openwrtv4/package/network/config/firewall/Makefile

#
# Copyright (C) 2013-2015 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#

include $(TOPDIR)/rules.mk

PKG_NAME:=firewall
PKG_VERSION:=2015-07-27
PKG_RELEASE:=$(PKG_SOURCE_VERSION)

PKG_SOURCE_PROTO:=git
PKG_SOURCE_URL:=git://nbd.name/firewall3.git
PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)
PKG_SOURCE_VERSION:=980b7859bbd1db1e5e46422fccccbce38f9809ab
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-$(PKG_SOURCE_VERSION).tar.gz
PKG_MAINTAINER:=Jo-Philipp Wich <jow@openwrt.org>
PKG_LICENSE:=ISC


include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/cmake.mk

define Package/firewall
  SECTION:=net
  CATEGORY:=Base system
  TITLE:=OpenWrt C Firewall
  DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libxtables +kmod-ipt-core +kmod-ipt-conntrack +kmod-ipt-nat
endef

define Package/firewall/description
 This package provides a config-compatible C implementation of the UCI firewall.
endef

define Package/firewall/conffiles
/etc/config/firewall
/etc/firewall.user
endef

TARGET_CFLAGS += -ffunction-sections -fdata-sections
TARGET_LDFLAGS += -Wl,--gc-sections
CMAKE_OPTIONS += $(if $(CONFIG_IPV6),,-DDISABLE_IPV6=1)

define Package/firewall/install
	$(INSTALL_DIR) $(1)/sbin
	$(INSTALL_BIN) $(PKG_BUILD_DIR)/firewall3 $(1)/sbin/fw3
	$(INSTALL_DIR) $(1)/etc/init.d
	$(INSTALL_BIN) ./files/firewall.init $(1)/etc/init.d/firewall
	$(INSTALL_DIR) $(1)/etc/hotplug.d/iface
	$(INSTALL_DATA) ./files/firewall.hotplug $(1)/etc/hotplug.d/iface/20-firewall
	$(INSTALL_DIR) $(1)/etc/config/
	$(INSTALL_DATA) ./files/firewall.config $(1)/etc/config/firewall
	$(INSTALL_DIR) $(1)/etc/
	$(INSTALL_DATA) ./files/firewall.user $(1)/etc/firewall.user
endef

$(eval $(call BuildPackage,firewall))
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`#`
firewall: respect src_dip option for reflection (#18544) Also fix wrong IPv4 netmask calculation on x86-64, thanks Ulrich Weber. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 43874 2015-01-08 16:10:46 +00:00			`# Copyright (C) 2013-2015 OpenWrt.org`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`#`
			`# This is free software, licensed under the GNU General Public License v2.`
			`# See /LICENSE for more information.`
			`#`

			`include $(TOPDIR)/rules.mk`

firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`PKG_NAME:=firewall`
firewall: fix typo in ESP rule Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46506 2015-07-27 11:47:20 +00:00			`PKG_VERSION:=2015-07-27`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`PKG_RELEASE:=$(PKG_SOURCE_VERSION)`

			`PKG_SOURCE_PROTO:=git`
firewall: fix git source url SVN-Revision: 36839 2013-06-04 12:23:47 +00:00			`PKG_SOURCE_URL:=git://nbd.name/firewall3.git`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)`
firewall: link iptables extensions dynamically Use shared libipt{,4,6}ext.so libraries instead of statically linking the userspace matches into the fw3 executable. As a side effect the match initialization is extremely simplified compared to the weak function pointer juggling performed before. This also fixes the initialization of the multiport match. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 45764 2015-05-26 11:11:48 +00:00			`PKG_SOURCE_VERSION:=980b7859bbd1db1e5e46422fccccbce38f9809ab`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-$(PKG_SOURCE_VERSION).tar.gz`
			`PKG_MAINTAINER:=Jo-Philipp Wich <jow@openwrt.org>`
Add a few SPDX tags Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 43151 2014-11-02 12:20:54 +00:00			`PKG_LICENSE:=ISC`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00

			`include $(INCLUDE_DIR)/package.mk`
			`include $(INCLUDE_DIR)/cmake.mk`

firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`define Package/firewall`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`SECTION:=net`
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`CATEGORY:=Base system`
			`TITLE:=OpenWrt C Firewall`
firewall: depend on kmod-ipt-conntrack (#20542) Our ruleset requires kernel support for conntrack state matching, therfore depend on the require kmod. Fixes #20542. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 46990 2015-09-17 15:31:45 +00:00			`DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libxtables +kmod-ipt-core +kmod-ipt-conntrack +kmod-ipt-nat`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`endef`

firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`define Package/firewall/description`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`This package provides a config-compatible C implementation of the UCI firewall.`
			`endef`

firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`define Package/firewall/conffiles`
firewall3: add default config and firewall.user SVN-Revision: 35889 2013-03-05 13:45:09 +00:00			`/etc/config/firewall`
			`/etc/firewall.user`
			`endef`

firewall3: update to git head * use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions * make ipset integration more reliable SVN-Revision: 36681 2013-05-21 10:15:14 +00:00			`TARGET_CFLAGS += -ffunction-sections -fdata-sections`
firewall3: update to git head - fixes linking issues with some toolchains SVN-Revision: 36703 2013-05-24 12:49:06 +00:00			`TARGET_LDFLAGS += -Wl,--gc-sections`
firewall3: update to git head - allows building without IPv6 support - uses more robust rules to cope with missing libext.a - uses better linking strategy to avoid symbol clashes with older iptables - introduces source compatiblity layer for different libxtables versions SVN-Revision: 36736 2013-05-27 15:13:19 +00:00			`CMAKE_OPTIONS += $(if $(CONFIG_IPV6),,-DDISABLE_IPV6=1)`
firewall3: update to git head * use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions * make ipset integration more reliable SVN-Revision: 36681 2013-05-21 10:15:14 +00:00
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`define Package/firewall/install`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`$(INSTALL_DIR) $(1)/sbin`
firewall3: fix accidentally changed install directive SVN-Revision: 36840 2013-06-04 12:30:50 +00:00			`$(INSTALL_BIN) $(PKG_BUILD_DIR)/firewall3 $(1)/sbin/fw3`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`$(INSTALL_DIR) $(1)/etc/init.d`
			`$(INSTALL_BIN) ./files/firewall.init $(1)/etc/init.d/firewall`
			`$(INSTALL_DIR) $(1)/etc/hotplug.d/iface`
			`$(INSTALL_DATA) ./files/firewall.hotplug $(1)/etc/hotplug.d/iface/20-firewall`
firewall3: add default config and firewall.user SVN-Revision: 35889 2013-03-05 13:45:09 +00:00			`$(INSTALL_DIR) $(1)/etc/config/`
			`$(INSTALL_DATA) ./files/firewall.config $(1)/etc/config/firewall`
			`$(INSTALL_DIR) $(1)/etc/`
			`$(INSTALL_DATA) ./files/firewall.user $(1)/etc/firewall.user`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`endef`

firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`$(eval $(call BuildPackage,firewall))`