NetBSD/usr.sbin/npf/Makefile

# $NetBSD: Makefile,v 1.6 2017/01/07 17:27:02 christos Exp $

.include <bsd.own.mk>

SUBDIR=		npfctl npfd

.if ${MKRUMP} != "no" && ${MKPIC} != "no"
SUBDIR+=	npftest
.endif

MAN=		npf.7

.include <bsd.man.mk>
.include <bsd.subdir.mk>
descend to npfd 2017-01-07 20:27:02 +03:00			`# $NetBSD: Makefile,v 1.6 2017/01/07 17:27:02 christos Exp $`
Import NPF - a packet filter. Some features: - Designed to be fully MP-safe and highly efficient. - Tables/IP sets (hash or red-black tree) for high performance lookups. - Stateful filtering and Network Address Port Translation (NAPT). Framework for application level gateways (ALGs). - Packet inspection engine called n-code processor - inspired by BPF - supporting generic RISC-like and specific CISC-like instructions for common patterns (e.g. IPv4 address matching). See npf_ncode(9) manual. - Convenient userland utility npfctl(8) with npf.conf(8). NOTE: This is not yet a fully capable alternative to PF or IPFilter. Further work (support for binat/rdr, return-rst/return-icmp, common ALGs, state saving/restoring, logging, etc) is in progress. Thanks a lot to Matt Thomas for various useful comments and code review. Aye by: board@ 2010-08-22 22:56:18 +04:00
Allow build with MKRUMP=no. 2012-09-12 23:20:37 +04:00			`.include <bsd.own.mk>`

descend to npfd 2017-01-07 20:27:02 +03:00			`SUBDIR= npfctl npfd`
Allow build with MKRUMP=no. 2012-09-12 23:20:37 +04:00
Do not build npftest without shared libraries - it can't work. 2012-09-14 01:02:50 +04:00			`.if ${MKRUMP} != "no" && ${MKPIC} != "no"`
Allow build with MKRUMP=no. 2012-09-12 23:20:37 +04:00			`SUBDIR+= npftest`
			`.endif`
Import NPF - a packet filter. Some features: - Designed to be fully MP-safe and highly efficient. - Tables/IP sets (hash or red-black tree) for high performance lookups. - Stateful filtering and Network Address Port Translation (NAPT). Framework for application level gateways (ALGs). - Packet inspection engine called n-code processor - inspired by BPF - supporting generic RISC-like and specific CISC-like instructions for common patterns (e.g. IPv4 address matching). See npf_ncode(9) manual. - Convenient userland utility npfctl(8) with npf.conf(8). NOTE: This is not yet a fully capable alternative to PF or IPFilter. Further work (support for binat/rdr, return-rst/return-icmp, common ALGs, state saving/restoring, logging, etc) is in progress. Thanks a lot to Matt Thomas for various useful comments and code review. Aye by: board@ 2010-08-22 22:56:18 +04:00
NPF: add a general npf(7) manual page. Improved by wiz@. 2014-08-03 03:57:40 +04:00			`MAN= npf.7`

			`.include <bsd.man.mk>`
Import NPF - a packet filter. Some features: - Designed to be fully MP-safe and highly efficient. - Tables/IP sets (hash or red-black tree) for high performance lookups. - Stateful filtering and Network Address Port Translation (NAPT). Framework for application level gateways (ALGs). - Packet inspection engine called n-code processor - inspired by BPF - supporting generic RISC-like and specific CISC-like instructions for common patterns (e.g. IPv4 address matching). See npf_ncode(9) manual. - Convenient userland utility npfctl(8) with npf.conf(8). NOTE: This is not yet a fully capable alternative to PF or IPFilter. Further work (support for binat/rdr, return-rst/return-icmp, common ALGs, state saving/restoring, logging, etc) is in progress. Thanks a lot to Matt Thomas for various useful comments and code review. Aye by: board@ 2010-08-22 22:56:18 +04:00			`.include <bsd.subdir.mk>`