Change Details
| include/netfilter.mk |
| 277 | 277 | $(eval $(call nf_add,IPT_ULOG,CONFIG_IP_NF_TARGET_ULOG, $(P_V4)ipt_ULOG)) |
| 278 | 278 | |
| 279 | 279 | |
| 280 | # tproxy |
| 281 | |
| 282 | $(eval $(call nf_add,IPT_TPROXY,CONFIG_NETFILTER_XT_MATCH_SOCKET, $(P_XT)xt_socket)) |
| 283 | $(eval $(call nf_add,IPT_TPROXY,CONFIG_NETFILTER_XT_TARGET_TPROXY, $(P_XT)xt_TPROXY)) |
| 284 | |
| 285 | |
| 280 | 286 | # |
| 281 | 287 | # ebtables |
| 282 | 288 | # |
| ... | ... | |
| 329 | 335 | IPT_BUILTIN += $(IPT_NATHELPER-y) |
| 330 | 336 | IPT_BUILTIN += $(IPT_NATHELPER_EXTRA-y) |
| 331 | 337 | IPT_BUILTIN += $(IPT_ULOG-y) |
| 338 | IPT_BUILTIN += $(IPT_TPROXY-y) |
| 332 | 339 | IPT_BUILTIN += $(EBTABLES-y) |
| 333 | 340 | IPT_BUILTIN += $(EBTABLES_IP4-y) |
| 334 | 341 | IPT_BUILTIN += $(EBTALTES_IP6-y) |
| package/iptables/Makefile |
| 214 | 214 | - libipt_recent |
| 215 | 215 | endef |
| 216 | 216 | |
| 217 | define Package/iptables-mod-tproxy |
| 218 | $(call Package/iptables/Module, +kmod-ipt-tproxy) |
| 219 | TITLE:=Transparent proxy iptables extensions |
| 220 | endef |
| 221 | |
| 222 | define Package/iptables-mod-tproxy/description |
| 223 | Transparent proxy iptables extensions. |
| 224 | Includes: |
| 225 | - libxt_socket |
| 226 | - libxt_TPROXY |
| 227 | endef |
| 228 | |
| 229 | |
| 217 | 230 | define Package/iptables-utils |
| 218 | 231 | $(call Package/iptables/Module, ) |
| 219 | 232 | TITLE:=iptables save and restore utilities |
| ... | ... | |
| 380 | 393 | $(eval $(call BuildPlugin,iptables-mod-nat-extra,$(IPT_NAT_EXTRA-m))) |
| 381 | 394 | $(eval $(call BuildPlugin,iptables-mod-iprange,$(IPT_IPRANGE-m))) |
| 382 | 395 | $(eval $(call BuildPlugin,iptables-mod-ulog,$(IPT_ULOG-m))) |
| 396 | $(eval $(call BuildPlugin,iptables-mod-tproxy,$(IPT_TPROXY-m))) |
| 383 | 397 | $(eval $(call BuildPackage,ip6tables)) |
| 384 | 398 | $(eval $(call BuildPackage,ip6tables-utils)) |
| 385 | 399 | $(eval $(call BuildPackage,libiptc)) |
| package/kernel/modules/netfilter.mk |
| 283 | 283 | $(eval $(call KernelPackage,ipt-ulog)) |
| 284 | 284 | |
| 285 | 285 | |
| 286 | define KernelPackage/ipt-tproxy |
| 287 | TITLE:=Transparent proxying support |
| 288 | DEPENDS:=@LINUX_2_6 |
| 289 | KCONFIG:= \ |
| 290 | CONFIG_NETFILTER_TPROXY \ |
| 291 | CONFIG_NETFILTER_XT_MATCH_SOCKET \ |
| 292 | CONFIG_NETFILTER_XT_TARGET_TPROXY |
| 293 | FILES:= \ |
| 294 | $(LINUX_DIR)/net/netfilter/nf_tproxy_core.$(LINUX_KMOD_SUFFIX) \ |
| 295 | $(foreach mod,$(IPT_TPROXY-m),$(LINUX_DIR)/net/$(mod).$(LINUX_KMOD_SUFFIX)) |
| 296 | AUTOLOAD:=$(call AutoLoad,45,$(notdir nf_tproxy_core $(IPT_TPROXY-m))) |
| 297 | $(call AddDepends/ipt) |
| 298 | endef |
| 299 | |
| 300 | define KernelPackage/ipt-tproxy/description |
| 301 | Kernel modules for Transparent Proxying |
| 302 | endef |
| 303 | |
| 304 | $(eval $(call KernelPackage,ipt-tproxy)) |
| 305 | |
| 306 | |
| 286 | 307 | define KernelPackage/ipt-iprange |
| 287 | 308 | TITLE:=Module for matching ip ranges |
| 288 | 309 | KCONFIG:=$(KCONFIG_IPT_IPRANGE) |
| target/linux/generic-2.6/config-2.6.25 |
| 971 | 971 | # CONFIG_NETFILTER_XT_MATCH_STATE is not set |
| 972 | 972 | # CONFIG_NETFILTER_XT_MATCH_STATISTIC is not set |
| 973 | 973 | # CONFIG_NETFILTER_XT_MATCH_STRING is not set |
| 974 | # CONFIG_NETFILTER_XT_MATCH_SOCKET is not set |
| 974 | 975 | # CONFIG_NETFILTER_XT_MATCH_TCPMSS is not set |
| 975 | 976 | # CONFIG_NETFILTER_XT_MATCH_TIME is not set |
| 976 | 977 | # CONFIG_NETFILTER_XT_MATCH_U32 is not set |
| ... | ... | |
| 984 | 985 | # CONFIG_NETFILTER_XT_TARGET_RATEEST is not set |
| 985 | 986 | # CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set |
| 986 | 987 | # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set |
| 988 | # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set |
| 987 | 989 | # CONFIG_NETFILTER_XT_TARGET_TRACE is not set |
| 988 | 990 | CONFIG_NETFILTER=y |
| 989 | 991 | CONFIG_NET_IPGRE_BROADCAST=y |
| target/linux/generic-2.6/config-2.6.30 |
| 1356 | 1356 | # CONFIG_NETFILTER_XT_MATCH_STATE is not set |
| 1357 | 1357 | # CONFIG_NETFILTER_XT_MATCH_STATISTIC is not set |
| 1358 | 1358 | # CONFIG_NETFILTER_XT_MATCH_STRING is not set |
| 1359 | # CONFIG_NETFILTER_XT_MATCH_SOCKET is not set |
| 1359 | 1360 | # CONFIG_NETFILTER_XT_MATCH_TCPMSS is not set |
| 1360 | 1361 | # CONFIG_NETFILTER_XT_MATCH_TIME is not set |
| 1361 | 1362 | # CONFIG_NETFILTER_XT_MATCH_U32 is not set |
| ... | ... | |
| 1372 | 1373 | # CONFIG_NETFILTER_XT_TARGET_RATEEST is not set |
| 1373 | 1374 | # CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set |
| 1374 | 1375 | # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set |
| 1376 | # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set |
| 1375 | 1377 | # CONFIG_NETFILTER_XT_TARGET_TRACE is not set |
| 1376 | 1378 | CONFIG_NETFILTER=y |
| 1377 | 1379 | CONFIG_NET_IPGRE_BROADCAST=y |
| target/linux/generic-2.6/config-2.6.31 |
| 1352 | 1352 | # CONFIG_NETFILTER_XT_MATCH_STATE is not set |
| 1353 | 1353 | # CONFIG_NETFILTER_XT_MATCH_STATISTIC is not set |
| 1354 | 1354 | # CONFIG_NETFILTER_XT_MATCH_STRING is not set |
| 1355 | # CONFIG_NETFILTER_XT_MATCH_SOCKET is not set |
| 1355 | 1356 | # CONFIG_NETFILTER_XT_MATCH_TCPMSS is not set |
| 1356 | 1357 | # CONFIG_NETFILTER_XT_MATCH_TIME is not set |
| 1357 | 1358 | # CONFIG_NETFILTER_XT_MATCH_U32 is not set |
| ... | ... | |
| 1368 | 1369 | # CONFIG_NETFILTER_XT_TARGET_RATEEST is not set |
| 1369 | 1370 | # CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set |
| 1370 | 1371 | # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set |
| 1372 | # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set |
| 1371 | 1373 | # CONFIG_NETFILTER_XT_TARGET_TRACE is not set |
| 1372 | 1374 | CONFIG_NETFILTER=y |
| 1373 | 1375 | CONFIG_NET_IPGRE_BROADCAST=y |
| target/linux/generic-2.6/config-2.6.32 |
| 1433 | 1433 | # CONFIG_NETFILTER_XT_MATCH_STATE is not set |
| 1434 | 1434 | # CONFIG_NETFILTER_XT_MATCH_STATISTIC is not set |
| 1435 | 1435 | # CONFIG_NETFILTER_XT_MATCH_STRING is not set |
| 1436 | # CONFIG_NETFILTER_XT_MATCH_SOCKET is not set |
| 1436 | 1437 | # CONFIG_NETFILTER_XT_MATCH_TCPMSS is not set |
| 1437 | 1438 | # CONFIG_NETFILTER_XT_MATCH_TIME is not set |
| 1438 | 1439 | # CONFIG_NETFILTER_XT_MATCH_U32 is not set |
| ... | ... | |
| 1449 | 1450 | # CONFIG_NETFILTER_XT_TARGET_RATEEST is not set |
| 1450 | 1451 | # CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set |
| 1451 | 1452 | # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set |
| 1453 | # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set |
| 1452 | 1454 | # CONFIG_NETFILTER_XT_TARGET_TRACE is not set |
| 1453 | 1455 | CONFIG_NETFILTER=y |
| 1454 | 1456 | CONFIG_NET_IPGRE_BROADCAST=y |
| target/linux/generic-2.6/config-2.6.33 |
| 1477 | 1477 | # CONFIG_NETFILTER_XT_MATCH_STATE is not set |
| 1478 | 1478 | # CONFIG_NETFILTER_XT_MATCH_STATISTIC is not set |
| 1479 | 1479 | # CONFIG_NETFILTER_XT_MATCH_STRING is not set |
| 1480 | # CONFIG_NETFILTER_XT_MATCH_SOCKET is not set |
| 1480 | 1481 | # CONFIG_NETFILTER_XT_MATCH_TCPMSS is not set |
| 1481 | 1482 | # CONFIG_NETFILTER_XT_MATCH_TIME is not set |
| 1482 | 1483 | # CONFIG_NETFILTER_XT_MATCH_U32 is not set |
| ... | ... | |
| 1493 | 1494 | # CONFIG_NETFILTER_XT_TARGET_RATEEST is not set |
| 1494 | 1495 | # CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set |
| 1495 | 1496 | # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set |
| 1497 | # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set |
| 1496 | 1498 | # CONFIG_NETFILTER_XT_TARGET_TRACE is not set |
| 1497 | 1499 | CONFIG_NETFILTER=y |
| 1498 | 1500 | CONFIG_NET_IPGRE_BROADCAST=y |
| target/linux/generic-2.6/config-2.6.34 |
| 1508 | 1508 | # CONFIG_NETFILTER_XT_MATCH_STATE is not set |
| 1509 | 1509 | # CONFIG_NETFILTER_XT_MATCH_STATISTIC is not set |
| 1510 | 1510 | # CONFIG_NETFILTER_XT_MATCH_STRING is not set |
| 1511 | # CONFIG_NETFILTER_XT_MATCH_SOCKET is not set |
| 1511 | 1512 | # CONFIG_NETFILTER_XT_MATCH_TCPMSS is not set |
| 1512 | 1513 | # CONFIG_NETFILTER_XT_MATCH_TIME is not set |
| 1513 | 1514 | # CONFIG_NETFILTER_XT_MATCH_U32 is not set |
| ... | ... | |
| 1524 | 1525 | # CONFIG_NETFILTER_XT_TARGET_RATEEST is not set |
| 1525 | 1526 | # CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set |
| 1526 | 1527 | # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set |
| 1528 | # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set |
| 1527 | 1529 | # CONFIG_NETFILTER_XT_TARGET_TRACE is not set |
| 1528 | 1530 | CONFIG_NETFILTER=y |
| 1529 | 1531 | CONFIG_NET_IPGRE_BROADCAST=y |
| target/linux/generic-2.6/config-2.6.35 |
| 1535 | 1535 | # CONFIG_NETFILTER_XT_MATCH_STATE is not set |
| 1536 | 1536 | # CONFIG_NETFILTER_XT_MATCH_STATISTIC is not set |
| 1537 | 1537 | # CONFIG_NETFILTER_XT_MATCH_STRING is not set |
| 1538 | # CONFIG_NETFILTER_XT_MATCH_SOCKET is not set |
| 1538 | 1539 | # CONFIG_NETFILTER_XT_MATCH_TCPMSS is not set |
| 1539 | 1540 | # CONFIG_NETFILTER_XT_MATCH_TIME is not set |
| 1540 | 1541 | # CONFIG_NETFILTER_XT_MATCH_U32 is not set |
| ... | ... | |
| 1552 | 1553 | # CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set |
| 1553 | 1554 | # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set |
| 1554 | 1555 | # CONFIG_NETFILTER_XT_TARGET_TEE is not set |
| 1556 | # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set |
| 1555 | 1557 | # CONFIG_NETFILTER_XT_TARGET_TRACE is not set |
| 1556 | 1558 | CONFIG_NETFILTER=y |
| 1557 | 1559 | CONFIG_NET_IPGRE_BROADCAST=y |
Download the corresponding diff file