2acdf79f53
It allows implementing loadable kernel modules with new actions and without needing to modify kernel headers and ipfw(8). The module registers its action handler and keyword string, that will be used as action name. Using generic syntax user can add rules with this action. Also ipfw(8) can be easily modified to extend basic syntax for external actions, that become a part base system. Sample modules will coming soon. Obtained from: Yandex LLC Sponsored by: Yandex LLC
23 lines
543 B
Makefile
23 lines
543 B
Makefile
# $FreeBSD$
|
|
|
|
.PATH: ${.CURDIR}/../../netpfil/ipfw
|
|
|
|
KMOD= ipfw
|
|
SRCS= ip_fw2.c ip_fw_pfil.c
|
|
SRCS+= ip_fw_dynamic.c ip_fw_log.c ip_fw_eaction.c
|
|
SRCS+= ip_fw_sockopt.c ip_fw_table.c ip_fw_table_algo.c ip_fw_iface.c
|
|
SRCS+= ip_fw_table_value.c
|
|
SRCS+= opt_inet.h opt_inet6.h opt_ipdivert.h opt_ipfw.h opt_ipsec.h
|
|
|
|
CFLAGS+= -DIPFIREWALL
|
|
#
|
|
#If you want it verbose
|
|
#CFLAGS+= -DIPFIREWALL_VERBOSE
|
|
#CFLAGS+= -DIPFIREWALL_VERBOSE_LIMIT=100
|
|
#
|
|
#If you want it to pass all packets by default
|
|
#CFLAGS+= -DIPFIREWALL_DEFAULT_TO_ACCEPT
|
|
#
|
|
|
|
.include <bsd.kmod.mk>
|