8813217a67
compiled into the kernel. Do not try to build the module in case of no INET support but keep #error calls for now in case we would compile it into the kernel. This should fix an issue where the module would fail to enable IPv6 support from the rc framework, but also other INET and INET6 parts being silently compiled out without giving a warning in the module case. While here garbage collect unneeded opt_*.h includes. opt_ipdn.h is not used anywhere but we need to leave the DUMMYNET entry in options for conditional inclusion in kernel so keep the file with the same name. Reported by: pluknet Reviewed by: plunket, jhb MFC After: 3 days
36 lines
739 B
Makefile
36 lines
739 B
Makefile
# $FreeBSD$
|
|
|
|
.include <bsd.own.mk>
|
|
|
|
.PATH: ${.CURDIR}/../../netinet/ipfw
|
|
|
|
KMOD= ipfw
|
|
SRCS= ip_fw2.c ip_fw_pfil.c
|
|
SRCS+= ip_fw_dynamic.c ip_fw_log.c
|
|
SRCS+= ip_fw_sockopt.c ip_fw_table.c
|
|
SRCS+= opt_inet.h opt_inet6.h opt_ipdivert.h opt_ipfw.h opt_ipsec.h
|
|
|
|
CFLAGS+= -DIPFIREWALL
|
|
CFLAGS+= -I${.CURDIR}/../../contrib/pf
|
|
#
|
|
#If you want it verbose
|
|
#CFLAGS+= -DIPFIREWALL_VERBOSE
|
|
#CFLAGS+= -DIPFIREWALL_VERBOSE_LIMIT=100
|
|
#
|
|
#If you want it to pass all packets by default
|
|
#CFLAGS+= -DIPFIREWALL_DEFAULT_TO_ACCEPT
|
|
#
|
|
|
|
.if !defined(KERNBUILDDIR)
|
|
.if ${MK_INET_SUPPORT} != "no"
|
|
opt_inet.h:
|
|
echo "#define INET 1" > ${.TARGET}
|
|
.endif
|
|
.if ${MK_INET6_SUPPORT} != "no"
|
|
opt_inet6.h:
|
|
echo "#define INET6 1" > ${.TARGET}
|
|
.endif
|
|
.endif
|
|
|
|
.include <bsd.kmod.mk>
|