1*4882a593Smuzhiyun################################################################################ 2*4882a593Smuzhiyun# 3*4882a593Smuzhiyun# iptables 4*4882a593Smuzhiyun# 5*4882a593Smuzhiyun################################################################################ 6*4882a593Smuzhiyun 7*4882a593SmuzhiyunIPTABLES_VERSION = 1.8.7 8*4882a593SmuzhiyunIPTABLES_SOURCE = iptables-$(IPTABLES_VERSION).tar.bz2 9*4882a593SmuzhiyunIPTABLES_SITE = https://netfilter.org/projects/iptables/files 10*4882a593SmuzhiyunIPTABLES_INSTALL_STAGING = YES 11*4882a593SmuzhiyunIPTABLES_DEPENDENCIES = host-pkgconf \ 12*4882a593Smuzhiyun $(if $(BR2_PACKAGE_LIBNETFILTER_CONNTRACK),libnetfilter_conntrack) 13*4882a593SmuzhiyunIPTABLES_LICENSE = GPL-2.0 14*4882a593SmuzhiyunIPTABLES_LICENSE_FILES = COPYING 15*4882a593SmuzhiyunIPTABLES_CPE_ID_VENDOR = netfilter 16*4882a593SmuzhiyunIPTABLES_SELINUX_MODULES = iptables 17*4882a593Smuzhiyun 18*4882a593Smuzhiyun# Building static causes ugly warnings on some plugins 19*4882a593SmuzhiyunIPTABLES_CONF_OPTS = --libexecdir=/usr/lib --with-kernel=$(STAGING_DIR)/usr \ 20*4882a593Smuzhiyun $(if $(BR2_STATIC_LIBS),,--disable-static) 21*4882a593Smuzhiyun 22*4882a593Smuzhiyun# For connlabel match 23*4882a593Smuzhiyunifeq ($(BR2_PACKAGE_LIBNETFILTER_CONNTRACK),y) 24*4882a593SmuzhiyunIPTABLES_DEPENDENCIES += libnetfilter_conntrack 25*4882a593Smuzhiyunendif 26*4882a593Smuzhiyun 27*4882a593Smuzhiyun# For nfnl_osf 28*4882a593Smuzhiyunifeq ($(BR2_PACKAGE_LIBNFNETLINK),y) 29*4882a593SmuzhiyunIPTABLES_DEPENDENCIES += libnfnetlink 30*4882a593Smuzhiyunendif 31*4882a593Smuzhiyun 32*4882a593Smuzhiyun# For iptables-compat tools 33*4882a593Smuzhiyunifeq ($(BR2_PACKAGE_IPTABLES_NFTABLES),y) 34*4882a593SmuzhiyunIPTABLES_CONF_OPTS += --enable-nftables 35*4882a593SmuzhiyunIPTABLES_DEPENDENCIES += host-bison host-flex libmnl libnftnl 36*4882a593Smuzhiyunelse 37*4882a593SmuzhiyunIPTABLES_CONF_OPTS += --disable-nftables 38*4882a593Smuzhiyunendif 39*4882a593Smuzhiyun 40*4882a593Smuzhiyun# bpf compiler support and nfsynproxy tool 41*4882a593Smuzhiyunifeq ($(BR2_PACKAGE_IPTABLES_BPF_NFSYNPROXY),y) 42*4882a593Smuzhiyun# libpcap is tricky for static-only builds and needs help 43*4882a593Smuzhiyunifeq ($(BR2_STATIC_LIBS),y) 44*4882a593SmuzhiyunIPTABLES_LIBS_FOR_STATIC_LINK += `$(STAGING_DIR)/usr/bin/pcap-config --static --additional-libs` 45*4882a593SmuzhiyunIPTABLES_CONF_OPTS += LIBS="$(IPTABLES_LIBS_FOR_STATIC_LINK)" 46*4882a593Smuzhiyunendif 47*4882a593SmuzhiyunIPTABLES_CONF_OPTS += --enable-bpf-compiler --enable-nfsynproxy 48*4882a593SmuzhiyunIPTABLES_DEPENDENCIES += libpcap 49*4882a593Smuzhiyunelse 50*4882a593SmuzhiyunIPTABLES_CONF_OPTS += --disable-bpf-compiler --disable-nfsynproxy 51*4882a593Smuzhiyunendif 52*4882a593Smuzhiyun 53*4882a593Smuzhiyundefine IPTABLES_LINUX_CONFIG_FIXUPS 54*4882a593Smuzhiyun $(call KCONFIG_ENABLE_OPT,CONFIG_IP_NF_IPTABLES) 55*4882a593Smuzhiyun $(call KCONFIG_ENABLE_OPT,CONFIG_IP_NF_FILTER) 56*4882a593Smuzhiyun $(call KCONFIG_ENABLE_OPT,CONFIG_NETFILTER) 57*4882a593Smuzhiyun $(call KCONFIG_ENABLE_OPT,CONFIG_NETFILTER_XTABLES) 58*4882a593Smuzhiyunendef 59*4882a593Smuzhiyun 60*4882a593Smuzhiyundefine IPTABLES_INSTALL_INIT_SYSV 61*4882a593Smuzhiyun $(INSTALL) -m 0755 -D package/iptables/S35iptables \ 62*4882a593Smuzhiyun $(TARGET_DIR)/etc/init.d/S35iptables 63*4882a593Smuzhiyun touch $(TARGET_DIR)/etc/iptables.conf 64*4882a593Smuzhiyunendef 65*4882a593Smuzhiyun 66*4882a593Smuzhiyun$(eval $(autotools-package)) 67