netfilter, iptables: add optional CHECKSUM module

Signed-off-by: Denis Osvald <denis.osvald@sartura.hr>
This commit is contained in:
Denis Osvald 2017-10-22 22:21:23 +02:00 committed by John Crispin
parent f9ecb0d562
commit ee791fa4ab
3 changed files with 31 additions and 0 deletions

View file

@ -262,6 +262,10 @@ $(eval $(if $(NF_KMOD),$(call nf_add,IPT_TEE,CONFIG_NF_DUP_IPV6, $(P_V6)nf_dup_i
$(eval $(call nf_add,IPT_U32,CONFIG_NETFILTER_XT_MATCH_U32, $(P_XT)xt_u32)) $(eval $(call nf_add,IPT_U32,CONFIG_NETFILTER_XT_MATCH_U32, $(P_XT)xt_u32))
# checksum
$(eval $(call nf_add,IPT_CHECKSUM,CONFIG_NETFILTER_XT_TARGET_CHECKSUM, $(P_XT)xt_CHECKSUM))
# netlink # netlink

View file

@ -529,6 +529,23 @@ endef
$(eval $(call KernelPackage,ipt-u32)) $(eval $(call KernelPackage,ipt-u32))
define KernelPackage/ipt-checksum
TITLE:=CHECKSUM support
KCONFIG:= \
CONFIG_NETFILTER_XT_TARGET_CHECKSUM
FILES:= \
$(LINUX_DIR)/net/netfilter/xt_CHECKSUM.ko \
$(foreach mod,$(IPT_CHECKSUM-m),$(LINUX_DIR)/net/$(mod).ko)
AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_CHECKSUM-m)))
$(call AddDepends/ipt)
endef
define KernelPackage/ipt-checksum/description
Kernel modules for CHECKSUM fillin target
endef
$(eval $(call KernelPackage,ipt-checksum))
define KernelPackage/ipt-iprange define KernelPackage/ipt-iprange
TITLE:=Module for matching ip ranges TITLE:=Module for matching ip ranges

View file

@ -395,6 +395,15 @@ U32 iptables extensions.
endef endef
define Package/iptables-mod-checksum
$(call Package/iptables/Module, +kmod-ipt-checksum)
TITLE:=IP CHECKSUM target extension
endef
define Package/iptables-mod-checksum/description
iptables extension for the CHECKSUM calculation target
endef
define Package/ip6tables define Package/ip6tables
$(call Package/iptables/Default) $(call Package/iptables/Default)
DEPENDS:=@IPV6 +kmod-ip6tables +iptables DEPENDS:=@IPV6 +kmod-ip6tables +iptables
@ -600,6 +609,7 @@ $(eval $(call BuildPlugin,iptables-mod-u32,$(IPT_U32-m)))
$(eval $(call BuildPlugin,iptables-mod-nflog,$(IPT_NFLOG-m))) $(eval $(call BuildPlugin,iptables-mod-nflog,$(IPT_NFLOG-m)))
$(eval $(call BuildPlugin,iptables-mod-trace,$(IPT_DEBUG-m))) $(eval $(call BuildPlugin,iptables-mod-trace,$(IPT_DEBUG-m)))
$(eval $(call BuildPlugin,iptables-mod-nfqueue,$(IPT_NFQUEUE-m))) $(eval $(call BuildPlugin,iptables-mod-nfqueue,$(IPT_NFQUEUE-m)))
$(eval $(call BuildPlugin,iptables-mod-checksum,$(IPT_CHECKSUM-m)))
$(eval $(call BuildPackage,ip6tables)) $(eval $(call BuildPackage,ip6tables))
$(eval $(call BuildPlugin,ip6tables-extra,$(IPT_IPV6_EXTRA-m))) $(eval $(call BuildPlugin,ip6tables-extra,$(IPT_IPV6_EXTRA-m)))
$(eval $(call BuildPlugin,ip6tables-mod-nat,$(IPT_NAT6-m))) $(eval $(call BuildPlugin,ip6tables-mod-nat,$(IPT_NAT6-m)))