freebsd-dev/sbin/ipfw/Makefile

# $FreeBSD$

.include <src.opts.mk>

PACKAGE=ipfw
PROG=	ipfw

LINKS=	${BINDIR}/ipfw ${BINDIR}/dnctl
MLINKS=	ipfw.8 dnctl.8

SRCS=	ipfw2.c dummynet.c ipv6.c main.c nat.c tables.c
SRCS+=	nat64clat.c nat64lsn.c nat64stl.c nptv6.c

.if ${MK_PF} != "no"
SRCS+=	altq.c
CFLAGS+=-DPF
.endif

LIBADD=	jail util
MAN=	ipfw.8

.include <bsd.prog.mk>

CWARNFLAGS+= -Wno-cast-align
Convert this Makefile to the usual style. 2000-10-06 11:18:11 +00:00			`# $FreeBSD$`
Submitted by: Whistle Communications (archie Cobbs) these are quite extensive additions to the ipfw code. they include a change to the API because the old method was broken, but the user view is kept the same. The new code allows a particular match to skip forward to a particular line number, so that blocks of rules can be used without checking all the intervening rules. There are also many more ways of rejecting connections especially TCP related, and many many more ... see the man page for a complete description. 1997-06-02 05:02:37 +00:00
Use src.opts.mk in preference to bsd.own.mk except where we need stuff from the latter. 2014-05-06 04:22:01 +00:00			`.include <src.opts.mk>`
Fix world build WITHOUT_PF. Sponsored by: Nginx, Inc. 2014-02-12 09:59:48 +00:00
Create packages for atm, ccdconfig, devd, ipf, ipfw, iscsi, natd, nandfs, pf, quotacheck, and routed. Add ping6 and rtsol to the runtime package. Sponsored by: The FreeBSD Foundation 2016-02-09 19:30:31 +00:00			`PACKAGE=ipfw`
Convert this Makefile to the usual style. 2000-10-06 11:18:11 +00:00			`PROG= ipfw`
ipfw: Introduce dnctl Introduce a link to the ipfw command, dnctl, for dummynet configuration. dnctl only handles dummynet configuration, and is part of the effort to support dummynet in pf. /sbin/ipfw continues to accept pipe, queue and sched commands, but these can now also be issued via the new dnctl command. Reviewed by: donner MFC after: 2 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D30465 2021-05-25 14:54:32 +00:00
			`LINKS= ${BINDIR}/ipfw ${BINDIR}/dnctl`
			`MLINKS= ipfw.8 dnctl.8`

Move further to eliminate next pieces of number-assuming code inside tables. Kernel changes: * Add IP_FW_OBJ_FLUSH opcode (flush table based on its name/set) * Add IP_FW_OBJ_DUMP opcode (dumps table data based on its names/set) * Add IP_FW_OBJ_LISTSIZE / IP_FW_OBJ_LIST opcodes (get list of kernel tables) Userland changes: * move tables code to separate tables.c file * get rid of tables_max * switch "all"/list handling to new opcodes 2014-06-14 22:47:25 +00:00			`SRCS= ipfw2.c dummynet.c ipv6.c main.c nat.c tables.c`
Add NAT64 CLAT implementation as defined in RFC6877. CLAT is customer-side translator that algorithmically translates 1:1 private IPv4 addresses to global IPv6 addresses, and vice versa. It is implemented as part of ipfw_nat64 kernel module. When module is loaded or compiled into the kernel, it registers "nat64clat" external action. External action named instance can be created using `create` command and then used in ipfw rules. The create command accepts two IPv6 prefixes `plat_prefix` and `clat_prefix`. If plat_prefix is ommitted, IPv6 NAT64 Well-Known prefix 64:ff9b::/96 will be used. # ipfw nat64clat CLAT create clat_prefix SRC_PFX plat_prefix DST_PFX # ipfw add nat64clat CLAT ip4 from IPv4_PFX to any out # ipfw add nat64clat CLAT ip6 from DST_PFX to SRC_PFX in Obtained from: Yandex LLC Submitted by: Boris N. Lytochkin MFC after: 1 month Relnotes: yes Sponsored by: Yandex LLC 2019-03-18 11:44:53 +00:00			`SRCS+= nat64clat.c nat64lsn.c nat64stl.c nptv6.c`
Fix world build WITHOUT_PF. Sponsored by: Nginx, Inc. 2014-02-12 09:59:48 +00:00
			`.if ${MK_PF} != "no"`
			`SRCS+= altq.c`
			`CFLAGS+=-DPF`
			`.endif`

Allow jail names (not just IDs) to be specified for: cpuset(1), ipfw(8), sockstat(1), ugidfw(8) These are the last of the jail-aware userland utilities that didn't work with names. PR: 229266 MFC after: 3 days Differential Revision: D16047 2018-07-03 23:47:20 +00:00			`LIBADD= jail util`
- Backout botched attempt to introduce MANSECT feature. - MAN[1-9] -> MAN. 2001-03-26 14:33:27 +00:00			`MAN= ipfw.8`
New man pages from Ugen. Delete my old, first attempt. I only hope that the english in Ugen's two replacement pages is not too impenetrable! :-) [Note: Poul - please pull these into the BETA branch along with the other firewall changes] Submitted by: ugen 1994-11-17 09:50:30 +00:00
Add the ipfw command, for IP firewall construction. Submitted by: danny ugen 1994-10-28 15:06:53 +00:00			`.include <bsd.prog.mk>`
ipfw(8): Fix most warnings with the default WARNS level. - Add missing const and static qualifiers. - Avoid shadowing the global "co" by renaming it to "g_co". - Avoid mixing signedness in loop bound checks. - Leave -Wcast-align warnings disabled for now. Reviewed by: ae, melifaro MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D25456 2020-07-13 17:51:04 +00:00
			`CWARNFLAGS+= -Wno-cast-align`