opnsense-src/sys/modules/ipfw/Makefile

# $FreeBSD$

.include <bsd.own.mk>

.PATH: ${.CURDIR}/../../netinet/ipfw

KMOD=	ipfw
SRCS=	ip_fw2.c ip_fw_pfil.c
SRCS+=	ip_fw_dynamic.c ip_fw_log.c
SRCS+=	ip_fw_sockopt.c ip_fw_table.c
SRCS+=	opt_inet6.h opt_ipsec.h

CFLAGS+= -DIPFIREWALL
CFLAGS+= -I${.CURDIR}/../../contrib/pf
#
#If you want it verbose
#CFLAGS+= -DIPFIREWALL_VERBOSE
#CFLAGS+= -DIPFIREWALL_VERBOSE_LIMIT=100
#
#If you want it to pass all packets by default
#CFLAGS+= -DIPFIREWALL_DEFAULT_TO_ACCEPT
#

.if !defined(KERNBUILDDIR)
.if ${MK_INET6_SUPPORT} != "no"
opt_inet6.h:
	echo "#define INET6 1" > ${.TARGET}
.endif
.endif

.include <bsd.kmod.mk>
$Id$ -> $FreeBSD$ 1999-08-27 21:08:13 -04:00			`# $FreeBSD$`
Firewall can be used as lkm module.To use it firewall should NOT be compiled into kernel. Then it can be loaded.This is misc module but i'v got no problemms with it,so shouldn't you i suppose.. BTW this is very stupid to have one module in CVS for ALL lkm's... 1995-01-12 08:03:02 -05:00
Reimplementation of world/kernel build options. For details, see: http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html The src.conf(5) manpage is to follow in a few days. Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine) 2006-03-17 13:54:44 -05:00			`.include <bsd.own.mk>`

move kernel ipfw-related sources to a separate directory, adjust conf/files and modules' Makefiles accordingly. No code or ABI changes so this and most of previous related changes can be easily MFC'ed MFC after: 5 days 2009-06-05 15:22:47 -04:00			`.PATH: ${.CURDIR}/../../netinet/ipfw`
Use a consistent style and one much closer to the rest of /usr/src 2001-01-06 09:00:42 -05:00
Sample initial set of kld-ified modules. Not all have been completely converted yet. These are more of a starting point. This is NOT connected to the parent Makefile. OK'ed by jkh (who is ever so patiently waiting) 1998-10-16 00:30:52 -04:00			`KMOD= ipfw`
Revert the last change to sys/modules/ipfw/Makefile and fix a standalone module build in a better way. Silence from: andre MFC after: 3 days 2004-08-26 10:18:30 -04:00			`SRCS= ip_fw2.c ip_fw_pfil.c`
Do not build ip_fw_nat.c for ipfw.ko. It can be build as separate module. MFC after: 1 week 2011-03-29 02:42:52 -04:00			`SRCS+= ip_fw_dynamic.c ip_fw_log.c`
Now that ipfw is split into multiple files, we need to list them all in the Makefile for the module, otherwise it won't load due to missing symbols. The problem only affected head with ipfw built as a module. Reported by David Horn 2009-12-17 12:44:34 -05:00			`SRCS+= ip_fw_sockopt.c ip_fw_table.c`
After r193232 rt_tables in vnet.h are no longer indirectly dependent on the ROUTETABLES kernel option thus there is no need to include opt_route.h anymore in all consumers of vnet.h and no longer depend on it for module builds. Remove the hidden include in flowtable.h as well and leave the two explicit #includes in ip_input.c and ip_output.c. 2009-06-08 15:57:35 -04:00			`SRCS+= opt_inet6.h opt_ipsec.h`
Use a consistent style and one much closer to the rest of /usr/src 2001-01-06 09:00:42 -05:00
No need to use a magic IPFIREWALL_MODULE - the build system supplies one already we can test for. 1999-04-20 10:31:23 -04:00			`CFLAGS+= -DIPFIREWALL`
Link pf 4.1 to the build: - move ftp-proxy from libexec to usr.sbin - add tftp-proxy - new altq mtag link Approved by: re (kensmith) 2007-07-03 08:46:08 -04:00			`CFLAGS+= -I${.CURDIR}/../../contrib/pf`
Firewall can be used as lkm module.To use it firewall should NOT be compiled into kernel. Then it can be loaded.This is misc module but i'v got no problemms with it,so shouldn't you i suppose.. BTW this is very stupid to have one module in CVS for ALL lkm's... 1995-01-12 08:03:02 -05:00			`#`
Checking new lkm structure.. 1995-01-12 08:57:51 -05:00			`#If you want it verbose`
Firewall can be used as lkm module.To use it firewall should NOT be compiled into kernel. Then it can be loaded.This is misc module but i'v got no problemms with it,so shouldn't you i suppose.. BTW this is very stupid to have one module in CVS for ALL lkm's... 1995-01-12 08:03:02 -05:00			`#CFLAGS+= -DIPFIREWALL_VERBOSE`
Use IPFIREWALL_MODULE instead of ACTUALLY_LKM_NOT_KERNEL to indicate LKM'ness. ACTUALLY_LKM_NOT_KERNEL is supposed to be so ugly that it only gets used until <machine/conf.h> goes away. bsd.kmod.mk should define a better-named general macro for this. Some places use PSEUDO_LKM. This is another bad name. Makefile: Added IPFIREWALL_VERBOSE_LIMIT option (commented out). 1996-06-23 10:28:02 -04:00			`#CFLAGS+= -DIPFIREWALL_VERBOSE_LIMIT=100`
Firewall can be used as lkm module.To use it firewall should NOT be compiled into kernel. Then it can be loaded.This is misc module but i'v got no problemms with it,so shouldn't you i suppose.. BTW this is very stupid to have one module in CVS for ALL lkm's... 1995-01-12 08:03:02 -05:00			`#`
Add example for IPFIREWALL_DEFAULT_TO_ACCEPT 1997-09-10 00:19:07 -04:00			`#If you want it to pass all packets by default`
			`#CFLAGS+= -DIPFIREWALL_DEFAULT_TO_ACCEPT`
			`#`
Firewall can be used as lkm module.To use it firewall should NOT be compiled into kernel. Then it can be loaded.This is misc module but i'v got no problemms with it,so shouldn't you i suppose.. BTW this is very stupid to have one module in CVS for ALL lkm's... 1995-01-12 08:03:02 -05:00
obey opt_inet6.h and opt_ipsec.h in kernel build directory. Requested by: hrs 2005-11-29 12:56:11 -05:00			`.if !defined(KERNBUILDDIR)`
Reimplementation of world/kernel build options. For details, see: http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html The src.conf(5) manpage is to follow in a few days. Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine) 2006-03-17 13:54:44 -05:00			`.if ${MK_INET6_SUPPORT} != "no"`
obey opt_inet6.h and opt_ipsec.h in kernel build directory. Requested by: hrs 2005-11-29 12:56:11 -05:00			`opt_inet6.h:`
			`echo "#define INET6 1" > ${.TARGET}`
			`.endif`
			`.endif`

Use .include <bsd.kmod.mk> to get to ../../*/conf/kmod.mk instead of encoding the relative path. 2000-05-26 21:14:33 -04:00			`.include <bsd.kmod.mk>`