qi-hardware/openwrt-xburst
1
0
Fork 0
mirror of git://projects.qi-hardware.com/openwrt-xburst.git synced 2024-11-05 16:19:42 +02:00
Code
76389a5662
openwrt-xburst/include/netfilter.mk

139 lines
6.3 KiB
Makefile
Raw Normal View History

credit where credit is due git-svn-id: svn://svn.openwrt.org/openwrt/branches/buildroot-ng/openwrt@4091 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-06-27 03:35:46 +03:00
#
# Copyright (C) 2006 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
fix typo git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@2550 3c298f89-4303-0410-b956-a3cf2f4a3e73
2005-11-22 18:53:21 +02:00
# $Id: netfilter.mk 2411 2005-11-11 03:41:43Z nico $
port over the netfilter module packaging to the new system and fix iptables dependencies git-svn-id: svn://svn.openwrt.org/openwrt/branches/buildroot-ng/openwrt@4206 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-07-22 15:33:28 +03:00
ifeq ($(NF_KMOD),1)
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
P_V4:=ipv4/netfilter/
P_XT:=netfilter/
endif
merge netfilter modules and iptables extensions variables git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@2585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2005-12-07 06:50:51 +02:00
IPT_CONNTRACK-m :=
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_CONNTRACK-$(CONFIG_IP_NF_MATCH_CONNMARK) += $(P_V4)ipt_connmark
IPT_CONNTRACK-$(CONFIG_IP_NF_TARGET_CONNMARK) += $(P_V4)ipt_CONNMARK
IPT_CONNTRACK-$(CONFIG_IP_NF_MATCH_CONNTRACK) += $(P_V4)ipt_conntrack
IPT_CONNTRACK-$(CONFIG_IP_NF_MATCH_HELPER) += $(P_V4)ipt_helper
IPT_CONNTRACK-$(CONFIG_IP_NF_MATCH_STATE) += $(P_V4)ipt_state
fix a typo in my netfilter commit - worked for iptables, didn't work for the kernel modules git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6176 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-01-22 13:22:02 +02:00
IPT_CONNTRACK-$(CONFIG_NETFILTER_XT_MATCH_CONNMARK) += $(P_XT)xt_connmark
IPT_CONNTRACK-$(CONFIG_NETFILTER_XT_TARGET_CONNMARK) += $(P_XT)xt_CONNMARK
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_CONNTRACK-$(CONFIG_NETFILTER_XT_MATCH_CONNTRACK) += $(P_XT)xt_conntrack
IPT_CONNTRACK-$(CONFIG_NETFILTER_XT_MATCH_HELPER) += $(P_XT)xt_helper
IPT_CONNTRACK-$(CONFIG_NETFILTER_XT_MATCH_STATE) += $(P_XT)xt_state
include missing ext in iptables again after 2.6 move to xtables git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3580 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-02 19:39:07 +03:00
merge netfilter modules and iptables extensions variables git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@2585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2005-12-07 06:50:51 +02:00
IPT_EXTRA-m :=
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_EXTRA-$(CONFIG_IP_NF_MATCH_CONDITION) += $(P_V4)ipt_condition
IPT_EXTRA-$(CONFIG_IP_NF_MATCH_CONNBYTES) += $(P_V4)ipt_connbytes
IPT_EXTRA-$(CONFIG_NETFILTER_XT_MATCH_CONNBYTES) += $(P_XT)xt_connbytes
IPT_EXTRA-$(CONFIG_IP_NF_MATCH_LIMIT) += $(P_V4)ipt_limit
IPT_EXTRA-$(CONFIG_NETFILTER_XT_MATCH_LIMIT) += $(P_XT)xt_limit
IPT_EXTRA-$(CONFIG_IP_NF_TARGET_LOG) += $(P_V4)ipt_LOG
fix multiport netfilter module installation (patch from #1280) git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6295 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-02-13 05:08:48 +02:00
IPT_EXTRA-$(CONFIG_IP_NF_MATCH_MULTIPORT) += $(P_V4)ipt_multiport
follow the xtables changes in 2.6.17 git-svn-id: svn://svn.openwrt.org/openwrt/branches/buildroot-ng/openwrt@4001 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-06-18 23:25:54 +03:00
IPT_EXTRA-$(CONFIG_NETFILTER_XT_MATCH_MULTIPORT) += $(P_XT)xt_multiport
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_EXTRA-$(CONFIG_IP_NF_MATCH_OWNER) += $(P_V4)ipt_owner
IPT_EXTRA-$(CONFIG_IP_NF_MATCH_PHYSDEV) += $(P_V4)ipt_physdev
IPT_EXTRA-$(CONFIG_IP_NF_MATCH_PKTTYPE) += $(P_V4)ipt_pkttype
IPT_EXTRA-$(CONFIG_NETFILTER_XT_MATCH_PKTTYPE) += $(P_XT)xt_pkttype
IPT_EXTRA-$(CONFIG_IP_NF_MATCH_QUOTA) += $(P_V4)ipt_quota
IPT_EXTRA-$(CONFIG_IP_NF_MATCH_RECENT) += $(P_V4)ipt_recent
IPT_EXTRA-$(CONFIG_IP_NF_TARGET_REJECT) += $(P_V4)ipt_REJECT
IPT_EXTRA-$(CONFIG_IP_NF_MATCH_STRING) += $(P_V4)ipt_string
IPT_EXTRA-$(CONFIG_NETFILTER_XT_MATCH_STRING) += $(P_XT)xt_string
Add chaostable from #1187, also enable netfilter modules for ixp4xx. git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6182 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-01-23 01:55:22 +02:00
IPT_EXTRA-$(CONFIG_NETFILTER_XT_TARGET_CHAOS) += $(P_XT)xt_CHAOS
IPT_EXTRA-$(CONFIG_NETFILTER_XT_TARGET_DELUDE) += $(P_XT)xt_DELUDE
IPT_EXTRA-$(CONFIG_NETFILTER_XT_MATCH_PORTSCAN) += $(P_XT)xt_portscan
Add raw and NOTRACK targets (#1583) git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6945 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-04-13 14:28:45 +03:00
IPT_EXTRA-$(CONFIG_IP_NF_RAW) += $(P_V4)iptable_raw
IPT_EXTRA-$(CONFIG_NETFILTER_XT_TARGET_NOTRACK) += $(P_XT)xt_NOTRACK
merge netfilter modules and iptables extensions variables git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@2585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2005-12-07 06:50:51 +02:00
IPT_FILTER-m :=
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_FILTER-$(CONFIG_IP_NF_MATCH_IPP2P) += $(P_V4)ipt_ipp2p
IPT_FILTER-$(CONFIG_IP_NF_MATCH_LAYER7) += $(P_V4)ipt_layer7
merge netfilter modules and iptables extensions variables git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@2585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2005-12-07 06:50:51 +02:00
IPT_IMQ-m :=
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_IMQ-$(CONFIG_IP_NF_TARGET_IMQ) += $(P_V4)ipt_IMQ
merge netfilter modules and iptables extensions variables git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@2585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2005-12-07 06:50:51 +02:00
IPT_IPOPT-m :=
Add ipt_CLASSIFY target for 2.4 kernels (#1338) git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6424 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-02-28 14:04:58 +02:00
IPT_IPOPT-$(CONFIG_IP_NF_TARGET_CLASSIFY) += $(P_V4)ipt_CLASSIFY
IPT_IPOPT-$(CONFIG_NETFILTER_XT_TARGET_CLASSIFY) += $(P_XT)xt_CLASSIFY
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_IPOPT-$(CONFIG_IP_NF_MATCH_DSCP) += $(P_V4)ipt_dscp
IPT_IPOPT-$(CONFIG_IP_NF_TARGET_DSCP) += $(P_V4)ipt_DSCP
IPT_IPOPT-$(CONFIG_IP_NF_MATCH_ECN) += $(P_V4)ipt_ecn
IPT_IPOPT-$(CONFIG_IP_NF_TARGET_ECN) += $(P_V4)ipt_ECN
IPT_IPOPT-$(CONFIG_IP_NF_MATCH_LENGTH) += $(P_V4)ipt_length
IPT_IPOPT-$(CONFIG_NETFILTER_XT_MATCH_LENGTH) += $(P_XT)xt_length
IPT_IPOPT-$(CONFIG_IP_NF_MATCH_MAC) += $(P_V4)ipt_mac
IPT_IPOPT-$(CONFIG_NETFILTER_XT_MATCH_MAC) += $(P_XT)xt_mac
IPT_IPOPT-$(CONFIG_IP_NF_MATCH_MARK) += $(P_V4)ipt_mark
IPT_IPOPT-$(CONFIG_NETFILTER_XT_MATCH_MARK) += $(P_XT)xt_mark
IPT_IPOPT-$(CONFIG_IP_NF_TARGET_MARK) += $(P_V4)ipt_MARK
IPT_IPOPT-$(CONFIG_NETFILTER_XT_TARGET_MARK) += $(P_XT)xt_MARK
IPT_IPOPT-$(CONFIG_IP_NF_MATCH_TCPMSS) += $(P_V4)ipt_tcpmss
IPT_IPOPT-$(CONFIG_NETFILTER_XT_MATCH_TCPMSS) += $(P_XT)xt_tcpmss
IPT_IPOPT-$(CONFIG_IP_NF_TARGET_TCPMSS) += $(P_V4)ipt_TCPMSS
fix up tcpmss for the new kernel version git-svn-id: svn://svn.openwrt.org/openwrt/trunk@7345 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-05-26 21:18:37 +03:00
IPT_IPOPT-$(CONFIG_NETFILTER_XT_TARGET_TCPMSS) += $(P_V4)xt_TCPMSS
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_IPOPT-$(CONFIG_IP_NF_MATCH_TOS) += $(P_V4)ipt_tos
IPT_IPOPT-$(CONFIG_IP_NF_MATCH_TIME) += $(P_V4)ipt_time
IPT_IPOPT-$(CONFIG_IP_NF_TARGET_TOS) += $(P_V4)ipt_TOS
IPT_IPOPT-$(CONFIG_IP_NF_MATCH_TTL) += $(P_V4)ipt_ttl
IPT_IPOPT-$(CONFIG_IP_NF_TARGET_TTL) += $(P_V4)ipt_TTL
IPT_IPOPT-$(CONFIG_IP_NF_MATCH_UNCLEAN) += $(P_V4)ipt_unclean
merge netfilter modules and iptables extensions variables git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@2585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2005-12-07 06:50:51 +02:00
IPT_IPSEC-m :=
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_IPSEC-$(CONFIG_IP_NF_MATCH_AH_ESP) += $(P_V4)ipt_ah $(P_V4)ipt_esp
follow the xtables changes in 2.6.17 git-svn-id: svn://svn.openwrt.org/openwrt/branches/buildroot-ng/openwrt@4001 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-06-18 23:25:54 +03:00
IPT_IPSEC-$(CONFIG_IP_NF_MATCH_AH) += $(P_V4)ipt_ah
IPT_IPSEC-$(CONFIG_NETFILTER_XT_MATCH_ESP) += $(P_XT)xt_esp
merge netfilter modules and iptables extensions variables git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@2585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2005-12-07 06:50:51 +02:00
IPT_NAT-m :=
don't try to package ipt_SNAT and ipt_DNAT when making kernel module packages git-svn-id: svn://svn.openwrt.org/openwrt/branches/buildroot-ng/openwrt@4354 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-07-31 19:39:58 +03:00
ifneq ($(NF_KMOD),1)
IPT_NAT-$(CONFIG_IP_NF_NAT) += $(P_V4)ipt_SNAT $(P_V4)ipt_DNAT
endif
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_NAT-$(CONFIG_IP_NF_TARGET_MASQUERADE) += $(P_V4)ipt_MASQUERADE
IPT_NAT-$(CONFIG_IP_NF_TARGET_MIRROR) += $(P_V4)ipt_MIRROR
IPT_NAT-$(CONFIG_IP_NF_TARGET_REDIRECT) += $(P_V4)ipt_REDIRECT
port over the netfilter module packaging to the new system and fix iptables dependencies git-svn-id: svn://svn.openwrt.org/openwrt/branches/buildroot-ng/openwrt@4206 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-07-22 15:33:28 +03:00
IPT_NAT-$(CONFIG_IP_NF_TARGET_NETMAP) += $(P_V4)ipt_NETMAP
merge netfilter modules and iptables extensions variables git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@2585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2005-12-07 06:50:51 +02:00
reorganize nat helper packages, move ftp and irc nat to a package that is enabled by default, for security reasons - see #917 for more information git-svn-id: svn://svn.openwrt.org/openwrt/trunk@5581 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-11-19 03:03:47 +02:00
IPT_NAT_DEFAULT-m :=
IPT_NAT_DEFAULT-$(CONFIG_IP_NF_FTP) += $(P_V4)ip_conntrack_ftp
IPT_NAT_DEFAULT-$(CONFIG_IP_NF_NAT_FTP) += $(P_V4)ip_nat_ftp
IPT_NAT_DEFAULT-$(CONFIG_IP_NF_IRC) += $(P_V4)ip_conntrack_irc
IPT_NAT_DEFAULT-$(CONFIG_IP_NF_NAT_IRC) += $(P_V4)ip_nat_irc
IPT_NAT_DEFAULT-$(CONFIG_IP_NF_TFTP) += $(P_V4)ip_conntrack_tftp
merge netfilter modules and iptables extensions variables git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@2585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2005-12-07 06:50:51 +02:00
IPT_NAT_EXTRA-m :=
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_NAT_EXTRA-$(CONFIG_IP_NF_AMANDA) += $(P_V4)ip_conntrack_amanda
IPT_NAT_EXTRA-$(CONFIG_IP_NF_CT_PROTO_GRE) += $(P_V4)ip_conntrack_proto_gre
IPT_NAT_EXTRA-$(CONFIG_IP_NF_NAT_PROTO_GRE) += $(P_V4)ip_nat_proto_gre
IPT_NAT_EXTRA-$(CONFIG_IP_NF_H323) += $(P_V4)ip_conntrack_h323
IPT_NAT_EXTRA-$(CONFIG_IP_NF_NAT_H323) += $(P_V4)ip_nat_h323
IPT_NAT_EXTRA-$(CONFIG_IP_NF_MMS) += $(P_V4)ip_conntrack_mms
IPT_NAT_EXTRA-$(CONFIG_IP_NF_NAT_MMS) += $(P_V4)ip_nat_mms
IPT_NAT_EXTRA-$(CONFIG_IP_NF_RTSP) += $(P_V4)ip_conntrack_rtsp
IPT_NAT_EXTRA-$(CONFIG_IP_NF_NAT_RTSP) += $(P_V4)ip_nat_rtsp
IPT_NAT_EXTRA-$(CONFIG_IP_NF_PPTP) += $(P_V4)ip_conntrack_pptp
Add SIP connection tracking helpers. Update 2.6 kernel configuration to build SIP connection tracking helper Add informations in menuconfig git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3627 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-12 19:15:41 +03:00
IPT_NAT_EXTRA-$(CONFIG_IP_NF_SIP) += $(P_V4)ip_conntrack_sip
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_NAT_EXTRA-$(CONFIG_IP_NF_NAT_PPTP) += $(P_V4)ip_nat_pptp
Add SIP connection tracking helpers. Update 2.6 kernel configuration to build SIP connection tracking helper Add informations in menuconfig git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3627 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-12 19:15:41 +03:00
IPT_NAT_EXTRA-$(CONFIG_IP_NF_NAT_SIP) += $(P_V4)ip_nat_sip
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_NAT_EXTRA-$(CONFIG_IP_NF_NAT_SNMP_BASIC) += $(P_V4)ip_nat_snmp_basic
IPT_NAT_EXTRA-$(CONFIG_IP_NF_SIP) += $(P_V4)ip_conntrack_sip
IPT_NAT_EXTRA-$(CONFIG_IP_NF_NAT_SIP) += $(P_V4)ip_nat_sip
merge netfilter modules and iptables extensions variables git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@2585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2005-12-07 06:50:51 +02:00
IPT_QUEUE-m :=
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_QUEUE-$(CONFIG_IP_NF_QUEUE) += $(P_V4)ip_queue
merge netfilter modules and iptables extensions variables git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@2585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2005-12-07 06:50:51 +02:00
IPT_ULOG-m :=
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_ULOG-$(CONFIG_IP_NF_TARGET_ULOG) += $(P_V4)ipt_ULOG
merge netfilter modules and iptables extensions variables git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@2585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2005-12-07 06:50:51 +02:00
fix the xt/ipt module path issue git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@3585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-04-03 00:38:15 +03:00
IPT_BUILTIN := $(P_V4)ipt_standard
IPT_BUILTIN += $(P_V4)ipt_icmp $(P_V4)ipt_tcp $(P_V4)ipt_udp
merge netfilter modules and iptables extensions variables git-svn-id: svn://svn.openwrt.org/openwrt/trunk/openwrt@2585 3c298f89-4303-0410-b956-a3cf2f4a3e73
2005-12-07 06:50:51 +02:00
IPT_BUILTIN += $(IPT_CONNTRACK-y)
IPT_BUILTIN += $(IPT_EXTRA-y)
IPT_BUILTIN += $(IPT_FILTER-y)
IPT_BUILTIN += $(IPT_IMQ-y)
IPT_BUILTIN += $(IPT_IPOPT-y)
IPT_BUILTIN += $(IPT_IPSEC-y)
IPT_BUILTIN += $(IPT_NAT-y)
IPT_BUILTIN += $(IPT_ULOG-y)
Copy Permalink