ExternalVendorCode/openwrt
1
0
Fork 0
mirror of https://github.com/openwrt/openwrt.git synced 2024-12-20 06:08:08 +00:00
Code Issues Actions 4 Packages Projects Releases Wiki Activity
ba7da73680
openwrt/package/network/config/firewall/Makefile

65 lines
2.0 KiB
Makefile
Raw Normal View History

firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
#
firewall: drop invalid by default, remove chain indirection, fix invert flags (#21738) * Enable drop_invalid by default to catch unnatted packets (#21738) * Fix processing of inversions for -i, -o, -s, -d and -p flags * Remove delegate_* chain indirection but rely on xt_id to identify own rules Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 48551
2016-01-29 17:26:41 +00:00
# Copyright (C) 2013-2016 OpenWrt.org
firewall3: fix mark rules for local traffic, fix race condition Update to latest HEAD in order to fix MARK rule generation for local traffic, also fix a possible race condition during firewall start. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-05-02 17:46:23 +00:00
# Copyright (C) 2016 LEDE project
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
PKG_NAME:=firewall
firewall: config: remove restictions on DHCPv6 allow rule Remove restrictions on source and destination addresses, which aren't specified on RFC8415, and for some reason in openwrt are configured to allow both link-local and ULA addresses. As cleared out in issue #5066 there are some ISPs that use Gloabal Unicast addresses, so fix this rule to allow them. Fixes: #5066 Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com> [rebase onto firewall3, clarify subject, bump PKG_RELEASE] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2022-05-04 09:36:07 +00:00
PKG_RELEASE:=3
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
PKG_SOURCE_PROTO:=git
package/: fix $(PROJECT_GIT) usage Signed-off-by: John Crispin <john@phrozen.org>
2018-10-11 06:37:59 +00:00
PKG_SOURCE_URL=$(PROJECT_GIT)/project/firewall3.git
firewall3: bump to latest git HEAD 4cd7d4f Revert "firewall3: support table load on access on Linux 5.15+" 50979cc firewall3: remove unnecessary fw3_has_table Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-02-25 13:54:36 +00:00
PKG_SOURCE_DATE:=2022-02-17
PKG_SOURCE_VERSION:=4cd7d4f36bea731bf901cb067456f1d460294926
firewall3: update file hash the hash and timestamp of the remote copy of the archive has changed since last bump meaning the remote archive copy was recreated Signed-off-by: Michael Pratt <mcpratt@pm.me>
2022-07-12 00:35:38 +00:00
PKG_MIRROR_HASH:=ce9e8ac1bcf22afbb0a80c3da1a8e8e887851299681097e3dfbfc347f2c4c80f
firewall3: fix mark rules for local traffic, fix race condition Update to latest HEAD in order to fix MARK rule generation for local traffic, also fix a possible race condition during firewall start. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-05-02 17:46:23 +00:00
PKG_MAINTAINER:=Jo-Philipp Wich <jo@mein.io>
Add a few SPDX tags Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 43151
2014-11-02 12:20:54 +00:00
PKG_LICENSE:=ISC
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
firewall: add CONFIG_IPV6 to PKG_CONFIG_DEPENDS to fix a rebuild error Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 48315
2016-01-18 13:21:37 +00:00
PKG_CONFIG_DEPENDS := CONFIG_IPV6
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/cmake.mk
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
define Package/firewall
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
SECTION:=net
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
CATEGORY:=Base system
TITLE:=OpenWrt C Firewall
iptables: move libiptext* to their own packages iptables-nft doesn't depend on libip{4,6}tc, so move libiptext* libs in their own packages to clean up dependencies Rename libxtables-nft to libiptext-nft Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2022-02-27 01:14:29 +00:00
DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libiptext +IPV6:libiptext6 +libxtables +kmod-ipt-core +kmod-ipt-conntrack +IPV6:kmod-nf-conntrack6 +kmod-ipt-nat
firewall/firewall4: provide uci-firewall Provide uci-firewall via PROVIDES in both firewall and firewall4. This will allow us to change the dependency of luci-app-firewall to uci-firewall, making it possible to use it with either implementation. Move CONFLICTS from firewall4 to firewall, to solve this recursive dependency problem: tmp/.config-package.in:307:error: recursive dependency detected! tmp/.config-package.in:307: symbol PACKAGE_firewall is selected by PACKAGE_firewall4 tmp/.config-package.in:328: symbol PACKAGE_firewall4 depends on PACKAGE_firewall Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> Reviewed-by: Jo-Philipp Wich <jo@mein.io>
2021-10-18 22:42:02 +00:00
PROVIDES:=uci-firewall
CONFLICTS:=firewall4
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
endef
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
define Package/firewall/description
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
This package provides a config-compatible C implementation of the UCI firewall.
endef
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
define Package/firewall/conffiles
firewall3: add default config and firewall.user SVN-Revision: 35889
2013-03-05 13:45:09 +00:00
/etc/config/firewall
/etc/firewall.user
endef
firewall: compile with LTO enabled Reduces .ipk size on MIPS from 41.6k to 41.1k Signed-off-by: Felix Fietkau <nbd@nbd.name>
2018-07-11 17:23:43 +00:00
TARGET_CFLAGS += -ffunction-sections -fdata-sections -flto
TARGET_LDFLAGS += -Wl,--gc-sections -flto
firewall3: update to git head - allows building without IPv6 support - uses more robust rules to cope with missing libext.a - uses better linking strategy to avoid symbol clashes with older iptables - introduces source compatiblity layer for different libxtables versions SVN-Revision: 36736
2013-05-27 15:13:19 +00:00
CMAKE_OPTIONS += $(if $(CONFIG_IPV6),,-DDISABLE_IPV6=1)
firewall3: update to git head * use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions * make ipset integration more reliable SVN-Revision: 36681
2013-05-21 10:15:14 +00:00
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
define Package/firewall/install
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
$(INSTALL_DIR) $(1)/sbin
firewall3: fix accidentally changed install directive SVN-Revision: 36840
2013-06-04 12:30:50 +00:00
$(INSTALL_BIN) $(PKG_BUILD_DIR)/firewall3 $(1)/sbin/fw3
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_BIN) ./files/firewall.init $(1)/etc/init.d/firewall
$(INSTALL_DIR) $(1)/etc/hotplug.d/iface
firewall: Install config files as 600 None of the files in firewall are used by non-root. Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-09-19 19:03:26 +00:00
$(INSTALL_CONF) ./files/firewall.hotplug $(1)/etc/hotplug.d/iface/20-firewall
firewall3: add default config and firewall.user SVN-Revision: 35889
2013-03-05 13:45:09 +00:00
$(INSTALL_DIR) $(1)/etc/config/
firewall: Install config files as 600 None of the files in firewall are used by non-root. Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-09-19 19:03:26 +00:00
$(INSTALL_CONF) ./files/firewall.config $(1)/etc/config/firewall
firewall3: add default config and firewall.user SVN-Revision: 35889
2013-03-05 13:45:09 +00:00
$(INSTALL_DIR) $(1)/etc/
firewall: Install config files as 600 None of the files in firewall are used by non-root. Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-09-19 19:03:26 +00:00
$(INSTALL_CONF) ./files/firewall.user $(1)/etc/firewall.user
firewall: bump to git HEAD 392811a ubus: let fw3_ubus_address() return the number of resolved addresses 359adcf options: emit an empty address item when resolving networks fails 503db4a zones: disable masq when resolving of all masq_src or masq_dest items failed f50a524 helpers: implement explicit CT helper assignment support a3ef503 zones: allow per-table log control 8ef12cb iptables: fix possible NULL pointer access on constructing rule masks Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2018-03-02 10:14:11 +00:00
$(INSTALL_DIR) $(1)/usr/share/fw3
firewall: Install config files as 600 None of the files in firewall are used by non-root. Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-09-19 19:03:26 +00:00
$(INSTALL_CONF) $(PKG_BUILD_DIR)/helpers.conf $(1)/usr/share/fw3
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
endef
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
$(eval $(call BuildPackage,firewall))
Reference in New Issue Copy Permalink