Move all to deprecated folder.
This commit is contained in:
@@ -0,0 +1,67 @@
|
||||
From 2f2fde48594ec34e93ab409cd83442efe58e10ad Mon Sep 17 00:00:00 2001
|
||||
From: Brendan Heading <brendanheading@gmail.com>
|
||||
Date: Mon, 31 Aug 2015 15:24:44 +0100
|
||||
Subject: [PATCH 3/3] fix build with musl
|
||||
|
||||
Add needed headers they are just not needed for glibc6+ but also
|
||||
for musl
|
||||
Define additional TCOPTS if not there
|
||||
|
||||
u_initX types are in sys/types.h be explicit about it
|
||||
|
||||
Upstream-Status: Pending
|
||||
|
||||
bh: this is a copy of the patch at the link below, modified to remove
|
||||
the changes to include/libiptc/ipt_kernel_headers.h as these are
|
||||
already integrated in the upstream tree. See :
|
||||
|
||||
http://lists.openembedded.org/pipermail/openembedded-core/2015-April/103613.html
|
||||
|
||||
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
||||
Signed-off-by: Brendan Heading <brendanheading@gmail.com>
|
||||
---
|
||||
extensions/libxt_TCPOPTSTRIP.c | 15 +++++++++++++++
|
||||
include/linux/netfilter_ipv4/ip_tables.h | 1 +
|
||||
2 files changed, 16 insertions(+)
|
||||
|
||||
diff --git a/extensions/libxt_TCPOPTSTRIP.c b/extensions/libxt_TCPOPTSTRIP.c
|
||||
index 6897857..8a170b2 100644
|
||||
--- a/extensions/libxt_TCPOPTSTRIP.c
|
||||
+++ b/extensions/libxt_TCPOPTSTRIP.c
|
||||
@@ -12,6 +12,21 @@
|
||||
#ifndef TCPOPT_MD5SIG
|
||||
# define TCPOPT_MD5SIG 19
|
||||
#endif
|
||||
+#ifndef TCPOPT_MAXSEG
|
||||
+# define TCPOPT_MAXSEG 2
|
||||
+#endif
|
||||
+#ifndef TCPOPT_WINDOW
|
||||
+# define TCPOPT_WINDOW 3
|
||||
+#endif
|
||||
+#ifndef TCPOPT_SACK_PERMITTED
|
||||
+# define TCPOPT_SACK_PERMITTED 4
|
||||
+#endif
|
||||
+#ifndef TCPOPT_SACK
|
||||
+# define TCPOPT_SACK 5
|
||||
+#endif
|
||||
+#ifndef TCPOPT_TIMESTAMP
|
||||
+# define TCPOPT_TIMESTAMP 8
|
||||
+#endif
|
||||
|
||||
enum {
|
||||
O_STRIP_OPTION = 0,
|
||||
diff --git a/include/linux/netfilter_ipv4/ip_tables.h b/include/linux/netfilter_ipv4/ip_tables.h
|
||||
index 57fd82a..4807246 100644
|
||||
--- a/include/linux/netfilter_ipv4/ip_tables.h
|
||||
+++ b/include/linux/netfilter_ipv4/ip_tables.h
|
||||
@@ -15,6 +15,7 @@
|
||||
#ifndef _IPTABLES_H
|
||||
#define _IPTABLES_H
|
||||
|
||||
+#include <sys/types.h>
|
||||
#include <linux/types.h>
|
||||
|
||||
#include <linux/netfilter_ipv4.h>
|
||||
--
|
||||
2.4.3
|
||||
|
||||
@@ -0,0 +1,39 @@
|
||||
From 4dc8e2aa91bd4151f7e5cd56d88d3731b4c1525e Mon Sep 17 00:00:00 2001
|
||||
From: Gustavo Zacarias <gustavo@zacarias.com.ar>
|
||||
Date: Wed, 30 Dec 2015 14:39:35 -0300
|
||||
Subject: [PATCH] iptables: add xtables-config-parser.h to BUILT_SOURCES
|
||||
|
||||
Otherwise other sources that use it might be built before it's ready leading
|
||||
to build failure, for example by iptables/nft.c
|
||||
|
||||
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
|
||||
---
|
||||
Status: sent upstream (mailing list, no link yet)
|
||||
|
||||
iptables/Makefile.am | 3 +++
|
||||
1 file changed, 3 insertions(+)
|
||||
|
||||
diff --git a/iptables/Makefile.am b/iptables/Makefile.am
|
||||
index 3c0faa5..c3eb8a8 100644
|
||||
--- a/iptables/Makefile.am
|
||||
+++ b/iptables/Makefile.am
|
||||
@@ -4,6 +4,8 @@ AM_CFLAGS = ${regular_CFLAGS}
|
||||
AM_CPPFLAGS = ${regular_CPPFLAGS} -I${top_builddir}/include -I${top_srcdir}/include ${kinclude_CPPFLAGS} ${libmnl_CFLAGS} ${libnftnl_CFLAGS} ${libnetfilter_conntrack_CFLAGS}
|
||||
AM_YFLAGS = -d
|
||||
|
||||
+BUILT_SOURCES =
|
||||
+
|
||||
xtables_multi_SOURCES = xtables-multi.c iptables-xml.c
|
||||
xtables_multi_CFLAGS = ${AM_CFLAGS}
|
||||
xtables_multi_LDADD = ../extensions/libext.a
|
||||
@@ -27,6 +29,7 @@ xtables_multi_LDADD += ../libxtables/libxtables.la -lm
|
||||
|
||||
# nftables compatibility layer
|
||||
if ENABLE_NFTABLES
|
||||
+BUILT_SOURCES += xtables-config-parser.h
|
||||
xtables_compat_multi_SOURCES = xtables-compat-multi.c iptables-xml.c
|
||||
xtables_compat_multi_CFLAGS = ${AM_CFLAGS}
|
||||
xtables_compat_multi_LDADD = ../extensions/libext.a ../extensions/libext_ebt.a
|
||||
--
|
||||
2.4.10
|
||||
|
||||
35
deprecated/firmware/buildroot/package/iptables/Config.in
Normal file
35
deprecated/firmware/buildroot/package/iptables/Config.in
Normal file
@@ -0,0 +1,35 @@
|
||||
config BR2_PACKAGE_IPTABLES
|
||||
bool "iptables"
|
||||
help
|
||||
Linux kernel firewall, NAT, and packet mangling tools.
|
||||
|
||||
http://www.netfilter.org/projects/iptables/index.html
|
||||
|
||||
if BR2_PACKAGE_IPTABLES
|
||||
|
||||
config BR2_PACKAGE_IPTABLES_BPF_NFSYNPROXY
|
||||
bool "bpfc and nfsynproxy"
|
||||
# this dependency can be removed when using a musl version
|
||||
# containing this commit:
|
||||
# http://git.musl-libc.org/cgit/musl/commit/?id=53f41fb568ae43034c9876cc9bd3961fd6d13671
|
||||
depends on !BR2_TOOLCHAIN_USES_MUSL
|
||||
select BR2_PACKAGE_LIBPCAP
|
||||
help
|
||||
Build bpf compiler and nfsynproxy configuration tool.
|
||||
|
||||
config BR2_PACKAGE_IPTABLES_NFTABLES
|
||||
bool "nftables compat"
|
||||
# uses dlfcn
|
||||
depends on !BR2_STATIC_LIBS
|
||||
depends on BR2_USE_WCHAR
|
||||
depends on BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_4
|
||||
select BR2_PACKAGE_LIBMNL
|
||||
select BR2_PACKAGE_LIBNFTNL
|
||||
help
|
||||
Build nftables compat utilities.
|
||||
|
||||
comment "nftables compat needs a toolchain w/ wchar, dynamic library, headers >= 3.4"
|
||||
depends on !BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_4 || \
|
||||
!BR2_USE_WCHAR || BR2_STATIC_LIBS
|
||||
|
||||
endif
|
||||
@@ -0,0 +1,3 @@
|
||||
# From ftp://ftp.netfilter.org/pub/iptables/iptables-1.6.0.tar.bz2.{md5sum,sha1sum}
|
||||
md5 27ba3451cb622467fc9267a176f19a31 iptables-1.6.0.tar.bz2
|
||||
sha1 21a694e75b0d6863cc001f85fb15915d12b8cc22 iptables-1.6.0.tar.bz2
|
||||
52
deprecated/firmware/buildroot/package/iptables/iptables.mk
Normal file
52
deprecated/firmware/buildroot/package/iptables/iptables.mk
Normal file
@@ -0,0 +1,52 @@
|
||||
################################################################################
|
||||
#
|
||||
# iptables
|
||||
#
|
||||
################################################################################
|
||||
|
||||
IPTABLES_VERSION = 1.6.0
|
||||
IPTABLES_SOURCE = iptables-$(IPTABLES_VERSION).tar.bz2
|
||||
IPTABLES_SITE = http://ftp.netfilter.org/pub/iptables
|
||||
IPTABLES_INSTALL_STAGING = YES
|
||||
IPTABLES_DEPENDENCIES = host-pkgconf \
|
||||
$(if $(BR2_PACKAGE_LIBNETFILTER_CONNTRACK),libnetfilter_conntrack)
|
||||
IPTABLES_LICENSE = GPLv2
|
||||
IPTABLES_LICENSE_FILES = COPYING
|
||||
# Building static causes ugly warnings on some plugins
|
||||
IPTABLES_CONF_OPTS = --libexecdir=/usr/lib --with-kernel=$(STAGING_DIR)/usr \
|
||||
$(if $(BR2_STATIC_LIBS),,--disable-static)
|
||||
# For 0002-iptables-add-xtables-config-parser.h-to-BUILT_SOURCES.patch
|
||||
IPTABLES_AUTORECONF = YES
|
||||
|
||||
# For connlabel match
|
||||
ifeq ($(BR2_PACKAGE_LIBNETFILTER_CONNTRACK),y)
|
||||
IPTABLES_DEPENDENCIES += libnetfilter_conntrack
|
||||
endif
|
||||
|
||||
# For nfnl_osf
|
||||
ifeq ($(BR2_PACKAGE_LIBNFNETLINK),y)
|
||||
IPTABLES_DEPENDENCIES += libnfnetlink
|
||||
endif
|
||||
|
||||
# For iptables-compat tools
|
||||
ifeq ($(BR2_PACKAGE_IPTABLES_NFTABLES),y)
|
||||
IPTABLES_CONF_OPTS += --enable-nftables
|
||||
IPTABLES_DEPENDENCIES += host-bison host-flex libmnl libnftnl
|
||||
else
|
||||
IPTABLES_CONF_OPTS += --disable-nftables
|
||||
endif
|
||||
|
||||
# bpf compiler support and nfsynproxy tool
|
||||
ifeq ($(BR2_PACKAGE_IPTABLES_BPF_NFSYNPROXY),y)
|
||||
# libpcap is tricky for static-only builds and needs help
|
||||
ifeq ($(BR2_STATIC_LIBS),y)
|
||||
IPTABLES_LIBS_FOR_STATIC_LINK += `$(STAGING_DIR)/usr/bin/pcap-config --static --additional-libs`
|
||||
IPTABLES_CONF_OPTS += LIBS="$(IPTABLES_LIBS_FOR_STATIC_LINK)"
|
||||
endif
|
||||
IPTABLES_CONF_OPTS += --enable-bpf-compiler --enable-nfsynproxy
|
||||
IPTABLES_DEPENDENCIES += libpcap
|
||||
else
|
||||
IPTABLES_CONF_OPTS += --disable-bpf-compiler --disable-nfsynproxy
|
||||
endif
|
||||
|
||||
$(eval $(autotools-package))
|
||||
Reference in New Issue
Block a user