domenico/openwrt_NSS_ACW
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

nftables: introduce experimental nftables

Browse Source 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 42598
This commit is contained in:
Steven Barth
2014-09-17 12:11:06 +00:00
parent 2f7d8539bd
commit 72e6e0b85b
2 changed files with 77 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

39
package/network/utils/nftables/Makefile Normal file
View File

@@ -0,0 +1,39 @@
# Copyright (C) 2014 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=nftables
PKG_VERSION:=0.3+2014-09-11
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)
PKG_SOURCE_URL:=git://git.netfilter.org/nftables
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=ae355b89e7b74c28de753bf2878a8e189030ad47
PKG_MAINTAINER:=Steven Barth <steven@midlink.org>
PKG_FIXUP:=autoreconf
include $(INCLUDE_DIR)/package.mk
define Package/nftables
SECTION:=net
CATEGORY:=Network
SUBMENU:=Firewall
TITLE:=nftables packet filtering userspace utility
DEPENDS:=+kmod-nft-core +kmod-nft-nat +libnftnl +libgmp
URL:=http://netfilter.org/projects/nftables/
endef
define Package/nftables/install
$(INSTALL_DIR) $(1)/usr/sbin
$(CP) $(PKG_BUILD_DIR)/src/nft $(1)/usr/sbin/
endef
$(eval $(call BuildPackage,nftables))

38
package/network/utils/nftables/patches/100-no-interactive.patch Normal file
View File

@@ -0,0 +1,38 @@
--- a/src/Makefile.in
+++ b/src/Makefile.in
@@ -3,7 +3,6 @@ PROGRAMS += nft
nft-destdir := @sbindir@
nft-obj += main.o
-nft-obj += cli.o
nft-obj += rule.o
nft-obj += statement.o
nft-obj += datatype.o
--- a/src/main.c
+++ b/src/main.c
@@ -334,7 +334,7 @@ int main(int argc, char * const *argv)
if (scanner_read_file(scanner, filename, &internal_location) < 0)
goto out;
} else if (interactive) {
- cli_init(&state);
+ fprintf(stderr, "%s: interactive mode not supported\n", argv[0]);
return 0;
} else {
fprintf(stderr, "%s: no command specified\n", argv[0]);
--- a/configure.ac
+++ b/configure.ac
@@ -71,13 +71,11 @@ AC_CHECK_LIB([nftnl], [nft_rule_alloc],
AC_CHECK_LIB([gmp], [__gmpz_init], ,
AC_MSG_ERROR([No suitable version of libgmp found]))
-AC_CHECK_LIB([readline], [readline], ,
- AC_MSG_ERROR([No suitable version of libreadline found]))
# Checks for header files.
AC_HEADER_STDC
AC_HEADER_ASSERT
-AC_CHECK_HEADERS([arpa/inet.h fcntl.h inttypes.h libintl.h limits.h malloc.h \
+AC_CHECK_HEADERS([arpa/inet.h fcntl.h inttypes.h limits.h malloc.h \
netdb.h netinet/in.h netinet/ip.h netinet/ip6.h \
netinet/tcp.h netinet/udp.h netinet/ip_icmp.h \
stddef.h stdint.h stdlib.h string.h unistd.h], ,