X-Git-Url: http://git.ozo.com/?p=openwrt-10.03%2F.git;a=blobdiff_plain;f=package%2Fiptables%2FMakefile;h=aec031921b745bc2a0e06ec2d9d83ea55aa75832;hp=be5b95b1492c5c2632a2c18174fd67b8b968f63e;hb=96c3348ec7532352a04730823197af4eba86d3b1;hpb=07380cd8e3751fde72068f4629d7a423ca5d742c diff --git a/package/iptables/Makefile b/package/iptables/Makefile index be5b95b14..aec031921 100644 --- a/package/iptables/Makefile +++ b/package/iptables/Makefile @@ -1,5 +1,5 @@ # -# Copyright (C) 2006-2009 OpenWrt.org +# Copyright (C) 2006-2010 OpenWrt.org # # This is free software, licensed under the GNU General Public License v2. # See /LICENSE for more information. @@ -10,7 +10,7 @@ include $(INCLUDE_DIR)/kernel.mk PKG_NAME:=iptables PKG_VERSION:=1.4.6 -PKG_RELEASE:=1 +PKG_RELEASE:=3 PKG_MD5SUM:=c67cf30e281a924def6426be0973df56 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2 @@ -19,7 +19,7 @@ PKG_SOURCE_URL:=http://www.netfilter.org/projects/iptables/files \ ftp://ftp.de.netfilter.org/pub/netfilter/iptables/ \ ftp://ftp.no.netfilter.org/pub/netfilter/iptables/ -PKG_FIXUP = libtool +PKG_FIXUP:=autoreconf include $(INCLUDE_DIR)/package.mk ifeq ($(DUMP),) @@ -44,19 +44,19 @@ define Package/iptables $(call Package/iptables/Default) TITLE:=IPv4 firewall administration tool MENU:=1 - DEPENDS+= +kmod-ipt-core +libiptc +libxtables + DEPENDS+= +kmod-ipt-core +libip4tc +libxtables endef define Package/iptables/description - IPv4 firewall administration tool. - Includes support for: - - comment - - limit - - LOG - - mac - - multiport - - REJECT - - TCPMSS +IPv4 firewall administration tool. +Includes support for: +- comment +- limit +- LOG +- mac +- multiport +- REJECT +- TCPMSS endef define Package/iptables-mod-conntrack @@ -65,9 +65,11 @@ $(call Package/iptables/Module, +kmod-ipt-conntrack) endef define Package/iptables-mod-conntrack/description - Basic iptables extensions for connection tracking. - Includes: - - state +Basic iptables extensions for connection tracking. +Includes: +- state +- raw +- NOTRACK endef define Package/iptables-mod-conntrack-extra @@ -76,11 +78,11 @@ $(call Package/iptables/Module, +kmod-ipt-conntrack-extra) endef define Package/iptables-mod-conntrack-extra/description - Extra iptables extensions for connection tracking. - Includes: - - libipt_conntrack - - libipt_helper - - libipt_connmark/CONNMARK +Extra iptables extensions for connection tracking. +Includes: +- libipt_conntrack +- libipt_helper +- libipt_connmark/CONNMARK endef define Package/iptables-mod-filter @@ -89,10 +91,10 @@ $(call Package/iptables/Module, +kmod-ipt-filter) endef define Package/iptables-mod-filter/description - iptables extensions for packet content inspection. - Includes: - - libipt_string - - libipt_layer7 +iptables extensions for packet content inspection. +Includes: +- libipt_string +- libipt_layer7 endef define Package/iptables-mod-imq @@ -101,9 +103,9 @@ $(call Package/iptables/Module, +kmod-ipt-imq) endef define Package/iptables-mod-imq/description - iptables extension for IMQ support. - Includes: - - libipt_IMQ +iptables extension for IMQ support. +Includes: +- libipt_IMQ endef define Package/iptables-mod-ipopt @@ -112,19 +114,19 @@ $(call Package/iptables/Module, +kmod-ipt-ipopt) endef define Package/iptables-mod-ipopt/description - iptables extensions for matching/changing IP packet options. - Includes: - - libipt_CLASSIFY - - libipt_dscp/DSCP - - libipt_ecn/ECN - - libipt_length - - libipt_mac - - libipt_mark/MARK - - libipt_statistic - - libipt_tcpmms - - libipt_tos/TOS - - libipt_ttl/TTL - - libipt_unclean +iptables extensions for matching/changing IP packet options. +Includes: +- libipt_CLASSIFY +- libipt_dscp/DSCP +- libipt_ecn/ECN +- libipt_length +- libipt_mac +- libipt_mark/MARK +- libipt_statistic +- libipt_tcpmms +- libipt_tos/TOS +- libipt_ttl/TTL +- libipt_unclean endef define Package/iptables-mod-ipsec @@ -133,11 +135,11 @@ $(call Package/iptables/Module, +kmod-ipt-ipsec) endef define Package/iptables-mod-ipsec/description - iptables extensions for matching ipsec traffic. - Includes: - - libipt_ah - - libipt_esp - - libipt_policy +iptables extensions for matching ipsec traffic. +Includes: +- libipt_ah +- libipt_esp +- libipt_policy endef define Package/iptables-mod-ipset @@ -146,10 +148,10 @@ $(call Package/iptables/Module, @LINUX_2_6) endef define Package/iptables-mod-ipset/description - IPset iptables extensions. - Includes: - - libipt_set - - libipt_SET +IPset iptables extensions. +Includes: +- libipt_set +- libipt_SET endef define Package/iptables-mod-nat @@ -158,11 +160,11 @@ $(call Package/iptables/Module, +kmod-ipt-nat) endef define Package/iptables-mod-nat/description - iptables extensions for basic NAT targets. - Includes: - - MASQUERADE - - SNAT - - DNAT +iptables extensions for basic NAT targets. +Includes: +- MASQUERADE +- SNAT +- DNAT endef define Package/iptables-mod-nat-extra @@ -171,9 +173,9 @@ $(call Package/iptables/Module, +kmod-ipt-nat-extra) endef define Package/iptables-mod-nat-extra/description - iptables extensions for extra NAT targets. - Includes: - - REDIRECT +iptables extensions for extra NAT targets. +Includes: +- REDIRECT endef define Package/iptables-mod-ulog @@ -182,9 +184,20 @@ $(call Package/iptables/Module, +kmod-ipt-ulog) endef define Package/iptables-mod-ulog/description - iptables extensions for user-space packet logging. - Includes: - - libipt_ULOG +iptables extensions for user-space packet logging. +Includes: +- libipt_ULOG +endef + +define Package/iptables-mod-hashlimit +$(call Package/iptables/Module, +kmod-ipt-hashlimit) + TITLE:=hashlimit matching +endef + +define Package/iptables-mod-hashlimit/description +iptables extensions for hashlimit matching +Includes: +- libxt_hashlimit endef define Package/iptables-mod-iprange @@ -193,9 +206,9 @@ $(call Package/iptables/Module, +kmod-ipt-iprange) endef define Package/iptables-mod-iprange/description - iptables extensions for matching ip ranges. - Includes: - - libipt_iprange +iptables extensions for matching ip ranges. +Includes: +- libipt_iprange endef define Package/iptables-mod-extra @@ -204,14 +217,12 @@ $(call Package/iptables/Module, +kmod-ipt-extra) endef define Package/iptables-mod-extra/description - other extra iptables extensions. - Includes: - - libipt_owner - - libipt_physdev - - libipt_pkttype - - libipt_recent - - iptable_raw - - libipt_NOTRACK +Other extra iptables extensions. +Includes: +- libipt_owner +- libipt_physdev +- libipt_pkttype +- libipt_recent endef define Package/iptables-utils @@ -221,7 +232,7 @@ endef define Package/ip6tables $(call Package/iptables/Default) - DEPENDS:=+kmod-ip6tables + DEPENDS:=+kmod-ip6tables +libip6tc +libxtables CATEGORY:=IPv6 TITLE:=IPv6 firewall administration tool MENU:=1 @@ -238,7 +249,22 @@ define Package/libiptc $(call Package/iptables/Default) SECTION:=libs CATEGORY:=Libraries - TITLE:=IPv4/IPv6 firewall - shared libiptc library + DEPENDS:=+libip4tc +libip6tc + TITLE:=IPv4/IPv6 firewall - shared libiptc library (compatibility stub) +endef + +define Package/libip4tc +$(call Package/iptables/Default) + SECTION:=libs + CATEGORY:=Libraries + TITLE:=IPv4 firewall - shared libiptc library +endef + +define Package/libip6tc +$(call Package/iptables/Default) + SECTION:=libs + CATEGORY:=Libraries + TITLE:=IPv6 firewall - shared libiptc library endef define Package/libxtables @@ -256,7 +282,6 @@ TARGET_CPPFLAGS := \ CONFIGURE_ARGS += \ --enable-shared \ - --enable-static \ --enable-devel \ --enable-ipv6 \ --with-kernel="$(LINUX_DIR)" \ @@ -269,18 +294,20 @@ IPTABLES_MAKEOPTS = \ KERNEL_DIR="$(LINUX_DIR)" PREFIX=/usr \ KBUILD_OUTPUT="$(LINUX_DIR)" \ DESTDIR="$(PKG_INSTALL_DIR)" \ - all install $(MAKE_TARGETS) + $(MAKE_TARGETS) define Build/Compile - mkdir -p $(PKG_INSTALL_DIR) + $(INSTALL_DIR) $(PKG_INSTALL_DIR) $(MAKE) -C $(PKG_BUILD_DIR) $(IPTABLES_MAKEOPTS) + $(MAKE) -C $(PKG_BUILD_DIR) $(IPTABLES_MAKEOPTS) install $(MAKE) -C $(PKG_BUILD_DIR)/libipq $(IPTABLES_MAKEOPTS) + $(MAKE) -C $(PKG_BUILD_DIR)/libipq $(IPTABLES_MAKEOPTS) install endef define Build/InstallDev - mkdir -p $(1)/usr/include - mkdir -p $(1)/usr/include/iptables - mkdir -p $(1)/usr/include/net/netfilter + $(INSTALL_DIR) $(1)/usr/include + $(INSTALL_DIR) $(1)/usr/include/iptables + $(INSTALL_DIR) $(1)/usr/include/net/netfilter # XXX: iptables header fixup, some headers are not installed by iptables anymore $(CP) $(PKG_BUILD_DIR)/include/net/netfilter/*.h $(1)/usr/include/net/netfilter/ @@ -291,11 +318,11 @@ define Build/InstallDev $(CP) $(PKG_BUILD_DIR)/include/libiptc $(1)/usr/include/ $(CP) $(PKG_INSTALL_DIR)/usr/include/* $(1)/usr/include/ - mkdir -p $(1)/usr/lib - $(CP) $(PKG_INSTALL_DIR)/usr/lib/libxtables.{a,so*} $(1)/usr/lib/ - $(CP) $(PKG_INSTALL_DIR)/usr/lib/libiptc.{a,so*} $(1)/usr/lib/ + $(INSTALL_DIR) $(1)/usr/lib + $(CP) $(PKG_INSTALL_DIR)/usr/lib/libxtables.so* $(1)/usr/lib/ + $(CP) $(PKG_INSTALL_DIR)/usr/lib/libip*tc.so* $(1)/usr/lib/ $(CP) $(PKG_INSTALL_DIR)/usr/lib/libipq.a $(1)/usr/lib/ - mkdir -p $(1)/usr/lib/pkgconfig + $(INSTALL_DIR) $(1)/usr/lib/pkgconfig $(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/xtables.pc $(1)/usr/lib/pkgconfig/ $(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/libiptc.pc $(1)/usr/lib/pkgconfig/ endef @@ -315,7 +342,9 @@ endef define Package/iptables-utils/install $(INSTALL_DIR) $(1)/usr/sbin - $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/iptables-{save,restore} $(1)/usr/sbin/ + $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/iptables-multi $(1)/usr/sbin/ + $(LN) iptables-multi $(1)/usr/sbin/iptables-save + $(LN) iptables-multi $(1)/usr/sbin/iptables-restore endef define Package/ip6tables/install @@ -329,12 +358,24 @@ endef define Package/ip6tables-utils/install $(INSTALL_DIR) $(1)/usr/sbin - $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ip6tables-{save,restore} $(1)/usr/sbin/ + $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ip6tables-multi $(1)/usr/sbin/ + $(LN) ip6tables-multi $(1)/usr/sbin/ip6tables-save + $(LN) ip6tables-multi $(1)/usr/sbin/ip6tables-restore endef define Package/libiptc/install $(INSTALL_DIR) $(1)/usr/lib - $(CP) $(PKG_INSTALL_DIR)/usr/lib/libip*tc.so* $(1)/usr/lib/ + $(CP) $(PKG_INSTALL_DIR)/usr/lib/libiptc.so* $(1)/usr/lib/ +endef + +define Package/libip4tc/install + $(INSTALL_DIR) $(1)/usr/lib + $(CP) $(PKG_INSTALL_DIR)/usr/lib/libip4tc.so* $(1)/usr/lib/ +endef + +define Package/libip6tc/install + $(INSTALL_DIR) $(1)/usr/lib + $(CP) $(PKG_INSTALL_DIR)/usr/lib/libip6tc.so* $(1)/usr/lib/ endef define Package/libxtables/install @@ -367,6 +408,7 @@ $(eval $(call BuildPlugin,iptables-mod-conntrack,$(IPT_CONNTRACK-m))) $(eval $(call BuildPlugin,iptables-mod-conntrack-extra,$(IPT_CONNTRACK_EXTRA-m))) $(eval $(call BuildPlugin,iptables-mod-extra,$(IPT_EXTRA-m))) $(eval $(call BuildPlugin,iptables-mod-filter,$(IPT_FILTER-m),$(L7_INSTALL))) +$(eval $(call BuildPlugin,iptables-mod-hashlimit,$(IPT_HASHLIMIT-m))) $(eval $(call BuildPlugin,iptables-mod-imq,$(IPT_IMQ-m))) $(eval $(call BuildPlugin,iptables-mod-ipopt,$(IPT_IPOPT-m))) $(eval $(call BuildPlugin,iptables-mod-ipsec,$(IPT_IPSEC-m))) @@ -378,4 +420,6 @@ $(eval $(call BuildPlugin,iptables-mod-ulog,$(IPT_ULOG-m))) $(eval $(call BuildPackage,ip6tables)) $(eval $(call BuildPackage,ip6tables-utils)) $(eval $(call BuildPackage,libiptc)) +$(eval $(call BuildPackage,libip4tc)) +$(eval $(call BuildPackage,libip6tc)) $(eval $(call BuildPackage,libxtables))