2 # Copyright (C) 2006-2010 OpenWrt.org
4 # This is free software, licensed under the GNU General Public License v2.
5 # See /LICENSE for more information.
8 ifneq ($(__inc_netfilter
),1)
15 P_EBT
:=bridge
/netfilter
/
27 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_CORE
,CONFIG_NETFILTER_XTABLES
, $(P_XT
)x_tables
$(P_XT
)xt_tcpudp
),))
28 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_CORE
,CONFIG_IP_NF_IPTABLES
, $(P_V4
)ip_tables
),))
29 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_CORE
,CONFIG_IP_NF_FILTER
, $(P_V4
)iptable_filter
),))
30 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_CORE
,CONFIG_IP_NF_MANGLE
, $(P_V4
)iptable_mangle
),))
33 $(eval
$(if
$(NF_KMOD
),,$(call nf_add
,IPT_CORE
,CONFIG_IP_NF_IPTABLES
, xt_standard ipt_icmp xt_tcp xt_udp xt_comment
)))
35 $(eval
$(call nf_add
,IPT_CORE
,CONFIG_IP_NF_MATCH_LIMIT
, $(P_V4
)ipt_limit
))
36 $(eval
$(call nf_add
,IPT_CORE
,CONFIG_NETFILTER_XT_MATCH_LIMIT
, $(P_XT
)xt_limit
))
37 $(eval
$(call nf_add
,IPT_CORE
,CONFIG_IP_NF_MATCH_MAC
, $(P_V4
)ipt_mac
))
38 $(eval
$(call nf_add
,IPT_CORE
,CONFIG_NETFILTER_XT_MATCH_MAC
, $(P_XT
)xt_mac
))
39 $(eval
$(call nf_add
,IPT_CORE
,CONFIG_IP_NF_MATCH_MULTIPORT
, $(P_V4
)ipt_multiport
))
40 $(eval
$(call nf_add
,IPT_CORE
,CONFIG_NETFILTER_XT_MATCH_MULTIPORT
, $(P_XT
)xt_multiport
))
41 $(eval
$(call nf_add
,IPT_CORE
,CONFIG_IP_NF_MATCH_COMMENT
, $(P_V4
)ipt_comment
))
42 $(eval
$(call nf_add
,IPT_CORE
,CONFIG_NETFILTER_XT_MATCH_COMMENT
, $(P_XT
)xt_comment
))
44 $(eval
$(call nf_add
,IPT_CORE
,CONFIG_IP_NF_TARGET_LOG
, $(P_V4
)ipt_LOG
))
45 $(eval
$(call nf_add
,IPT_CORE
,CONFIG_IP_NF_TARGET_TCPMSS
, $(P_V4
)ipt_TCPMSS
))
46 $(eval
$(call nf_add
,IPT_CORE
,CONFIG_NETFILTER_XT_TARGET_TCPMSS
, $(P_XT
)xt_TCPMSS
))
47 $(eval
$(call nf_add
,IPT_CORE
,CONFIG_IP_NF_TARGET_REJECT
, $(P_V4
)ipt_REJECT
))
53 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_CONNTRACK
,CONFIG_NF_CONNTRACK
, $(P_XT
)nf_conntrack
),))
54 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_CONNTRACK
,CONFIG_IP_NF_CONNTRACK
, $(P_V4
)ip_conntrack
),))
55 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_CONNTRACK
,CONFIG_NF_DEFRAG_IPV4
, $(P_V4
)nf_defrag_ipv4
),))
56 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_CONNTRACK
,CONFIG_NF_CONNTRACK_IPV4
, $(P_V4
)nf_conntrack_ipv4
),))
58 $(eval
$(call nf_add
,IPT_CONNTRACK
,CONFIG_IP_NF_MATCH_STATE
, $(P_V4
)ipt_state
))
59 $(eval
$(call nf_add
,IPT_CONNTRACK
,CONFIG_NETFILTER_XT_MATCH_STATE
, $(P_XT
)xt_state
))
60 $(eval
$(call nf_add
,IPT_CONNTRACK
,CONFIG_IP_NF_RAW
, $(P_V4
)iptable_raw
))
61 $(eval
$(call nf_add
,IPT_CONNTRACK
,CONFIG_IP_NF_TARGET_NOTRACK
, $(P_V4
)ipt_NOTRACK
))
62 $(eval
$(call nf_add
,IPT_CONNTRACK
,CONFIG_NETFILTER_XT_TARGET_NOTRACK
, $(P_XT
)xt_NOTRACK
))
63 $(eval
$(call nf_add
,IPT_CONNTRACK
,CONFIG_IP_NF_MATCH_CONNTRACK
, $(P_V4
)ipt_conntrack
))
64 $(eval
$(call nf_add
,IPT_CONNTRACK
,CONFIG_NETFILTER_XT_MATCH_CONNTRACK
, $(P_XT
)xt_conntrack
))
69 $(eval
$(call nf_add
,IPT_CONNTRACK_EXTRA
,CONFIG_IP_NF_MATCH_CONNBYTES
, $(P_V4
)ipt_connbytes
))
70 $(eval
$(call nf_add
,IPT_CONNTRACK_EXTRA
,CONFIG_NETFILTER_XT_MATCH_CONNBYTES
, $(P_XT
)xt_connbytes
))
71 $(eval
$(call nf_add
,IPT_CONNTRACK_EXTRA
,CONFIG_IP_NF_MATCH_CONNMARK
, $(P_V4
)ipt_connmark
))
72 $(eval
$(call nf_add
,IPT_CONNTRACK_EXTRA
,CONFIG_NETFILTER_XT_MATCH_CONNMARK
, $(P_XT
)xt_connmark
))
73 $(eval
$(call nf_add
,IPT_CONNTRACK_EXTRA
,CONFIG_IP_NF_MATCH_HELPER
, $(P_V4
)ipt_helper
))
74 $(eval
$(call nf_add
,IPT_CONNTRACK_EXTRA
,CONFIG_NETFILTER_XT_MATCH_HELPER
, $(P_XT
)xt_helper
))
75 $(eval
$(call nf_add
,IPT_CONNTRACK_EXTRA
,CONFIG_IP_NF_MATCH_RECENT
, $(P_V4
)ipt_recent
))
76 $(eval
$(call nf_add
,IPT_CONNTRACK_EXTRA
,CONFIG_NETFILTER_XT_MATCH_RECENT
, $(P_XT
)xt_recent
))
78 $(eval
$(call nf_add
,IPT_CONNTRACK_EXTRA
,CONFIG_IP_NF_TARGET_CONNMARK
, $(P_V4
)ipt_CONNMARK
))
79 ifeq ($(strip $(call CompareKernelPatchVer
,$(KERNEL_PATCHVER
),ge
,2.6.35)),1)
80 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_CONNTRACK_EXTRA
,CONFIG_NETFILTER_XT_TARGET_CONNMARK
, $(P_XT
)xt_connmark
)))
81 $(eval
$(if
$(NF_KMOD
),,$(call nf_add
,IPT_CONNTRACK_EXTRA
,CONFIG_NETFILTER_XT_TARGET_CONNMARK
, $(P_XT
)xt_CONNMARK
)))
83 $(eval
$(call nf_add
,IPT_CONNTRACK_EXTRA
,CONFIG_NETFILTER_XT_TARGET_CONNMARK
, $(P_XT
)xt_CONNMARK
))
90 $(eval
$(call nf_add
,IPT_EXTRA
,CONFIG_IP_NF_MATCH_CONDITION
, $(P_V4
)ipt_condition
))
91 $(eval
$(call nf_add
,IPT_EXTRA
,CONFIG_IP_NF_MATCH_OWNER
, $(P_V4
)ipt_owner
))
92 $(eval
$(call nf_add
,IPT_EXTRA
,CONFIG_NETFILTER_XT_MATCH_OWNER
, $(P_XT
)xt_owner
))
93 $(eval
$(call nf_add
,IPT_EXTRA
,CONFIG_NETFILTER_XT_MATCH_PHYSDEV
, $(P_XT
)xt_physdev
))
94 $(eval
$(call nf_add
,IPT_EXTRA
,CONFIG_IP_NF_MATCH_PKTTYPE
, $(P_V4
)ipt_pkttype
))
95 $(eval
$(call nf_add
,IPT_EXTRA
,CONFIG_NETFILTER_XT_MATCH_PKTTYPE
, $(P_XT
)xt_pkttype
))
96 $(eval
$(call nf_add
,IPT_EXTRA
,CONFIG_IP_NF_MATCH_QUOTA
, $(P_V4
)ipt_quota
))
97 $(eval
$(call nf_add
,IPT_EXTRA
,CONFIG_NETFILTER_XT_MATCH_QUOTA
, $(P_XT
)xt_quota
))
99 #$(eval $(call nf_add,IPT_EXTRA,CONFIG_IP_NF_TARGET_ROUTE, $(P_V4)ipt_ROUTE))
104 $(eval
$(call nf_add
,IPT_FILTER
,CONFIG_IP_NF_MATCH_LAYER7
, $(P_V4
)ipt_layer7
))
105 $(eval
$(call nf_add
,IPT_FILTER
,CONFIG_NETFILTER_XT_MATCH_LAYER7
, $(P_XT
)xt_layer7
))
106 $(eval
$(call nf_add
,IPT_FILTER
,CONFIG_IP_NF_MATCH_STRING
, $(P_V4
)ipt_string
))
107 $(eval
$(call nf_add
,IPT_FILTER
,CONFIG_NETFILTER_XT_MATCH_STRING
, $(P_XT
)xt_string
))
112 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_IP_NF_TARGET_DSCP
, $(P_V4
)ipt_DSCP
))
113 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_NETFILTER_XT_MATCH_DSCP
, $(P_XT
)xt_dscp
))
114 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_NETFILTER_XT_TARGET_DSCP
, $(P_XT
)xt_DSCP
))
115 $(eval
$(call nf_add
,IPT_HASHLIMIT
,CONFIG_NETFILTER_XT_MATCH_HASHLIMIT
, $(P_XT
)xt_hashlimit
))
116 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_IP_NF_MATCH_ECN
, $(P_V4
)ipt_ecn
))
117 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_IP_NF_MATCH_LENGTH
, $(P_V4
)ipt_length
))
118 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_NETFILTER_XT_MATCH_LENGTH
, $(P_XT
)xt_length
))
119 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_IP_NF_MATCH_MARK
, $(P_V4
)ipt_mark
))
120 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_NETFILTER_XT_MATCH_MARK
, $(P_XT
)xt_mark
))
121 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_NETFILTER_XT_MATCH_STATISTIC
, $(P_XT
)xt_statistic
))
122 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_IP_NF_MATCH_TCPMSS
, $(P_V4
)ipt_tcpmss
))
123 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_NETFILTER_XT_MATCH_TCPMSS
, $(P_XT
)xt_tcpmss
))
124 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_IP_NF_MATCH_TIME
, $(P_V4
)ipt_time
))
125 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_NETFILTER_XT_MATCH_TIME
, $(P_XT
)xt_time
))
126 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_IP_NF_MATCH_UNCLEAN
, $(P_V4
)ipt_unclean
))
128 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_IP_NF_TARGET_CLASSIFY
, $(P_V4
)ipt_CLASSIFY
))
129 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_NETFILTER_XT_TARGET_CLASSIFY
, $(P_XT
)xt_CLASSIFY
))
130 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_IP_NF_MATCH_DSCP
, $(P_V4
)ipt_dscp
))
131 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_IP_NF_TARGET_ECN
, $(P_V4
)ipt_ECN
))
132 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_IP_NF_TARGET_MARK
, $(P_V4
)ipt_MARK
))
134 # XXX: 2.6.35+ has xt_MARK.ko merged into xt_mark.ko, userspace is still separate
135 ifeq ($(strip $(call CompareKernelPatchVer
,$(KERNEL_PATCHVER
),ge
,2.6.35)),1)
137 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_IPOPT
,CONFIG_NETFILTER_XT_TARGET_MARK
, $(P_XT
)xt_mark
)))
138 # userland: xt_MARK.so
139 $(eval
$(if
$(NF_KMOD
),,$(call nf_add
,IPT_IPOPT
,CONFIG_NETFILTER_XT_TARGET_MARK
, $(P_XT
)xt_MARK
)))
141 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_NETFILTER_XT_TARGET_MARK
, $(P_XT
)xt_MARK
))
145 $(eval
$(if
$(NF_KMOD
),,$(call nf_add
,IPT_IPOPT
,CONFIG_NETFILTER_XT_MATCH_DSCP
, $(P_XT
)xt_tos
)))
146 $(eval
$(if
$(NF_KMOD
),,$(call nf_add
,IPT_IPOPT
,CONFIG_NETFILTER_XT_TARGET_DSCP
, $(P_XT
)xt_TOS
)))
148 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_NETFILTER_XT_MATCH_HL
, $(P_XT
)xt_hl
))
149 $(eval
$(call nf_add
,IPT_IPOPT
,CONFIG_NETFILTER_XT_TARGET_HL
, $(P_XT
)xt_HL
))
153 $(eval
$(call nf_add
,IPT_IPRANGE
,CONFIG_IP_NF_MATCH_IPRANGE
, $(P_V4
)ipt_iprange
))
154 $(eval
$(call nf_add
,IPT_IPRANGE
,CONFIG_NETFILTER_XT_MATCH_IPRANGE
, $(P_XT
)xt_iprange
))
159 $(eval
$(call nf_add
,IPT_IPSEC
,CONFIG_IP_NF_MATCH_AH_ESP
, $(P_V4
)ipt_ah
$(P_V4
)ipt_esp
))
160 $(eval
$(call nf_add
,IPT_IPSEC
,CONFIG_IP_NF_MATCH_AH
, $(P_V4
)ipt_ah
))
161 $(eval
$(call nf_add
,IPT_IPSEC
,CONFIG_NETFILTER_XT_MATCH_ESP
, $(P_XT
)xt_esp
))
162 $(eval
$(call nf_add
,IPT_IPSEC
,CONFIG_NETFILTER_XT_MATCH_POLICY
, $(P_XT
)xt_policy
))
168 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_IPV6
,CONFIG_NF_DEFRAG_IPV6
, $(P_V6
)nf_defrag_ipv6
),))
169 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_IPV6
,CONFIG_NF_CONNTRACK_IPV6
, $(P_V6
)nf_conntrack_ipv6
),))
170 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_IPTABLES
, $(P_V6
)ip6_tables
),))
171 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_FILTER
, $(P_V6
)ip6table_filter
),))
172 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_MANGLE
, $(P_V6
)ip6table_mangle
),))
173 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_QUEUE
, $(P_V6
)ip6_queue
),))
174 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_RAW
, $(P_V6
)ip6table_raw
),))
176 $(eval
$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_MATCH_AH
, $(P_V6
)ip6t_ah
))
177 $(eval
$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_MATCH_EUI64
, $(P_V6
)ip6t_eui64
))
178 $(eval
$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_MATCH_FRAG
, $(P_V6
)ip6t_frag
))
179 $(eval
$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_MATCH_IPV6HEADER
, $(P_V6
)ip6t_ipv6header
))
180 $(eval
$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_MATCH_LIMIT
, $(P_V6
)ip6t_limit
))
181 $(eval
$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_MATCH_MH
, $(P_V6
)ip6t_mh
))
182 $(eval
$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_MATCH_OWNER
, $(P_V6
)ip6t_owner
))
183 $(eval
$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_MATCH_OPTS
, $(P_V6
)ip6t_hbh
))
184 $(eval
$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_MATCH_RT
, $(P_V6
)ip6t_rt
))
186 $(eval
$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_TARGET_LOG
, $(P_V6
)ip6t_LOG
))
187 $(eval
$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_TARGET_REJECT
, $(P_V6
)ip6t_REJECT
))
188 $(eval
$(call nf_add
,IPT_IPV6
,CONFIG_IP6_NF_TARGET_ROUTE
, $(P_V6
)ip6t_ROUTE
))
194 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_NAT
,CONFIG_IP_NF_NAT
, $(P_V4
)iptable_nat
),))
195 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,IPT_NAT
,CONFIG_NF_NAT
, $(P_V4
)nf_nat
$(P_V4
)iptable_nat
),))
198 $(eval
$(if
$(NF_KMOD
),,$(call nf_add
,IPT_NAT
,CONFIG_NF_NAT
, ipt_SNAT ipt_DNAT
)))
199 $(eval
$(if
$(NF_KMOD
),,$(call nf_add
,IPT_NAT
,CONFIG_IP_NF_NAT
, ipt_SNAT ipt_DNAT
)))
201 $(eval
$(call nf_add
,IPT_NAT
,CONFIG_IP_NF_TARGET_MASQUERADE
, $(P_V4
)ipt_MASQUERADE
))
206 $(eval
$(call nf_add
,IPT_NAT_EXTRA
,CONFIG_IP_NF_TARGET_MIRROR
, $(P_V4
)ipt_MIRROR
))
207 $(eval
$(call nf_add
,IPT_NAT_EXTRA
,CONFIG_IP_NF_TARGET_NETMAP
, $(P_V4
)ipt_NETMAP
))
208 $(eval
$(call nf_add
,IPT_NAT_EXTRA
,CONFIG_IP_NF_TARGET_REDIRECT
, $(P_V4
)ipt_REDIRECT
))
213 $(eval
$(call nf_add
,IPT_NATHELPER
,CONFIG_IP_NF_FTP
, $(P_V4
)ip_conntrack_ftp
))
214 $(eval
$(call nf_add
,IPT_NATHELPER
,CONFIG_IP_NF_NAT_FTP
, $(P_V4
)ip_nat_ftp
))
215 $(eval
$(call nf_add
,IPT_NATHELPER
,CONFIG_NF_CONNTRACK_FTP
, $(P_XT
)nf_conntrack_ftp
))
216 $(eval
$(call nf_add
,IPT_NATHELPER
,CONFIG_NF_NAT_FTP
, $(P_V4
)nf_nat_ftp
))
217 $(eval
$(call nf_add
,IPT_NATHELPER
,CONFIG_IP_NF_IRC
, $(P_V4
)ip_conntrack_irc
))
218 $(eval
$(call nf_add
,IPT_NATHELPER
,CONFIG_IP_NF_NAT_IRC
, $(P_V4
)ip_nat_irc
))
219 $(eval
$(call nf_add
,IPT_NATHELPER
,CONFIG_NF_CONNTRACK_IRC
, $(P_XT
)nf_conntrack_irc
))
220 $(eval
$(call nf_add
,IPT_NATHELPER
,CONFIG_NF_NAT_IRC
, $(P_V4
)nf_nat_irc
))
225 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_AMANDA
, $(P_V4
)ip_conntrack_amanda
))
226 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_NAT_AMANDA
, $(P_V4
)ip_nat_amanda
))
227 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_NF_CONNTRACK_AMANDA
, $(P_XT
)nf_conntrack_amanda
))
228 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_NF_NAT_AMANDA
, $(P_V4
)nf_nat_amanda
))
229 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_CT_PROTO_GRE
, $(P_V4
)ip_conntrack_proto_gre
))
230 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_NAT_PROTO_GRE
, $(P_V4
)ip_nat_proto_gre
))
231 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_NF_CT_PROTO_GRE
, $(P_XT
)nf_conntrack_proto_gre
))
232 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_NF_NAT_PROTO_GRE
, $(P_V4
)nf_nat_proto_gre
))
233 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_H323
, $(P_V4
)ip_conntrack_h323
))
234 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_NAT_H323
, $(P_V4
)ip_nat_h323
))
235 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_NF_CONNTRACK_H323
, $(P_XT
)nf_conntrack_h323
))
236 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_NF_NAT_H323
, $(P_V4
)nf_nat_h323
))
237 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_MMS
, $(P_V4
)ip_conntrack_mms
))
238 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_NAT_MMS
, $(P_V4
)ip_nat_mms
))
239 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_PPTP
, $(P_V4
)ip_conntrack_pptp
))
240 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_NAT_PPTP
, $(P_V4
)ip_nat_pptp
))
241 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_NF_CONNTRACK_PPTP
, $(P_XT
)nf_conntrack_pptp
))
242 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_NF_NAT_PPTP
, $(P_V4
)nf_nat_pptp
))
243 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_RTSP
, $(P_V4
)ip_conntrack_rtsp
))
244 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_NAT_RTSP
, $(P_V4
)ip_nat_rtsp
))
245 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_NF_CONNTRACK_RTSP
, $(P_XT
)nf_conntrack_rtsp
))
246 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_NF_NAT_RTSP
, $(P_V4
)nf_nat_rtsp
))
247 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_SIP
, $(P_V4
)ip_conntrack_sip
))
248 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_NAT_SIP
, $(P_V4
)ip_nat_sip
))
249 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_NF_CONNTRACK_SIP
, $(P_XT
)nf_conntrack_sip
))
250 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_NF_NAT_SIP
, $(P_V4
)nf_nat_sip
))
251 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_NAT_SNMP_BASIC
, $(P_V4
)ip_nat_snmp_basic
))
252 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_NF_NAT_SNMP_BASIC
, $(P_V4
)nf_nat_snmp_basic
))
253 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_TFTP
, $(P_V4
)ip_conntrack_tftp
))
254 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_IP_NF_NAT_TFTP
, $(P_V4
)ip_nat_tftp
))
255 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_NF_CONNTRACK_TFTP
, $(P_XT
)nf_conntrack_tftp
))
256 $(eval
$(call nf_add
,IPT_NATHELPER_EXTRA
,CONFIG_NF_NAT_TFTP
, $(P_V4
)nf_nat_tftp
))
261 $(eval
$(call nf_add
,IPT_QUEUE
,CONFIG_IP_NF_QUEUE
, $(P_V4
)ip_queue
))
266 $(eval
$(call nf_add
,IPT_ULOG
,CONFIG_IP_NF_TARGET_ULOG
, $(P_V4
)ipt_ULOG
))
271 $(eval
$(call nf_add
,IPT_DEBUG
,CONFIG_NETFILTER_XT_TARGET_TRACE
, $(P_XT
)xt_TRACE
))
275 $(eval
$(call nf_add
,IPT_TPROXY
,CONFIG_NETFILTER_XT_MATCH_SOCKET
, $(P_XT
)xt_socket
))
276 $(eval
$(call nf_add
,IPT_TPROXY
,CONFIG_NETFILTER_XT_TARGET_TPROXY
, $(P_XT
)xt_TPROXY
))
279 $(eval
$(call nf_add
,IPT_LED
,CONFIG_NETFILTER_XT_TARGET_LED
, $(P_XT
)xt_LED
))
283 $(eval
$(call nf_add
,IPT_TEE
,CONFIG_NETFILTER_XT_TARGET_TEE
, $(P_XT
)xt_TEE
))
287 $(eval
$(call nf_add
,IPT_U32
,CONFIG_NETFILTER_XT_MATCH_U32
, $(P_XT
)xt_u32
))
293 $(eval
$(if
$(NF_KMOD
),$(call nf_add
,EBTABLES
,CONFIG_BRIDGE_NF_EBTABLES
, $(P_EBT
)ebtables
),))
296 $(eval
$(call nf_add
,EBTABLES
,CONFIG_BRIDGE_EBT_BROUTE
, $(P_EBT
)ebtable_broute
))
297 $(eval
$(call nf_add
,EBTABLES
,CONFIG_BRIDGE_EBT_T_FILTER
, $(P_EBT
)ebtable_filter
))
298 $(eval
$(call nf_add
,EBTABLES
,CONFIG_BRIDGE_EBT_T_NAT
, $(P_EBT
)ebtable_nat
))
301 $(eval
$(call nf_add
,EBTABLES
,CONFIG_BRIDGE_EBT_802_3
, $(P_EBT
)ebt_802_3
))
302 $(eval
$(call nf_add
,EBTABLES
,CONFIG_BRIDGE_EBT_AMONG
, $(P_EBT
)ebt_among
))
303 $(eval
$(call nf_add
,EBTABLES_IP4
,CONFIG_BRIDGE_EBT_ARP
, $(P_EBT
)ebt_arp
))
304 $(eval
$(call nf_add
,EBTABLES_IP4
,CONFIG_BRIDGE_EBT_IP
, $(P_EBT
)ebt_ip
))
305 $(eval
$(call nf_add
,EBTABLES_IP6
,CONFIG_BRIDGE_EBT_IP6
, $(P_EBT
)ebt_ip6
))
306 $(eval
$(call nf_add
,EBTABLES
,CONFIG_BRIDGE_EBT_LIMIT
, $(P_EBT
)ebt_limit
))
307 $(eval
$(call nf_add
,EBTABLES
,CONFIG_BRIDGE_EBT_MARK
, $(P_EBT
)ebt_mark_m
))
308 $(eval
$(call nf_add
,EBTABLES
,CONFIG_BRIDGE_EBT_PKTTYPE
, $(P_EBT
)ebt_pkttype
))
309 $(eval
$(call nf_add
,EBTABLES
,CONFIG_BRIDGE_EBT_STP
, $(P_EBT
)ebt_stp
))
310 $(eval
$(call nf_add
,EBTABLES
,CONFIG_BRIDGE_EBT_VLAN
, $(P_EBT
)ebt_vlan
))
313 $(eval
$(call nf_add
,EBTABLES_IP4
,CONFIG_BRIDGE_EBT_ARPREPLY
, $(P_EBT
)ebt_arpreply
))
314 $(eval
$(call nf_add
,EBTABLES
,CONFIG_BRIDGE_EBT_MARK_T
, $(P_EBT
)ebt_mark
))
315 $(eval
$(call nf_add
,EBTABLES_IP4
,CONFIG_BRIDGE_EBT_DNAT
, $(P_EBT
)ebt_dnat
))
316 $(eval
$(call nf_add
,EBTABLES
,CONFIG_BRIDGE_EBT_REDIRECT
, $(P_EBT
)ebt_redirect
))
317 $(eval
$(call nf_add
,EBTABLES_IP4
,CONFIG_BRIDGE_EBT_SNAT
, $(P_EBT
)ebt_snat
))
320 $(eval
$(call nf_add
,EBTABLES_WATCHERS
,CONFIG_BRIDGE_EBT_LOG
, $(P_EBT
)ebt_log
))
321 $(eval
$(call nf_add
,EBTABLES_WATCHERS
,CONFIG_BRIDGE_EBT_ULOG
, $(P_EBT
)ebt_ulog
))
322 $(eval
$(call nf_add
,EBTABLES_WATCHERS
,CONFIG_BRIDGE_EBT_NFLOG
, $(P_EBT
)ebt_nflog
))
326 IPT_BUILTIN
+= $(IPT_CORE-y
) $(IPT_CORE-m
)
327 IPT_BUILTIN
+= $(IPT_CONNTRACK-y
)
328 IPT_BUILTIN
+= $(IPT_CONNTRACK_EXTRA-y
)
329 IPT_BUILTIN
+= $(IPT_EXTRA-y
)
330 IPT_BUILTIN
+= $(IPT_FILTER-y
)
331 IPT_BUILTIN
+= $(IPT_IPOPT-y
)
332 IPT_BUILTIN
+= $(IPT_IPRANGE-y
)
333 IPT_BUILTIN
+= $(IPT_IPSEC-y
)
334 IPT_BUILTIN
+= $(IPT_IPV6-y
)
335 IPT_BUILTIN
+= $(IPT_NAT-y
)
336 IPT_BUILTIN
+= $(IPT_NAT_EXTRA-y
)
337 IPT_BUILTIN
+= $(IPT_NATHELPER-y
)
338 IPT_BUILTIN
+= $(IPT_NATHELPER_EXTRA-y
)
339 IPT_BUILTIN
+= $(IPT_ULOG-y
)
340 IPT_BUILTIN
+= $(IPT_DEBUG-y
)
341 IPT_BUILTIN
+= $(IPT_TPROXY-y
)
342 IPT_BUILTIN
+= $(EBTABLES-y
)
343 IPT_BUILTIN
+= $(EBTABLES_IP4-y
)
344 IPT_BUILTIN
+= $(EBTALTES_IP6-y
)
345 IPT_BUILTIN
+= $(EBTABLES_WATCHERS-y
)
347 endif # __inc_netfilter