NetBSD/sys/modules/npf/Makefile

# $NetBSD: Makefile,v 1.5 2011/11/06 10:35:50 tron Exp $

.include "../Makefile.inc"

.PATH:		${S}/net/npf

KMOD=		npf

SRCS=		npf.c npf_alg.c npf_alg_icmp.c npf_ctl.c npf_handler.c
SRCS+=		npf_inet.c npf_instr.c npf_log.c npf_mbuf.c npf_nat.c
SRCS+=		npf_processor.c npf_ruleset.c npf_sendpkt.c npf_session.c
SRCS+=		npf_state.c npf_tableset.c

.include <bsd.kmodule.mk>
Update list of source files. 2011-11-06 14:35:50 +04:00			`# $NetBSD: Makefile,v 1.5 2011/11/06 10:35:50 tron Exp $`
Import NPF - a packet filter. Some features: - Designed to be fully MP-safe and highly efficient. - Tables/IP sets (hash or red-black tree) for high performance lookups. - Stateful filtering and Network Address Port Translation (NAPT). Framework for application level gateways (ALGs). - Packet inspection engine called n-code processor - inspired by BPF - supporting generic RISC-like and specific CISC-like instructions for common patterns (e.g. IPv4 address matching). See npf_ncode(9) manual. - Convenient userland utility npfctl(8) with npf.conf(8). NOTE: This is not yet a fully capable alternative to PF or IPFilter. Further work (support for binat/rdr, return-rst/return-icmp, common ALGs, state saving/restoring, logging, etc) is in progress. Thanks a lot to Matt Thomas for various useful comments and code review. Aye by: board@ 2010-08-22 22:56:18 +04:00
			`.include "../Makefile.inc"`

			`.PATH: ${S}/net/npf`

			`KMOD= npf`

Update list of source files. 2011-11-06 14:35:50 +04:00			`SRCS= npf.c npf_alg.c npf_alg_icmp.c npf_ctl.c npf_handler.c`
			`SRCS+= npf_inet.c npf_instr.c npf_log.c npf_mbuf.c npf_nat.c`
			`SRCS+= npf_processor.c npf_ruleset.c npf_sendpkt.c npf_session.c`
			`SRCS+= npf_state.c npf_tableset.c`
Import NPF - a packet filter. Some features: - Designed to be fully MP-safe and highly efficient. - Tables/IP sets (hash or red-black tree) for high performance lookups. - Stateful filtering and Network Address Port Translation (NAPT). Framework for application level gateways (ALGs). - Packet inspection engine called n-code processor - inspired by BPF - supporting generic RISC-like and specific CISC-like instructions for common patterns (e.g. IPv4 address matching). See npf_ncode(9) manual. - Convenient userland utility npfctl(8) with npf.conf(8). NOTE: This is not yet a fully capable alternative to PF or IPFilter. Further work (support for binat/rdr, return-rst/return-icmp, common ALGs, state saving/restoring, logging, etc) is in progress. Thanks a lot to Matt Thomas for various useful comments and code review. Aye by: board@ 2010-08-22 22:56:18 +04:00
			`.include <bsd.kmodule.mk>`