openwrtv4/package/network/config/firewall/Makefile

#
# Copyright (C) 2013-2014 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#

include $(TOPDIR)/rules.mk

PKG_NAME:=firewall
PKG_VERSION:=2014-08-11
PKG_RELEASE:=$(PKG_SOURCE_VERSION)

PKG_SOURCE_PROTO:=git
PKG_SOURCE_URL:=git://nbd.name/firewall3.git
PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)
PKG_SOURCE_VERSION:=2807cc26b8e46eef5f23c06534a853dd48183331
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-$(PKG_SOURCE_VERSION).tar.gz
PKG_MAINTAINER:=Jo-Philipp Wich <jow@openwrt.org>


include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/cmake.mk

define Package/firewall
  SECTION:=net
  CATEGORY:=Base system
  TITLE:=OpenWrt C Firewall
  DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libxtables +kmod-ipt-core +kmod-ipt-nat
endef

define Package/firewall/description
 This package provides a config-compatible C implementation of the UCI firewall.
endef

define Package/firewall/conffiles
/etc/config/firewall
/etc/firewall.user
endef

define Build/Configure
	$(foreach file,$(wildcard $(STAGING_DIR)/usr/lib/iptables/libext*.a),$(CP) $(file) $(PKG_BUILD_DIR)/$(notdir $(file));)
	$(call Build/Configure/Default)
endef

TARGET_CFLAGS += -ffunction-sections -fdata-sections
TARGET_LDFLAGS += -Wl,--gc-sections
CMAKE_OPTIONS += $(if $(CONFIG_IPV6),,-DDISABLE_IPV6=1)

define Package/firewall/install
	$(INSTALL_DIR) $(1)/sbin
	$(INSTALL_BIN) $(PKG_BUILD_DIR)/firewall3 $(1)/sbin/fw3
	$(INSTALL_DIR) $(1)/etc/init.d
	$(INSTALL_BIN) ./files/firewall.init $(1)/etc/init.d/firewall
	$(INSTALL_DIR) $(1)/etc/hotplug.d/iface
	$(INSTALL_DATA) ./files/firewall.hotplug $(1)/etc/hotplug.d/iface/20-firewall
	$(INSTALL_DIR) $(1)/etc/config/
	$(INSTALL_DATA) ./files/firewall.config $(1)/etc/config/firewall
	$(INSTALL_DIR) $(1)/etc/
	$(INSTALL_DATA) ./files/firewall.user $(1)/etc/firewall.user
endef

$(eval $(call BuildPackage,firewall))
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`#`
firewall: fix several ipset integration issues (#15016) - Do not consider bitmap storage for IPv6 family sets - Move ipset family parameter before any additional option - Only emit family parameter for hash sets - Do not allow IPv6 iprange for IPv4 sets and vice versa Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 39647 2014-02-20 23:20:10 +00:00			`# Copyright (C) 2013-2014 OpenWrt.org`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`#`
			`# This is free software, licensed under the GNU General Public License v2.`
			`# See /LICENSE for more information.`
			`#`

			`include $(TOPDIR)/rules.mk`

firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`PKG_NAME:=firewall`
firewall: implement selective conntrack flushing (#10225) Utilize the new selective conntrack flushing facility to clear out active conntrack entries referring to old IP addresses after a firewall reload. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 42114 2014-08-11 09:41:20 +00:00			`PKG_VERSION:=2014-08-11`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`PKG_RELEASE:=$(PKG_SOURCE_VERSION)`

			`PKG_SOURCE_PROTO:=git`
firewall: fix git source url SVN-Revision: 36839 2013-06-04 12:23:47 +00:00			`PKG_SOURCE_URL:=git://nbd.name/firewall3.git`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)`
firewall: implement selective conntrack flushing (#10225) Utilize the new selective conntrack flushing facility to clear out active conntrack entries referring to old IP addresses after a firewall reload. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 42114 2014-08-11 09:41:20 +00:00			`PKG_SOURCE_VERSION:=2807cc26b8e46eef5f23c06534a853dd48183331`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-$(PKG_SOURCE_VERSION).tar.gz`
			`PKG_MAINTAINER:=Jo-Philipp Wich <jow@openwrt.org>`


			`include $(INCLUDE_DIR)/package.mk`
			`include $(INCLUDE_DIR)/cmake.mk`

firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`define Package/firewall`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`SECTION:=net`
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`CATEGORY:=Base system`
			`TITLE:=OpenWrt C Firewall`
firewall: add missing dependencies Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 37224 2013-07-10 11:33:48 +00:00			`DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libxtables +kmod-ipt-core +kmod-ipt-nat`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`endef`

firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`define Package/firewall/description`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`This package provides a config-compatible C implementation of the UCI firewall.`
			`endef`

firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`define Package/firewall/conffiles`
firewall3: add default config and firewall.user SVN-Revision: 35889 2013-03-05 13:45:09 +00:00			`/etc/config/firewall`
			`/etc/firewall.user`
			`endef`

firewall3: update to git head - allows building without IPv6 support - uses more robust rules to cope with missing libext.a - uses better linking strategy to avoid symbol clashes with older iptables - introduces source compatiblity layer for different libxtables versions SVN-Revision: 36736 2013-05-27 15:13:19 +00:00			`define Build/Configure`
firewall: copy libext*.a from staging dir and drop kernel.mk includes, solves problem with colliding CONFIG_IPV6 symbols SVN-Revision: 36868 2013-06-06 14:02:29 +00:00			`$(foreach file,$(wildcard $(STAGING_DIR)/usr/lib/iptables/libext*.a),$(CP) $(file) $(PKG_BUILD_DIR)/$(notdir $(file));)`
firewall3: update to git head - allows building without IPv6 support - uses more robust rules to cope with missing libext.a - uses better linking strategy to avoid symbol clashes with older iptables - introduces source compatiblity layer for different libxtables versions SVN-Revision: 36736 2013-05-27 15:13:19 +00:00			`$(call Build/Configure/Default)`
firewall3: update to git head * use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions * make ipset integration more reliable SVN-Revision: 36681 2013-05-21 10:15:14 +00:00			`endef`

			`TARGET_CFLAGS += -ffunction-sections -fdata-sections`
firewall3: update to git head - fixes linking issues with some toolchains SVN-Revision: 36703 2013-05-24 12:49:06 +00:00			`TARGET_LDFLAGS += -Wl,--gc-sections`
firewall3: update to git head - allows building without IPv6 support - uses more robust rules to cope with missing libext.a - uses better linking strategy to avoid symbol clashes with older iptables - introduces source compatiblity layer for different libxtables versions SVN-Revision: 36736 2013-05-27 15:13:19 +00:00			`CMAKE_OPTIONS += $(if $(CONFIG_IPV6),,-DDISABLE_IPV6=1)`
firewall3: update to git head * use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions * make ipset integration more reliable SVN-Revision: 36681 2013-05-21 10:15:14 +00:00
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`define Package/firewall/install`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`$(INSTALL_DIR) $(1)/sbin`
firewall3: fix accidentally changed install directive SVN-Revision: 36840 2013-06-04 12:30:50 +00:00			`$(INSTALL_BIN) $(PKG_BUILD_DIR)/firewall3 $(1)/sbin/fw3`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`$(INSTALL_DIR) $(1)/etc/init.d`
			`$(INSTALL_BIN) ./files/firewall.init $(1)/etc/init.d/firewall`
			`$(INSTALL_DIR) $(1)/etc/hotplug.d/iface`
			`$(INSTALL_DATA) ./files/firewall.hotplug $(1)/etc/hotplug.d/iface/20-firewall`
firewall3: add default config and firewall.user SVN-Revision: 35889 2013-03-05 13:45:09 +00:00			`$(INSTALL_DIR) $(1)/etc/config/`
			`$(INSTALL_DATA) ./files/firewall.config $(1)/etc/config/firewall`
			`$(INSTALL_DIR) $(1)/etc/`
			`$(INSTALL_DATA) ./files/firewall.user $(1)/etc/firewall.user`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 19:26:52 +00:00			`endef`

firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838 2013-06-04 12:21:52 +00:00			`$(eval $(call BuildPackage,firewall))`