description
 141  Extra Netfilter (IPv4) Conntrack and NAT helpers
 142  Includes:
 143  - ip_conntrack_amanda
 144  - ip_conntrack_proto_gre
 145  - ip_nat_proto_gre
 146  - ip_conntrack_pptp
 147  - ip_nat_pptp
 148  - ip_conntrack_sip
 149  - ip_nat_sip
 150  - ip_nat_snmp_basic
 151 endef
 152
 153 $(eval $(call KernelPackage,ipt-nathelper-extra))
 154
 155
 156 define KernelPackage/ipt-imq
 157   SUBMENU:=$(NF_MENU)
 158   TITLE:=Intermediate Queueing support
 159   KCONFIG:=CONFIG_IP_NF_TARGET_IMQ
 160   FILES:=$(LINUX_DIR)/net/ipv4/netfilter/*IMQ*.$(LINUX_KMOD_SUFFIX) $(LINUX_DIR)/drivers/net/imq.$(LINUX_KMOD_SUFFIX)
 161   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(patsubst %.ko,%,$(wildcard $(LINUX_DIR)/net/ipv4/netfilter/*IMQ*.$(LINUX_KMOD_SUFFIX) $(LINUX_DIR)/drivers/net/imq.$(LINUX_KMOD_SUFFIX)))))
 162 endef
 163
 164 define KernelPackage/ipt-imq/description
 165  Kernel support for Intermediate Queueing devices
 166 endef
 167
 168 $(eval $(call KernelPackage,ipt-imq))
 169
 170
 171 define KernelPackage/ipt-queue
 172   SUBMENU:=$(NF_MENU)
 173   TITLE:=Module for user-space packet queueing
 174   KCONFIG:=$(KCONFIG_IPT_QUEUE)
 175   FILES:=$(foreach mod,$(IPT_QUEUE-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 176   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_QUEUE-m)))
 177 endef
 178
 179 define KernelPackage/ipt-queue/description
 180  Netfilter (IPv4) module for user-space packet queueing
 181  Includes:
 182  - ipt_QUEUE
 183 endef
 184
 185 $(eval $(call KernelPackage,ipt-queue))
 186
 187
 188 define KernelPackage/ipt-ulog
 189   SUBMENU:=$(NF_MENU)
 190   TITLE:=Module for user-space packet logging
 191   KCONFIG:=$(KCONFIG_IPT_ULOG)
 192   FILES:=$(foreach mod,$(IPT_ULOG-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 193   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_ULOG-m)))
 194 endef
 195
 196 define KernelPackage/ipt-ulog/description
 197  Netfilter (IPv4) module for user-space packet logging
 198  Includes:
 199  - ipt_ULOG
 200 endef
 201
 202 $(eval $(call KernelPackage,ipt-ulog))
 203
 204
 205 define KernelPackage/ipt-iprange
 206   SUBMENU:=$(NF_MENU)
 207   TITLE:=Module for matching ip ranges
 208   FILES:=$(foreach mod,$(IPT_IPRANGE-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 209   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_IPRANGE-m)))
 210 endef
 211
 212 define KernelPackage/ipt-iprange/description
 213  Netfilter (IPv4) module for matching ip ranges
 214  Includes:
 215  - ipt_IPRANGE
 216 endef
 217
 218 $(eval $(call KernelPackage,ipt-iprange))
 219
 220
 221 define KernelPackage/ipt-ipset
 222   SUBMENU:=$(NF_MENU)
 223   TITLE:=IPSET Modules
 224   KCONFIG:=$(KCONFIG_IPT_IPSET)
 225   FILES:=$(foreach mod,$(IPT_IPSET-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 226   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_IPSET-m)))
 227 endef
 228
 229 define KernelPackage/ipt-ipset/description
 230  Netfilter kernel modules for ipset
 231  Includes:
 232  - ip_set
 233  - ip_set_iphash
 234  - ip_set_ipmap
 235  - ip_set_ipporthash
 236  - ip_set_iptree
 237  - ip_set_iptreemap
 238  - ip_set_macipmap
 239  - ip_set_nethash
 240  - ip_set_portmap
 241  - ipt_set
 242  - ipt_SET
 243 endef
 244
 245 $(eval $(call KernelPackage,ipt-ipset))
 246
 247
 248 define KernelPackage/ipt-extra
 249   SUBMENU:=$(NF_MENU)
 250   TITLE:=Extra modules
 251   KCONFIG:=$(KCONFIG_IPT_EXTRA)
 252   FILES:=$(foreach mod,$(IPT_EXTRA-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 253   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_EXTRA-m)))
 254 endef
 255
 256 define KernelPackage/ipt-extra/description
 257  Other Netfilter (IPv4) kernel modules
 258  Includes:
 259  - ipt_limit
 260  - ipt_owner
 261  - ipt_physdev
 262  - ipt_pkttype
 263  - ipt_recent
 264  - iptable_raw
 265  - xt_NOTRACK
 266  - xt_TARPIT
 267  - xt_DELUDE
 268  - xt_CHAOS
 269 endef
 270
 271 $(eval $(call KernelPackage,ipt-extra))
 272
 273
 274 define KernelPackage/ip6tables
 275   SUBMENU:=$(NF_MENU)
 276   TITLE:=IPv6 modules
 277   DEPENDS:=+kmod-ipv6
 278   KCONFIG:=CONFIG_IP6_NF_IPTABLES
 279   FILES:=$(foreach mod,$(IPT_IPV6-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX))
 280   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(IPT_IPV6-m)))
 281 endef
 282
 283 define KernelPackage/ip6tables/description
 284  Netfilter IPv6 firewalling support
 285 endef
 286
 287 $(eval $(call KernelPackage,ip6tables))
 288
 289
 290 define KernelPackage/arptables
 291   SUBMENU:=$(NF_MENU)
 292   TITLE:=ARP firewalling modules
 293   FILES:=$(LINUX_DIR)/net/ipv4/netfilter/arp*.$(LINUX_KMOD_SUFFIX)
 294   KCONFIG:=CONFIG_IP_NF_ARPTABLES
 295   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(patsubst %.ko,%,$(wildcard $(LINUX_DIR)/net/ipv4/netfilter/arp*.$(LINUX_KMOD_SUFFIX)))))
 296 endef
 297
 298 define KernelPackage/arptables/description
 299  Kernel modules for ARP firewalling
 300 endef
 301
 302 $(eval $(call KernelPackage,arptables))
 303
 304 define KernelPackage/ebtables
 305   SUBMENU:=$(NF_MENU)
 306   TITLE:=Bridge firewalling modules
 307   DEPENDS:=@LINUX_2_6
 308   FILES:=$(LINUX_DIR)/net/bridge/netfilter/*.$(LINUX_KMOD_SUFFIX)
 309   KCONFIG:=CONFIG_BRIDGE_NETFILTER=y \
 310         CONFIG_BRIDGE_NF_EBTABLES
 311   AUTOLOAD:=$(call AutoLoad,40,$(notdir $(patsubst %.ko,%,ebtables.ko $(wildcard $(LINUX_DIR)/net/bridge/netfilter/ebtable_*.$(LINUX_KMOD_SUFFIX)) $(wildcard $(LINUX_DIR)/net/bridge/netfilter/ebt_*.$(LINUX_KMOD_SUFFIX)))))
 312 endef
 313
 314 define KernelPackage/ebtables/description
 315  Kernel modules for Ethernet Bridge firewalling
 316 endef
 317
 318 $(eval $(call KernelPackage,ebtables))