aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLuka Perkov <luka.perkov@sartura.hr>2016-10-09 21:00:58 +0200
committerGitHub <noreply@github.com>2016-10-09 21:00:58 +0200
commit73637d4c7ee7d86352201884bf14cdd857316604 (patch)
tree3e2746bf619ef2a63116eca3332e8139fa4d09be
parent523c36dc04e4fd9558f58bcfb984f9159df7d9c4 (diff)
parentc2d29a51e51559c277698bc34cf98bd70941ec34 (diff)
downloadmaster-187ad058-73637d4c7ee7d86352201884bf14cdd857316604.tar.gz
master-187ad058-73637d4c7ee7d86352201884bf14cdd857316604.tar.bz2
master-187ad058-73637d4c7ee7d86352201884bf14cdd857316604.zip
Merge pull request #120 from sartura/iptables-add-CHECKSUM
netfilter,iptables: add optional CHECKSUM module
-rw-r--r--include/netfilter.mk4
-rw-r--r--package/kernel/linux/modules/netfilter.mk17
-rw-r--r--package/network/utils/iptables/Makefile10
3 files changed, 31 insertions, 0 deletions
diff --git a/include/netfilter.mk b/include/netfilter.mk
index c8e6a8b239..0a921f5d1c 100644
--- a/include/netfilter.mk
+++ b/include/netfilter.mk
@@ -262,6 +262,10 @@ $(eval $(if $(NF_KMOD),$(call nf_add,IPT_TEE,CONFIG_NF_DUP_IPV6, $(P_V6)nf_dup_i
$(eval $(call nf_add,IPT_U32,CONFIG_NETFILTER_XT_MATCH_U32, $(P_XT)xt_u32))
+# checksum
+
+$(eval $(call nf_add,IPT_CHECKSUM,CONFIG_NETFILTER_XT_TARGET_CHECKSUM, $(P_XT)xt_CHECKSUM))
+
# netlink
diff --git a/package/kernel/linux/modules/netfilter.mk b/package/kernel/linux/modules/netfilter.mk
index 353de3e45b..55c6df514f 100644
--- a/package/kernel/linux/modules/netfilter.mk
+++ b/package/kernel/linux/modules/netfilter.mk
@@ -508,6 +508,23 @@ endef
$(eval $(call KernelPackage,ipt-u32))
+define KernelPackage/ipt-checksum
+ TITLE:=CHECKSUM support
+ KCONFIG:= \
+ CONFIG_NETFILTER_XT_TARGET_CHECKSUM
+ FILES:= \
+ $(LINUX_DIR)/net/netfilter/xt_CHECKSUM.ko \
+ $(foreach mod,$(IPT_CHECKSUM-m),$(LINUX_DIR)/net/$(mod).ko)
+ AUTOLOAD:=$(call AutoProbe,$(notdir $(IPT_CHECKSUM-m)))
+ $(call AddDepends/ipt)
+endef
+
+define KernelPackage/ipt-checksum/description
+ Kernel modules for CHECKSUM fillin target
+endef
+
+$(eval $(call KernelPackage,ipt-checksum))
+
define KernelPackage/ipt-iprange
TITLE:=Module for matching ip ranges
diff --git a/package/network/utils/iptables/Makefile b/package/network/utils/iptables/Makefile
index 6f7529c736..70c744f5cf 100644
--- a/package/network/utils/iptables/Makefile
+++ b/package/network/utils/iptables/Makefile
@@ -355,6 +355,15 @@ U32 iptables extensions.
endef
+define Package/iptables-mod-checksum
+$(call Package/iptables/Module, +kmod-ipt-checksum)
+ TITLE:=IP CHECKSUM target extension
+endef
+
+define Package/iptables-mod-checksum/description
+iptables extension for the CHECKSUM calculation target
+endef
+
define Package/ip6tables
$(call Package/iptables/Default)
DEPENDS:=@IPV6 +kmod-ip6tables +iptables
@@ -549,6 +558,7 @@ $(eval $(call BuildPlugin,iptables-mod-tee,$(IPT_TEE-m)))
$(eval $(call BuildPlugin,iptables-mod-u32,$(IPT_U32-m)))
$(eval $(call BuildPlugin,iptables-mod-nflog,$(IPT_NFLOG-m)))
$(eval $(call BuildPlugin,iptables-mod-nfqueue,$(IPT_NFQUEUE-m)))
+$(eval $(call BuildPlugin,iptables-mod-checksum,$(IPT_CHECKSUM-m)))
$(eval $(call BuildPackage,ip6tables))
$(eval $(call BuildPlugin,ip6tables-extra,$(IPT_IPV6_EXTRA-m)))
$(eval $(call BuildPlugin,ip6tables-mod-nat,$(IPT_NAT6-m)))