Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/sys/netinet/files.ipfilter

45 lines
2.3 KiB
Plaintext
Raw Normal View History

Build ip_sync.c with -Wno-error to avoid failing due to excessive stack usage.
2020-12-04 03:44:39 +03:00
# $NetBSD: files.ipfilter,v 1.16 2020/12/04 00:44:39 thorpej Exp $
Move netinet, netinet6, ipsec, and ipfilter config defns to netinet/files.ipfilter, etinet/files.netinet, netinet6/files.netinet6, and netinet6/files.netipsec. XXX There are still a few stragglers in conf/files, which are entangled with other network protocols.
2002-10-11 02:45:45 +04:00
defopt IPFILTER_DEFAULT_BLOCK
2005-03-26 21:08:42 +03:00
defflag opt_ipfilter.h IPFILTER_LOG # logging of ip packets
defflag opt_ipfilter.h IPFILTER_DEFAULT_BLOCK
Defopt the rest of the Ipfilter options and tunables. Per discussion with darrenr@ a year ago.
2010-10-03 00:07:39 +04:00
defflag opt_ipfilter.h IPFILTER_BPF # BPF opcodes in rules
defflag opt_ipfilter.h IPFILTER_CKSUM # check layer 4 checksums
defflag opt_ipfilter.h IPFILTER_COMPILED # support for compiled IPF rules
defflag opt_ipfilter.h IPFILTER_LOOKUP # support for ippool(8)
defflag opt_ipfilter.h IPFILTER_SCAN # scanning of packet contents
defflag opt_ipfilter.h IPFILTER_SYNC # synchronisation of state
add IPFILTER_COMPAT to kernel config options recognised for IPFilter
2010-04-18 01:44:05 +04:00
defflag opt_ipfilter.h IPFILTER_COMPAT # IPFilter version compat.
Move netinet, netinet6, ipsec, and ipfilter config defns to netinet/files.ipfilter, etinet/files.netinet, netinet6/files.netinet6, and netinet6/files.netipsec. XXX There are still a few stragglers in conf/files, which are entangled with other network protocols.
2002-10-11 02:45:45 +04:00
Defopt the rest of the Ipfilter options and tunables. Per discussion with darrenr@ a year ago.
2010-10-03 00:07:39 +04:00
defparam opt_ipfilter.h IPFILTER_LOGSIZE # size of logging buffer
defparam opt_ipfilter.h IPSTATE_MAX # maximum number of references to state table entry
defparam opt_ipfilter.h IPSTATE_SIZE # size of state hash table
defparam opt_ipfilter.h NAT_TABLE_MAX # maximum number of NAT state entries
defparam opt_ipfilter.h NAT_TABLE_SZ # size of NAT state hash table
defparam opt_ipfilter.h NAT_SIZE # size of nat rules hash table
defparam opt_ipfilter.h RDR_SIZE # size of rdr rules hash table
defparam opt_ipfilter.h HOSTMAP_SIZE # size of hostmap hash table
ipfilter depends on bpf_filter, not bpfilter (since the year 2000).
2010-01-24 17:25:57 +03:00
defpseudo ipfilter: ifnet, bpf_filter # XXX not really an ifnet
Move netinet, netinet6, ipsec, and ipfilter config defns to netinet/files.ipfilter, etinet/files.netinet, netinet6/files.netinet6, and netinet6/files.netipsec. XXX There are still a few stragglers in conf/files, which are entangled with other network protocols.
2002-10-11 02:45:45 +04:00
move back to 5.1.1 in the new place
2012-03-24 01:30:18 +04:00
file external/bsd/ipf/netinet/fil.c ipfilter
file external/bsd/ipf/netinet/ip_auth.c ipfilter
file external/bsd/ipf/netinet/ip_dstlist.c ipfilter
file external/bsd/ipf/netinet/ip_fil_netbsd.c ipfilter needs-flag
file external/bsd/ipf/netinet/ip_frag.c ipfilter
file external/bsd/ipf/netinet/ip_htable.c ipfilter
file external/bsd/ipf/netinet/ip_log.c ipfilter & ipfilter_log
file external/bsd/ipf/netinet/ip_lookup.c ipfilter
file external/bsd/ipf/netinet/ip_nat.c ipfilter
file external/bsd/ipf/netinet/ip_nat6.c ipfilter
file external/bsd/ipf/netinet/ip_pool.c ipfilter
file external/bsd/ipf/netinet/ip_proxy.c ipfilter
file external/bsd/ipf/netinet/ip_scan.c ipfilter & ipfilter_scan
file external/bsd/ipf/netinet/ip_state.c ipfilter
file external/bsd/ipf/netinet/ip_sync.c ipfilter
file external/bsd/ipf/netinet/ip_fil_compat.c ipfilter & ipfilter_compat
file external/bsd/ipf/netinet/radix_ipf.c ipfilter
Move ipf to sys/dist/ipf; Note that I followed the pattern used for pf. I think though that the files.ipfilter and Makefile glue should go to the dist directory, not like it is done now.
2004-10-01 19:24:45 +04:00
move back to 5.1.1 in the new place
2012-03-24 01:30:18 +04:00
makeoptions ipfilter CPPFLAGS+="-I$S/external/bsd/ipf"
Build ip_sync.c with -Wno-error to avoid failing due to excessive stack usage.
2020-12-04 03:44:39 +03:00
makeoptions ipfilter "CWARNFLAGS.ip_sync.c"+="-Wno-error"