2 # Copyright (C) 2006 OpenWrt.org
4 # This is free software, licensed under the GNU General Public License v2.
5 # See /LICENSE for more information.
9 include $(TOPDIR
)/rules.mk
10 include $(INCLUDE_DIR
)/kernel.mk
16 PKG_SOURCE
:=$(PKG_NAME
)-$(PKG_VERSION
).
tar.bz2
17 PKG_SOURCE_URL
:=http
://www.netfilter.org
/projects
/iptables
/files \
18 ftp
://ftp.be.netfilter.org
/pub
/netfilter
/iptables
/ \
19 ftp
://ftp.de.netfilter.org
/pub
/netfilter
/iptables
/ \
20 ftp
://ftp.no.netfilter.org
/pub
/netfilter
/iptables
/
21 PKG_MD5SUM
:=0a9209f928002e5eee9cdff8fef4d4b3
23 include $(INCLUDE_DIR
)/package.mk
25 -include $(LINUX_DIR
)/.config
26 include $(INCLUDE_DIR
)/netfilter.mk
27 STAMP_CONFIGURED
:=$(strip $(STAMP_CONFIGURED
))_
$(shell grep
'NETFILTER' $(LINUX_DIR
)/.config | md5s
)
30 define Package
/iptables
/Default
33 URL
:=http
://netfilter.org
/
36 define Package
/iptables
37 $(call Package
/iptables
/Default
)
38 TITLE
:=IPv4 firewall administration tool
42 define Package
/iptables
/conffiles
47 define Package
/iptables-mod-conntrack
48 $(call Package
/iptables
/Default
)
49 DEPENDS
:=iptables
+kmod-ipt-conntrack
50 TITLE
:=connection tracking modules
53 define Package
/iptables-mod-conntrack
/description
54 iptables extensions for connection tracking.
58 - libipt_connmark
/CONNMARK
61 define Package
/iptables-mod-filter
62 $(call Package
/iptables
/Default
)
63 DEPENDS
:=iptables
+kmod-ipt-filter
67 define Package
/iptables-mod-filter
/description
68 iptables extensions for packet content inspection.
74 define Package
/iptables-mod-imq
75 $(call Package
/iptables
/Default
)
76 DEPENDS
:=iptables
+kmod-ipt-imq
80 define Package
/iptables-mod-imq
/description
81 iptables extension for IMQ support.
86 define Package
/iptables-mod-ipopt
87 $(call Package
/iptables
/Default
)
88 DEPENDS
:=iptables
+kmod-ipt-ipopt
89 TITLE
:=IP
/Packet option modules
92 define Package
/iptables-mod-ipopt
/description
93 iptables extensions for matching
/changing IP packet options.
\\\
106 define Package
/iptables-mod-ipsec
107 $(call Package
/iptables
/Default
)
108 DEPENDS
:=iptables
+kmod-ipt-ipsec
109 TITLE
:=IPSec extensions
112 define Package
/iptables-mod-ipsec
/description
113 iptables extensions for matching ipsec traffic.
119 define Package
/iptables-mod-nat
120 $(call Package
/iptables
/Default
)
121 DEPENDS
:=iptables
+kmod-ipt-nat
122 TITLE
:=extra NAT targets
125 define Package
/iptables-mod-nat
/description
126 iptables extensions for different NAT targets.
131 define Package
/iptables-mod-ulog
132 $(call Package
/iptables
/Default
)
133 DEPENDS
:=iptables
+kmod-ipt-ulog
134 TITLE
:=user-space packet logging
137 define Package
/iptables-mod-ulog
/description
138 iptables extensions for user-space packet logging.
143 define Package
/iptables-mod-iprange
144 $(call Package
/iptables
/Default
)
145 DEPENDS
:=iptables
+kmod-ipt-iprange
146 TITLE
:=ip range module
149 define Package
/iptables-mod-iprange
/description
150 iptables extensions for matching ip ranges.
155 define Package
/iptables-mod-extra
156 $(call Package
/iptables
/Default
)
157 DEPENDS
:=iptables
+kmod-ipt-extra
158 TITLE
:=other extra iptables extensions
161 define Package
/iptables-mod-extra
/description
162 other extra iptables extensions.
176 define Package
/iptables-mod-ipset
177 $(call Package
/iptables
/Default
)
178 DEPENDS
:=iptables
+kmod-ipt-ipset
179 TITLE
:=ipset iptables extension
182 define Package
/iptables-utils
183 $(call Package
/iptables
/Default
)
185 TITLE
:=iptables save and restore utilities
188 define Package
/ip6tables
189 $(call Package
/iptables
/Default
)
192 TITLE
:=IPv6 firewall administration tool
195 define Package
/ip6tables-utils
196 $(call Package
/iptables
/Default
)
199 TITLE
:=ip6tables save and restore utilities
203 $(call Build
/Prepare
/Default
)
204 chmod a
+x
$(PKG_BUILD_DIR
)/extensions
/.
*-test*
207 define Build
/Configure
208 rm -f
$(PKG_BUILD_DIR
)/.configured
*
209 $(MAKE
) -C
$(PKG_BUILD_DIR
) \
214 mkdir
-p
$(PKG_INSTALL_DIR
)
215 $(MAKE
) -C
$(PKG_BUILD_DIR
) \
216 $(TARGET_CONFIGURE_OPTS
) \
217 COPT_FLAGS
="$(TARGET_CFLAGS)" \
218 LDFLAGS
="-rdynamic -static-libgcc" \
219 KERNEL_DIR
="$(LINUX_DIR)" PREFIX
=/usr \
220 DESTDIR
="$(PKG_INSTALL_DIR)" \
221 all experimental
install install-experimental
224 define Build
/InstallDev
225 $(MAKE
) -C
$(PKG_BUILD_DIR
) \
226 $(TARGET_CONFIGURE_OPTS
) \
227 COPT_FLAGS
="$(TARGET_CFLAGS)" \
228 KERNEL_DIR
="$(LINUX_DIR)" PREFIX
=/usr \
231 $(CP
) $(PKG_BUILD_DIR
)/include $(1)/usr
232 $(CP
) $(PKG_BUILD_DIR
)/libiptc
/libiptc.a
$(1)/usr
/lib
235 define Build
/UninstallDev
236 rm -rf
$(1)/usr
/include/libipq.h
237 rm -rf
$(1)/usr
/include/libipulog
238 rm -rf
$(1)/usr
/include/libipq
239 rm -rf
$(1)/usr
/include/libiptc
240 rm -rf
$(1)/usr
/include/linux
/netfilter
*
241 rm -rf
$(1)/usr
/include/iptables
*
242 rm -rf
$(1)/usr
/include/ip6tables
*
243 rm -rf
$(1)/usr
/lib
/libipq.a
244 rm -rf
$(1)/usr
/lib
/libiptc.a
247 define Package
/iptables
/install
248 $(INSTALL_DIR
) $(1)/etc
/config
249 $(INSTALL_DATA
) .
/files
/firewall.config
$(1)/etc
/config
/firewall
250 $(INSTALL_DIR
) $(1)/etc
/init.d
251 $(INSTALL_BIN
) .
/files
/firewall.init
$(1)/etc
/init.d
/firewall
252 $(INSTALL_BIN
) .
/files
/firewall.user
$(1)/etc
/
253 $(INSTALL_DIR
) $(1)/usr
/lib
254 $(INSTALL_DATA
) .
/files
/firewall.awk
$(1)/usr
/lib
255 $(INSTALL_DIR
) $(1)/usr
/sbin
256 $(CP
) $(PKG_INSTALL_DIR
)/usr
/sbin
/iptables
$(1)/usr
/sbin
/
257 $(INSTALL_DIR
) $(1)/usr
/lib
/iptables
258 (cd
$(PKG_INSTALL_DIR
)/usr
/lib
/iptables
; \
259 $(CP
) $(patsubst %,lib
%.so
,$(IPT_BUILTIN
:xt_
%=ipt_
%)) $(1)/usr
/lib
/iptables
/ \
263 define Package
/iptables-utils
/install
264 $(INSTALL_DIR
) $(1)/usr
/sbin
265 $(CP
) $(PKG_INSTALL_DIR
)/usr
/sbin
/iptables-
{save
,restore
} $(1)/usr
/sbin
/
268 define Package
/ip6tables
/install
269 $(INSTALL_DIR
) $(1)/usr
/sbin
270 $(CP
) $(PKG_INSTALL_DIR
)/usr
/sbin
/ip6tables
$(1)/usr
/sbin
/
271 $(INSTALL_DIR
) $(1)/usr
/lib
/iptables
272 (cd
$(PKG_INSTALL_DIR
)/usr
/lib
/iptables
; \
273 $(CP
) libip6t_
*.so
$(1)/usr
/lib
/iptables
/ \
277 define Package
/ip6tables-utils
/install
278 $(INSTALL_DIR
) $(1)/usr
/sbin
279 $(CP
) $(PKG_INSTALL_DIR
)/usr
/sbin
/ip6tables-
{save
,restore
} $(1)/usr
/sbin
/
283 define Package
/$(1)/install
284 $(INSTALL_DIR
) $$(1)/usr
/lib
/iptables
285 for m in
$$(patsubst xt_
%,ipt_
%,$(2)); do \
286 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/iptables
/lib
$$$$$$$${m}.so
$$(1)/usr
/lib
/iptables
/ ; \
291 $$(eval
$$(call BuildPackage
,$(1)))
295 $(INSTALL_DIR
) $$(1)/etc
/l7-protocols
; \
296 $(CP
) files
/l7
/*.pat
$$(1)/etc
/l7-protocols
/
298 $(eval
$(call BuildPackage
,iptables
))
299 $(eval
$(call BuildPackage
,iptables-utils
))
300 $(eval
$(call BuildPlugin
,iptables-mod-conntrack
,$(IPT_CONNTRACK-m
)))
301 $(eval
$(call BuildPlugin
,iptables-mod-extra
,$(IPT_EXTRA-m
)))
302 $(eval
$(call BuildPlugin
,iptables-mod-ipset
,$(IPT_IPSET-m
)))
303 $(eval
$(call BuildPlugin
,iptables-mod-filter
,$(IPT_FILTER-m
),$(L7_INSTALL
)))
304 $(eval
$(call BuildPlugin
,iptables-mod-imq
,$(IPT_IMQ-m
)))
305 $(eval
$(call BuildPlugin
,iptables-mod-ipopt
,$(IPT_IPOPT-m
)))
306 $(eval
$(call BuildPlugin
,iptables-mod-ipsec
,$(IPT_IPSEC-m
)))
307 $(eval
$(call BuildPlugin
,iptables-mod-nat
,$(IPT_NAT-m
)))
308 $(eval
$(call BuildPlugin
,iptables-mod-iprange
,$(IPT_IPRANGE-m
)))
309 $(eval
$(call BuildPlugin
,iptables-mod-ulog
,$(IPT_ULOG-m
)))
310 $(eval
$(call BuildPackage
,ip6tables
))
311 $(eval
$(call BuildPackage
,ip6tables-utils
))