openwrt/package/network/config/firewall3/Makefile

#
# Copyright (C) 2013 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#

include $(TOPDIR)/rules.mk

PKG_NAME:=firewall3
PKG_VERSION:=2013-05-26
PKG_RELEASE:=$(PKG_SOURCE_VERSION)

PKG_SOURCE_PROTO:=git
PKG_SOURCE_URL:=git://nbd.name/firewall3.git
PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)
PKG_SOURCE_VERSION:=d2a8a3f6a29746a3a07d2e3415737bcc2241afce
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-$(PKG_SOURCE_VERSION).tar.gz
PKG_MAINTAINER:=Jo-Philipp Wich <jow@openwrt.org>


include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/kernel.mk
include $(INCLUDE_DIR)/cmake.mk

define Package/firewall3
  SECTION:=net
  CATEGORY:=Network
  TITLE:=UCI C Firewall
  DEPENDS:=+libubox +libubus +libuci +libip4tc +libip6tc +libxtables
endef

define Package/firewall3/description
 This package provides a config-compatible C implementation of the UCI firewall.
endef

define Package/firewall3/conffiles
/etc/config/firewall
/etc/firewall.user
endef

define Build/Compile
	$(CP) $(lastword $(wildcard $(KERNEL_BUILD_DIR)/iptables-*/extensions/libext.a)) $(PKG_BUILD_DIR)/libext.a
	$(CP) $(lastword $(wildcard $(KERNEL_BUILD_DIR)/iptables-*/extensions/libext4.a)) $(PKG_BUILD_DIR)/libext4.a
	$(CP) $(lastword $(wildcard $(KERNEL_BUILD_DIR)/iptables-*/extensions/libext6.a)) $(PKG_BUILD_DIR)/libext6.a
	$(call Build/Compile/Default)
endef

TARGET_CFLAGS += -ffunction-sections -fdata-sections
TARGET_LDFLAGS += -Wl,--gc-sections

define Package/firewall3/install
	$(INSTALL_DIR) $(1)/sbin
	$(INSTALL_BIN) $(PKG_BUILD_DIR)/firewall3 $(1)/sbin/fw3
	$(INSTALL_DIR) $(1)/etc/init.d
	$(INSTALL_BIN) ./files/firewall.init $(1)/etc/init.d/firewall
	$(INSTALL_DIR) $(1)/etc/hotplug.d/iface
	$(INSTALL_DATA) ./files/firewall.hotplug $(1)/etc/hotplug.d/iface/20-firewall
	$(INSTALL_DIR) $(1)/etc/config/
	$(INSTALL_DATA) ./files/firewall.config $(1)/etc/config/firewall
	$(INSTALL_DIR) $(1)/etc/
	$(INSTALL_DATA) ./files/firewall.user $(1)/etc/firewall.user
endef

$(eval $(call BuildPackage,firewall3))
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 20:26:52 +01:00			`#`
			`# Copyright (C) 2013 OpenWrt.org`
			`#`
			`# This is free software, licensed under the GNU General Public License v2.`
			`# See /LICENSE for more information.`
			`#`

			`include $(TOPDIR)/rules.mk`

			`PKG_NAME:=firewall3`
firewall3: update to git head - allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24" - automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust - properly support output rules with dest '*' to hook directly into delegate_output - fixes crash when processing rules with unresolved targets SVN-Revision: 36721 2013-05-26 17:48:04 +02:00			`PKG_VERSION:=2013-05-26`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 20:26:52 +01:00			`PKG_RELEASE:=$(PKG_SOURCE_VERSION)`

			`PKG_SOURCE_PROTO:=git`
			`PKG_SOURCE_URL:=git://nbd.name/firewall3.git`
			`PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)`
firewall3: update to git head - allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24" - automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust - properly support output rules with dest '*' to hook directly into delegate_output - fixes crash when processing rules with unresolved targets SVN-Revision: 36721 2013-05-26 17:48:04 +02:00			`PKG_SOURCE_VERSION:=d2a8a3f6a29746a3a07d2e3415737bcc2241afce`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 20:26:52 +01:00			`PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-$(PKG_SOURCE_VERSION).tar.gz`
			`PKG_MAINTAINER:=Jo-Philipp Wich <jow@openwrt.org>`


			`include $(INCLUDE_DIR)/package.mk`
firewall3: update to git head * use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions * make ipset integration more reliable SVN-Revision: 36681 2013-05-21 12:15:14 +02:00			`include $(INCLUDE_DIR)/kernel.mk`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 20:26:52 +01:00			`include $(INCLUDE_DIR)/cmake.mk`

			`define Package/firewall3`
			`SECTION:=net`
			`CATEGORY:=Network`
			`TITLE:=UCI C Firewall`
firewall3: update to git head * use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions * make ipset integration more reliable SVN-Revision: 36681 2013-05-21 12:15:14 +02:00			`DEPENDS:=+libubox +libubus +libuci +libip4tc +libip6tc +libxtables`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 20:26:52 +01:00			`endef`

			`define Package/firewall3/description`
			`This package provides a config-compatible C implementation of the UCI firewall.`
			`endef`

firewall3: add default config and firewall.user SVN-Revision: 35889 2013-03-05 14:45:09 +01:00			`define Package/firewall3/conffiles`
			`/etc/config/firewall`
			`/etc/firewall.user`
			`endef`

firewall3: move libext*.a copying to compile phase SVN-Revision: 36684 2013-05-21 14:58:36 +02:00			`define Build/Compile`
firewall3: update to git head * use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions * make ipset integration more reliable SVN-Revision: 36681 2013-05-21 12:15:14 +02:00			`$(CP) $(lastword $(wildcard $(KERNEL_BUILD_DIR)/iptables-*/extensions/libext.a)) $(PKG_BUILD_DIR)/libext.a`
			`$(CP) $(lastword $(wildcard $(KERNEL_BUILD_DIR)/iptables-*/extensions/libext4.a)) $(PKG_BUILD_DIR)/libext4.a`
			`$(CP) $(lastword $(wildcard $(KERNEL_BUILD_DIR)/iptables-*/extensions/libext6.a)) $(PKG_BUILD_DIR)/libext6.a`
firewall3: move libext*.a copying to compile phase SVN-Revision: 36684 2013-05-21 14:58:36 +02:00			`$(call Build/Compile/Default)`
firewall3: update to git head * use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions * make ipset integration more reliable SVN-Revision: 36681 2013-05-21 12:15:14 +02:00			`endef`

			`TARGET_CFLAGS += -ffunction-sections -fdata-sections`
firewall3: update to git head - fixes linking issues with some toolchains SVN-Revision: 36703 2013-05-24 14:49:06 +02:00			`TARGET_LDFLAGS += -Wl,--gc-sections`
firewall3: update to git head * use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions * make ipset integration more reliable SVN-Revision: 36681 2013-05-21 12:15:14 +02:00
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 20:26:52 +01:00			`define Package/firewall3/install`
			`$(INSTALL_DIR) $(1)/sbin`
			`$(INSTALL_BIN) $(PKG_BUILD_DIR)/firewall3 $(1)/sbin/fw3`
			`$(INSTALL_DIR) $(1)/etc/init.d`
			`$(INSTALL_BIN) ./files/firewall.init $(1)/etc/init.d/firewall`
			`$(INSTALL_DIR) $(1)/etc/hotplug.d/iface`
			`$(INSTALL_DATA) ./files/firewall.hotplug $(1)/etc/hotplug.d/iface/20-firewall`
firewall3: add default config and firewall.user SVN-Revision: 35889 2013-03-05 14:45:09 +01:00			`$(INSTALL_DIR) $(1)/etc/config/`
			`$(INSTALL_DATA) ./files/firewall.config $(1)/etc/config/firewall`
			`$(INSTALL_DIR) $(1)/etc/`
			`$(INSTALL_DATA) ./files/firewall.user $(1)/etc/firewall.user`
firewall3 - a C implementation of the current firewall scripts SVN-Revision: 35643 2013-02-17 20:26:52 +01:00			`endef`

			`$(eval $(call BuildPackage,firewall3))`