KumiSystems/openwrtv3
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
openwrtv3/package/network/config/firewall/Makefile

63 lines
1.9 KiB
Makefile
Raw Normal View History

firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
#
firewall: drop invalid by default, remove chain indirection, fix invert flags (#21738) * Enable drop_invalid by default to catch unnatted packets (#21738) * Fix processing of inversions for -i, -o, -s, -d and -p flags * Remove delegate_* chain indirection but rely on xt_id to identify own rules Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 48551
2016-01-29 17:26:41 +00:00
# Copyright (C) 2013-2016 OpenWrt.org
firewall3: fix mark rules for local traffic, fix race condition Update to latest HEAD in order to fix MARK rule generation for local traffic, also fix a possible race condition during firewall start. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-05-02 17:46:23 +00:00
# Copyright (C) 2016 LEDE project
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
PKG_NAME:=firewall
firewall3: update to latest git HEAD b45e162 helpers: fix the set_helper in the rule structure f742ba7 helpers.conf: support also tcp in the CT sip helper 08b2c61 helpers: make the proto field as a list rather than one option Signed-off-by: John Crispin <john@phrozen.org>
2018-05-14 14:22:57 +00:00
PKG_RELEASE:=1
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
PKG_SOURCE_PROTO:=git
treewide: replace LEDE_GIT with PROJECT_GIT Remove LEDE_GIT references in favor to the new name-agnostic PROJECT_GIT variable. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-01-05 09:46:06 +00:00
PKG_SOURCE_URL=$(PROJECT_GIT)/project/firewall3.git
firewall: bump to git HEAD 12a7cf9 Add support for DSCP matches and target 06fa692 defaults: use a generic check_kmod() function 1c4d5bc defaults: fix check_kmod() function Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2018-08-13 19:05:46 +00:00
PKG_SOURCE_DATE:=2018-08-13
PKG_SOURCE_VERSION:=1c4d5bcd1137e61e91dca858fe33d76d7a1dc821
PKG_MIRROR_HASH:=49f939877a734056455556c90b959c407fd2c4988dc5d86f62a8122ebd7b8899
firewall3: fix mark rules for local traffic, fix race condition Update to latest HEAD in order to fix MARK rule generation for local traffic, also fix a possible race condition during firewall start. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-05-02 17:46:23 +00:00
PKG_MAINTAINER:=Jo-Philipp Wich <jo@mein.io>
Add a few SPDX tags Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 43151
2014-11-02 12:20:54 +00:00
PKG_LICENSE:=ISC
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
firewall: add CONFIG_IPV6 to PKG_CONFIG_DEPENDS to fix a rebuild error Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 48315
2016-01-18 13:21:37 +00:00
PKG_CONFIG_DEPENDS := CONFIG_IPV6
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/cmake.mk
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
define Package/firewall
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
SECTION:=net
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
CATEGORY:=Base system
TITLE:=OpenWrt C Firewall
firewall: depend on kmod-nf-conntrack6 Firewall rules don't work as intended without conntrack support. The recent cleanup removed the kmod-nf-conntrack6 dependency from the iptables modules; add it to the firewall package instead. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2018-02-02 12:57:05 +00:00
DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libxtables +kmod-ipt-core +kmod-ipt-conntrack +IPV6:kmod-nf-conntrack6 +kmod-ipt-nat
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
endef
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
define Package/firewall/description
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
This package provides a config-compatible C implementation of the UCI firewall.
endef
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
define Package/firewall/conffiles
firewall3: add default config and firewall.user SVN-Revision: 35889
2013-03-05 13:45:09 +00:00
/etc/config/firewall
/etc/firewall.user
endef
firewall: compile with LTO enabled Reduces .ipk size on MIPS from 41.6k to 41.1k Signed-off-by: Felix Fietkau <nbd@nbd.name>
2018-07-11 17:23:43 +00:00
TARGET_CFLAGS += -ffunction-sections -fdata-sections -flto
TARGET_LDFLAGS += -Wl,--gc-sections -flto
firewall3: update to git head - allows building without IPv6 support - uses more robust rules to cope with missing libext.a - uses better linking strategy to avoid symbol clashes with older iptables - introduces source compatiblity layer for different libxtables versions SVN-Revision: 36736
2013-05-27 15:13:19 +00:00
CMAKE_OPTIONS += $(if $(CONFIG_IPV6),,-DDISABLE_IPV6=1)
firewall3: update to git head * use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions * make ipset integration more reliable SVN-Revision: 36681
2013-05-21 10:15:14 +00:00
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
define Package/firewall/install
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
$(INSTALL_DIR) $(1)/sbin
firewall3: fix accidentally changed install directive SVN-Revision: 36840
2013-06-04 12:30:50 +00:00
$(INSTALL_BIN) $(PKG_BUILD_DIR)/firewall3 $(1)/sbin/fw3
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_BIN) ./files/firewall.init $(1)/etc/init.d/firewall
$(INSTALL_DIR) $(1)/etc/hotplug.d/iface
$(INSTALL_DATA) ./files/firewall.hotplug $(1)/etc/hotplug.d/iface/20-firewall
firewall3: add default config and firewall.user SVN-Revision: 35889
2013-03-05 13:45:09 +00:00
$(INSTALL_DIR) $(1)/etc/config/
$(INSTALL_DATA) ./files/firewall.config $(1)/etc/config/firewall
$(INSTALL_DIR) $(1)/etc/
$(INSTALL_DATA) ./files/firewall.user $(1)/etc/firewall.user
firewall: bump to git HEAD 392811a ubus: let fw3_ubus_address() return the number of resolved addresses 359adcf options: emit an empty address item when resolving networks fails 503db4a zones: disable masq when resolving of all masq_src or masq_dest items failed f50a524 helpers: implement explicit CT helper assignment support a3ef503 zones: allow per-table log control 8ef12cb iptables: fix possible NULL pointer access on constructing rule masks Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2018-03-02 10:14:11 +00:00
$(INSTALL_DIR) $(1)/usr/share/fw3
$(INSTALL_DATA) $(PKG_BUILD_DIR)/helpers.conf $(1)/usr/share/fw3
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
endef
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
$(eval $(call BuildPackage,firewall))
Reference in a new issue Copy permalink