46 lines
1.6 KiB
Makefile
46 lines
1.6 KiB
Makefile
# SPDX-License-Identifier: GPL-2.0-only
|
|
# Copyright (c) 2018 Chion Tang <tech@chionlab.moe>
|
|
# Original xt_FULLCONENAT and related iptables extension author
|
|
# Copyright (c) 2019-2022 GitHub/llccd Twitter/@gNodeB
|
|
# Added IPv6 support for xt_FULLCONENAT and ip6tables extension
|
|
# Ported to recent kernel versions
|
|
# Copyright (c) 2022 Syrone Wong <wong.syrone@gmail.com>
|
|
# Massively rewrite the whole module, split the original code into library and nftables 'fullcone' expression module
|
|
|
|
include $(TOPDIR)/rules.mk
|
|
include $(INCLUDE_DIR)/kernel.mk
|
|
|
|
PKG_NAME:=nft-fullcone
|
|
PKG_RELEASE:=1
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
|
|
define KernelPackage/nft-fullcone
|
|
SUBMENU:=Netfilter Extensions
|
|
DEPENDS:=@IPV6 +kmod-nft-core +kmod-nf-conntrack +kmod-nf-conntrack6
|
|
TITLE:=nftables fullcone expression support
|
|
FILES:= $(PKG_BUILD_DIR)/nft_fullcone.ko
|
|
KCONFIG:= CONFIG_NFT_FULLCONE=y CONFIG_NF_NAT=y CONFIG_NF_NAT_IPV6=y CONFIG_NF_CONNTRACK_EVENTS=y CONFIG_NF_CONNTRACK_CHAIN_EVENTS=y
|
|
PROVIDES:=$(PKG_NAME)
|
|
AUTOLOAD:=$(call AutoProbe,nft_fullcone)
|
|
endef
|
|
|
|
define KernelPackage/nft-fullcone/Description
|
|
Kernel module adds the fullcone expression that you can use
|
|
to perform NAT in the RFC3489-compatible full cone SNAT flavour.
|
|
Currently only UDP traffic is supported for full-cone NAT.
|
|
For other protos FULLCONENAT is equivalent to MASQUERADE.
|
|
endef
|
|
|
|
# make use of all CPUs
|
|
define Build/Compile
|
|
+$(MAKE) $(PKG_JOBS) $(KERNEL_MAKEOPTS) \
|
|
M="$(PKG_BUILD_DIR)" \
|
|
EXTRA_CFLAGS="$(BUILDFLAGS)" \
|
|
$(if $(CONFIG_IPv6),EXTRA_CFLAGS+="-DCONFIG_SFE_ECM",) \
|
|
modules
|
|
|
|
endef
|
|
|
|
$(eval $(call KernelPackage,nft-fullcone))
|