package/iptables/Makefile

   1 # $Id$
   2
   3 include $(TOPDIR)/rules.mk
   4
   5 PKG_NAME:=iptables
   6 PKG_VERSION:=1.3.5
   7 PKG_RELEASE:=1
   8 PKG_MD5SUM:=00fb916fa8040ca992a5ace56d905ea5
   9
  10 PKG_SOURCE_URL:=http://www.netfilter.org/projects/iptables/files \
  11         ftp://ftp.be.netfilter.org/pub/netfilter/iptables/ \
  12         ftp://ftp.de.netfilter.org/pub/netfilter/iptables/ \
  13         ftp://ftp.no.netfilter.org/pub/netfilter/iptables/
  14 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
  15 PKG_CAT:=bzcat
  16
  17 PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)
  18 PKG_INSTALL_DIR:=$(PKG_BUILD_DIR)/ipkg-install
  19
  20 PKG_MENU:=IPv4 / IPv6 firewall administration
  21
  22 include $(TOPDIR)/package/rules.mk
  23 include $(LINUX_DIR)/.config
  24 include $(TOPDIR)/target/linux/netfilter.mk
  25
  26 define Package/iptables
  27 SECTION:=net
  28 CATEGORY:=Base system
  29 TITLE:=IPv4 firewall administration tool
  30 endef
  31
  32 define Package/iptables-mod-conntrack
  33 SECTION:=net
  34 CATEGORY:=Base system
  35 DEPENDS:=iptables
  36 TITLE:=iptables extensions for connection tracking
  37 DESCRIPTION:=Includes: \\\
  38         * libipt_conntrack \\\
  39         * libipt_helper \\\
  40         * libipt_connmark/CONNMARK
  41
  42 endef
  43
  44 define Package/iptables-mod-filter
  45 SECTION:=net
  46 CATEGORY:=Base system
  47 DEPENDS:=iptables
  48 TITLE:=iptables extensions for packet content inspection
  49 DESCRIPTION:=Includes: \\\
  50         * libipt_ipp2p \\\
  51         * libipt_layer7
  52
  53 endef
  54
  55 define Package/iptables-mod-imq
  56 SECTION:=net
  57 CATEGORY:=Base system
  58 DEPENDS:=iptables
  59 TITLE:=iptables extension for IMQ support
  60 DESCRIPTION:=Includes: \\\
  61         * libipt_IMQ
  62
  63 endef
  64
  65 define Package/iptables-mod-ipopt
  66 SECTION:=net
  67 CATEGORY:=Base system
  68 DEPENDS:=iptables
  69 TITLE:=iptables extensions for matching/changing IP packet options
  70 DESCRIPTION:=Includes: \\\
  71         * libipt_dscp/DSCP \\\
  72         * libipt_ecn/ECN \\\
  73         * libipt_length \\\
  74         * libipt_mac \\\
  75         * libipt_tos/TOS \\\
  76         * libipt_tcpmms \\\
  77         * libipt_ttl/TTL \\\
  78         * libipt_unclean
  79
  80 endef
  81
  82 define Package/iptables-mod-ipsec
  83 SECTION:=net
  84 CATEGORY:=Base system
  85 DEPENDS:=iptables
  86 TITLE:=iptables extensions for matching ipsec traffic
  87 DESCRIPTION:=Includes: \\\
  88         * libipt_ah \\\
  89         * libipt_esp
  90
  91 endef
  92
  93 define Package/iptables-mod-nat
  94 SECTION:=net
  95 CATEGORY:=Base system
  96 DEPENDS:=iptables
  97 TITLE:=iptables extensions for different NAT targets
  98 DESCRIPTION:=Includes: \\\
  99         * libipt_REDIRECT
 100 endef
 101
 102 define Package/iptables-mod-ulog
 103 SECTION:=net
 104 CATEGORY:=Base system
 105 DEPENDS:=iptables
 106 TITLE:=iptables extensions for user-space packet logging
 107 DESCRIPTION:=Includes: \\\
 108         * libipt_ULOG
 109 endef
 110
 111 define Package/iptables-mod-extra
 112 SECTION:=net
 113 CATEGORY:=Base system
 114 DEPENDS:=iptables
 115 TITLE:=other extra iptables extensions
 116 DESCRIPTION:=Includes: \\\
 117         * libipt_limit \\\
 118         * libipt_owner \\\
 119         * libipt_physdev \\\
 120         * libipt_pkttype \\\
 121         * libipt_recent
 122
 123 endef
 124
 125 define Package/iptables-utils
 126 SECTION:=net
 127 CATEGORY:=Base system
 128 DEPENDS:=iptables
 129 TITLE:=iptables save and restore utilities
 130 endef
 131
 132 define Package/ip6tables
 133 SECTION:=net
 134 CATEGORY:=Base system
 135 TITLE:=IPv6 firewall administration tool
 136 endef
 137
 138
 139 define Build/Configure
 140 endef
 141
 142 define Build/Compile
 143         chmod a+x $(PKG_BUILD_DIR)/extensions/.*-test*
 144         mkdir -p $(PKG_INSTALL_DIR)
 145         $(MAKE) -C $(PKG_BUILD_DIR) \
 146                 $(TARGET_CONFIGURE_OPTS) \
 147                 CC=$(TARGET_CC) COPT_FLAGS="$(TARGET_CFLAGS)" \
 148                 KERNEL_DIR=$(LINUX_DIR) PREFIX=/usr \
 149                 DESTDIR="$(PKG_INSTALL_DIR)" \
 150                 all install install-devel
 151 endef
 152
 153 define Package/iptables/install
 154         install -d -m0755 $(1)/etc/config
 155         install -m0644 ./files/firewall.config $(1)/etc/config/firewall
 156         install -d -m0755 $(1)/etc/init.d
 157         install -m0755 ./files/firewall.init $(1)/etc/init.d/S45firewall
 158         install -m0755 ./files/firewall.user $(1)/etc/
 159         install -d -m0755 $(1)/usr/lib
 160         install -m0644 ./files/firewall.awk $(1)/usr/lib
 161         install -d -m0755 $(1)/usr/sbin
 162         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/iptables $(1)/usr/sbin/
 163         install -d -m0755 $(1)/usr/lib/iptables
 164         (cd $(PKG_INSTALL_DIR)/usr/lib/iptables ; \
 165                 $(CP) $(patsubst %,lib%.so,$(IPT_BUILTIN:xt_%=ipt_%)) $(1)/usr/lib/iptables/ \
 166         )
 167         $(RSTRIP) $(1)
 168 endef
 169
 170 define Package/iptables-utils/install
 171         install -d -m0755 $(1)/usr/sbin
 172         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/iptables-{save,restore} $(1)/usr/sbin/
 173         $(RSTRIP) $(1)
 174 endef
 175
 176 define Package/ip6tables/install
 177         install -d -m0755 $(1)/usr/sbin
 178         $(CP) $(PKG_INSTALL_DIR)/usr/sbin/ip6tables $(1)/usr/sbin/
 179         install -d -m0755 $(1)/usr/lib/iptables
 180         (cd $(PKG_INSTALL_DIR)/usr/lib/iptables ; \
 181                 $(CP) libip6t_*.so $(1)/usr/lib/iptables/ \
 182         )
 183         $(RSTRIP) $(1)
 184 endef
 185
 186 $(eval $(call BuildPackage,iptables))
 187 $(eval $(call BuildPackage,iptables-utils))
 188 $(eval $(call BuildPackage,ip6tables))
 189
 190 define BuildPlugin
 191 define Package/$(1)/install
 192         install -m0755 -d $$(1)/usr/lib/iptables
 193         for m in $$(patsubst xt_%,ipt_%,$(2)); do \
 194                 $(CP) $(PKG_INSTALL_DIR)/usr/lib/iptables/lib$$$$$$$${m}.so $$(1)/usr/lib/iptables/ ; \
 195         done
 196         $(3)
 197         $(RSTRIP) $$(1)
 198 endef
 199
 200 $$(eval $$(call BuildPackage,$(1)))
 201 endef
 202
 203 L7_INSTALL:=mkdir -p $$(1)/etc/l7-protocols; \
 204         $(CP) files/l7/*.pat $$(1)/etc/l7-protocols/
 205
 206 $(eval $(call BuildPlugin,iptables-mod-conntrack,$(IPT_CONNTRACK-m)))
 207 $(eval $(call BuildPlugin,iptables-mod-extra,$(IPT_EXTRA-m)))
 208 $(eval $(call BuildPlugin,iptables-mod-filter,$(IPT_FILTER-m),$(L7_INSTALL)))
 209 $(eval $(call BuildPlugin,iptables-mod-imq,$(IPT_IMQ-m)))
 210 $(eval $(call BuildPlugin,iptables-mod-ipopt,$(IPT_IPOPT-m)))
 211 $(eval $(call BuildPlugin,iptables-mod-ipsec,$(IPT_IPSEC-m)))
 212 $(eval $(call BuildPlugin,iptables-mod-nat,$(IPT_NAT-m)))
 213 $(eval $(call BuildPlugin,iptables-mod-ulog,$(IPT_ULOG-m)))
 214
 215
 216 $(STAGING_DIR)/usr/lib/libipq.a: $(PKG_BUILD_DIR)/.built
 217         mkdir -p $(STAGING_DIR)/usr/include
 218         $(CP) $(PKG_INSTALL_DIR)/usr/include/libipq.h $(STAGING_DIR)/usr/include/
 219         mkdir -p $(STAGING_DIR)/usr/lib
 220         $(CP) $(PKG_INSTALL_DIR)/usr/lib/libipq.a $(STAGING_DIR)/usr/lib/
 221
 222 install-dev: $(STAGING_DIR)/usr/lib/libipq.a
 223 uninstall-dev:
 224         rm -rf $(STAGING_DIR)/usr/include/libipq.h
 225         rm -rf $(STAGING_DIR)/usr/lib/libipq.a
 226
 227 compile-targets: install-dev
 228 clean-targets: uninstall-dev
 229