| 1 | netfilter-objs := core.o nf_log.o nf_queue.o nf_sockopt.o |
| 2 | |
| 3 | nf_conntrack-y := nf_conntrack_core.o nf_conntrack_standalone.o nf_conntrack_expect.o nf_conntrack_helper.o nf_conntrack_proto.o nf_conntrack_l3proto_generic.o nf_conntrack_proto_generic.o nf_conntrack_proto_tcp.o nf_conntrack_proto_udp.o nf_conntrack_extend.o nf_conntrack_acct.o nf_conntrack_seqadj.o |
| 4 | nf_conntrack-$(CONFIG_NF_CONNTRACK_TIMEOUT) += nf_conntrack_timeout.o |
| 5 | nf_conntrack-$(CONFIG_NF_CONNTRACK_TIMESTAMP) += nf_conntrack_timestamp.o |
| 6 | nf_conntrack-$(CONFIG_NF_CONNTRACK_EVENTS) += nf_conntrack_ecache.o |
| 7 | nf_conntrack-$(CONFIG_NF_CONNTRACK_LABELS) += nf_conntrack_labels.o |
| 8 | |
| 9 | obj-$(CONFIG_NETFILTER) = netfilter.o |
| 10 | |
| 11 | obj-$(CONFIG_NETFILTER_NETLINK) += nfnetlink.o |
| 12 | obj-$(CONFIG_NETFILTER_NETLINK_ACCT) += nfnetlink_acct.o |
| 13 | obj-$(CONFIG_NETFILTER_NETLINK_QUEUE) += nfnetlink_queue.o |
| 14 | obj-$(CONFIG_NETFILTER_NETLINK_LOG) += nfnetlink_log.o |
| 15 | |
| 16 | # connection tracking |
| 17 | obj-$(CONFIG_NF_CONNTRACK) += nf_conntrack.o |
| 18 | |
| 19 | # SCTP protocol connection tracking |
| 20 | obj-$(CONFIG_NF_CT_PROTO_DCCP) += nf_conntrack_proto_dccp.o |
| 21 | obj-$(CONFIG_NF_CT_PROTO_GRE) += nf_conntrack_proto_gre.o |
| 22 | obj-$(CONFIG_NF_CT_PROTO_SCTP) += nf_conntrack_proto_sctp.o |
| 23 | obj-$(CONFIG_NF_CT_PROTO_UDPLITE) += nf_conntrack_proto_udplite.o |
| 24 | |
| 25 | # netlink interface for nf_conntrack |
| 26 | obj-$(CONFIG_NF_CT_NETLINK) += nf_conntrack_netlink.o |
| 27 | obj-$(CONFIG_NF_CT_NETLINK_TIMEOUT) += nfnetlink_cttimeout.o |
| 28 | obj-$(CONFIG_NF_CT_NETLINK_HELPER) += nfnetlink_cthelper.o |
| 29 | |
| 30 | # connection tracking helpers |
| 31 | nf_conntrack_h323-objs := nf_conntrack_h323_main.o nf_conntrack_h323_asn1.o |
| 32 | |
| 33 | obj-$(CONFIG_NF_CONNTRACK_AMANDA) += nf_conntrack_amanda.o |
| 34 | obj-$(CONFIG_NF_CONNTRACK_FTP) += nf_conntrack_ftp.o |
| 35 | obj-$(CONFIG_NF_CONNTRACK_H323) += nf_conntrack_h323.o |
| 36 | obj-$(CONFIG_NF_CONNTRACK_IRC) += nf_conntrack_irc.o |
| 37 | obj-$(CONFIG_NF_CONNTRACK_BROADCAST) += nf_conntrack_broadcast.o |
| 38 | obj-$(CONFIG_NF_CONNTRACK_NETBIOS_NS) += nf_conntrack_netbios_ns.o |
| 39 | obj-$(CONFIG_NF_CONNTRACK_SNMP) += nf_conntrack_snmp.o |
| 40 | obj-$(CONFIG_NF_CONNTRACK_PPTP) += nf_conntrack_pptp.o |
| 41 | obj-$(CONFIG_NF_CONNTRACK_SANE) += nf_conntrack_sane.o |
| 42 | obj-$(CONFIG_NF_CONNTRACK_SIP) += nf_conntrack_sip.o |
| 43 | obj-$(CONFIG_NF_CONNTRACK_TFTP) += nf_conntrack_tftp.o |
| 44 | |
| 45 | nf_nat-y := nf_nat_core.o nf_nat_proto_unknown.o nf_nat_proto_common.o \ |
| 46 | nf_nat_proto_udp.o nf_nat_proto_tcp.o nf_nat_helper.o |
| 47 | |
| 48 | # generic transport layer logging |
| 49 | obj-$(CONFIG_NF_LOG_COMMON) += nf_log_common.o |
| 50 | |
| 51 | obj-$(CONFIG_NF_NAT) += nf_nat.o |
| 52 | obj-$(CONFIG_NF_NAT_REDIRECT) += nf_nat_redirect.o |
| 53 | |
| 54 | # NAT protocols (nf_nat) |
| 55 | obj-$(CONFIG_NF_NAT_PROTO_DCCP) += nf_nat_proto_dccp.o |
| 56 | obj-$(CONFIG_NF_NAT_PROTO_UDPLITE) += nf_nat_proto_udplite.o |
| 57 | obj-$(CONFIG_NF_NAT_PROTO_SCTP) += nf_nat_proto_sctp.o |
| 58 | |
| 59 | # NAT helpers |
| 60 | obj-$(CONFIG_NF_NAT_AMANDA) += nf_nat_amanda.o |
| 61 | obj-$(CONFIG_NF_NAT_FTP) += nf_nat_ftp.o |
| 62 | obj-$(CONFIG_NF_NAT_IRC) += nf_nat_irc.o |
| 63 | obj-$(CONFIG_NF_NAT_SIP) += nf_nat_sip.o |
| 64 | obj-$(CONFIG_NF_NAT_TFTP) += nf_nat_tftp.o |
| 65 | |
| 66 | # SYNPROXY |
| 67 | obj-$(CONFIG_NETFILTER_SYNPROXY) += nf_synproxy_core.o |
| 68 | |
| 69 | # generic packet duplication from netdev family |
| 70 | obj-$(CONFIG_NF_DUP_NETDEV) += nf_dup_netdev.o |
| 71 | |
| 72 | # nf_tables |
| 73 | nf_tables-objs += nf_tables_core.o nf_tables_api.o nf_tables_trace.o |
| 74 | nf_tables-objs += nft_immediate.o nft_cmp.o nft_lookup.o nft_dynset.o |
| 75 | nf_tables-objs += nft_bitwise.o nft_byteorder.o nft_payload.o |
| 76 | |
| 77 | obj-$(CONFIG_NF_TABLES) += nf_tables.o |
| 78 | obj-$(CONFIG_NF_TABLES_INET) += nf_tables_inet.o |
| 79 | obj-$(CONFIG_NF_TABLES_NETDEV) += nf_tables_netdev.o |
| 80 | obj-$(CONFIG_NFT_COMPAT) += nft_compat.o |
| 81 | obj-$(CONFIG_NFT_EXTHDR) += nft_exthdr.o |
| 82 | obj-$(CONFIG_NFT_META) += nft_meta.o |
| 83 | obj-$(CONFIG_NFT_CT) += nft_ct.o |
| 84 | obj-$(CONFIG_NFT_LIMIT) += nft_limit.o |
| 85 | obj-$(CONFIG_NFT_NAT) += nft_nat.o |
| 86 | obj-$(CONFIG_NFT_QUEUE) += nft_queue.o |
| 87 | obj-$(CONFIG_NFT_REJECT) += nft_reject.o |
| 88 | obj-$(CONFIG_NFT_REJECT_INET) += nft_reject_inet.o |
| 89 | obj-$(CONFIG_NFT_RBTREE) += nft_rbtree.o |
| 90 | obj-$(CONFIG_NFT_HASH) += nft_hash.o |
| 91 | obj-$(CONFIG_NFT_COUNTER) += nft_counter.o |
| 92 | obj-$(CONFIG_NFT_LOG) += nft_log.o |
| 93 | obj-$(CONFIG_NFT_MASQ) += nft_masq.o |
| 94 | obj-$(CONFIG_NFT_REDIR) += nft_redir.o |
| 95 | |
| 96 | # nf_tables netdev |
| 97 | obj-$(CONFIG_NFT_DUP_NETDEV) += nft_dup_netdev.o |
| 98 | obj-$(CONFIG_NFT_FWD_NETDEV) += nft_fwd_netdev.o |
| 99 | |
| 100 | # generic X tables |
| 101 | obj-$(CONFIG_NETFILTER_XTABLES) += x_tables.o xt_tcpudp.o |
| 102 | |
| 103 | # combos |
| 104 | obj-$(CONFIG_NETFILTER_XT_MARK) += xt_mark.o |
| 105 | obj-$(CONFIG_NETFILTER_XT_CONNMARK) += xt_connmark.o |
| 106 | obj-$(CONFIG_NETFILTER_XT_SET) += xt_set.o |
| 107 | obj-$(CONFIG_NETFILTER_XT_NAT) += xt_nat.o |
| 108 | |
| 109 | # targets |
| 110 | obj-$(CONFIG_NETFILTER_XT_TARGET_AUDIT) += xt_AUDIT.o |
| 111 | obj-$(CONFIG_NETFILTER_XT_TARGET_CHECKSUM) += xt_CHECKSUM.o |
| 112 | obj-$(CONFIG_NETFILTER_XT_TARGET_CLASSIFY) += xt_CLASSIFY.o |
| 113 | obj-$(CONFIG_NETFILTER_XT_TARGET_CONNSECMARK) += xt_CONNSECMARK.o |
| 114 | obj-$(CONFIG_NETFILTER_XT_TARGET_CT) += xt_CT.o |
| 115 | obj-$(CONFIG_NETFILTER_XT_TARGET_DSCP) += xt_DSCP.o |
| 116 | obj-$(CONFIG_NETFILTER_XT_TARGET_HL) += xt_HL.o |
| 117 | obj-$(CONFIG_NETFILTER_XT_TARGET_HMARK) += xt_HMARK.o |
| 118 | obj-$(CONFIG_NETFILTER_XT_TARGET_LED) += xt_LED.o |
| 119 | obj-$(CONFIG_NETFILTER_XT_TARGET_LOG) += xt_LOG.o |
| 120 | obj-$(CONFIG_NETFILTER_XT_TARGET_NETMAP) += xt_NETMAP.o |
| 121 | obj-$(CONFIG_NETFILTER_XT_TARGET_NFLOG) += xt_NFLOG.o |
| 122 | obj-$(CONFIG_NETFILTER_XT_TARGET_NFQUEUE) += xt_NFQUEUE.o |
| 123 | obj-$(CONFIG_NETFILTER_XT_TARGET_RATEEST) += xt_RATEEST.o |
| 124 | obj-$(CONFIG_NETFILTER_XT_TARGET_REDIRECT) += xt_REDIRECT.o |
| 125 | obj-$(CONFIG_NETFILTER_XT_TARGET_SECMARK) += xt_SECMARK.o |
| 126 | obj-$(CONFIG_NETFILTER_XT_TARGET_TPROXY) += xt_TPROXY.o |
| 127 | obj-$(CONFIG_NETFILTER_XT_TARGET_TCPMSS) += xt_TCPMSS.o |
| 128 | obj-$(CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP) += xt_TCPOPTSTRIP.o |
| 129 | obj-$(CONFIG_NETFILTER_XT_TARGET_TEE) += xt_TEE.o |
| 130 | obj-$(CONFIG_NETFILTER_XT_TARGET_TRACE) += xt_TRACE.o |
| 131 | obj-$(CONFIG_NETFILTER_XT_TARGET_IDLETIMER) += xt_IDLETIMER.o |
| 132 | |
| 133 | # matches |
| 134 | obj-$(CONFIG_NETFILTER_XT_MATCH_ADDRTYPE) += xt_addrtype.o |
| 135 | obj-$(CONFIG_NETFILTER_XT_MATCH_BPF) += xt_bpf.o |
| 136 | obj-$(CONFIG_NETFILTER_XT_MATCH_CLUSTER) += xt_cluster.o |
| 137 | obj-$(CONFIG_NETFILTER_XT_MATCH_COMMENT) += xt_comment.o |
| 138 | obj-$(CONFIG_NETFILTER_XT_MATCH_CONNBYTES) += xt_connbytes.o |
| 139 | obj-$(CONFIG_NETFILTER_XT_MATCH_CONNLABEL) += xt_connlabel.o |
| 140 | obj-$(CONFIG_NETFILTER_XT_MATCH_CONNLIMIT) += xt_connlimit.o |
| 141 | obj-$(CONFIG_NETFILTER_XT_MATCH_CONNTRACK) += xt_conntrack.o |
| 142 | obj-$(CONFIG_NETFILTER_XT_MATCH_CPU) += xt_cpu.o |
| 143 | obj-$(CONFIG_NETFILTER_XT_MATCH_DCCP) += xt_dccp.o |
| 144 | obj-$(CONFIG_NETFILTER_XT_MATCH_DEVGROUP) += xt_devgroup.o |
| 145 | obj-$(CONFIG_NETFILTER_XT_MATCH_DSCP) += xt_dscp.o |
| 146 | obj-$(CONFIG_NETFILTER_XT_MATCH_ECN) += xt_ecn.o |
| 147 | obj-$(CONFIG_NETFILTER_XT_MATCH_ESP) += xt_esp.o |
| 148 | obj-$(CONFIG_NETFILTER_XT_MATCH_HASHLIMIT) += xt_hashlimit.o |
| 149 | obj-$(CONFIG_NETFILTER_XT_MATCH_HELPER) += xt_helper.o |
| 150 | obj-$(CONFIG_NETFILTER_XT_MATCH_HL) += xt_hl.o |
| 151 | obj-$(CONFIG_NETFILTER_XT_MATCH_IPCOMP) += xt_ipcomp.o |
| 152 | obj-$(CONFIG_NETFILTER_XT_MATCH_IPRANGE) += xt_iprange.o |
| 153 | obj-$(CONFIG_NETFILTER_XT_MATCH_IPVS) += xt_ipvs.o |
| 154 | obj-$(CONFIG_NETFILTER_XT_MATCH_L2TP) += xt_l2tp.o |
| 155 | obj-$(CONFIG_NETFILTER_XT_MATCH_LENGTH) += xt_length.o |
| 156 | obj-$(CONFIG_NETFILTER_XT_MATCH_LIMIT) += xt_limit.o |
| 157 | obj-$(CONFIG_NETFILTER_XT_MATCH_MAC) += xt_mac.o |
| 158 | obj-$(CONFIG_NETFILTER_XT_MATCH_MULTIPORT) += xt_multiport.o |
| 159 | obj-$(CONFIG_NETFILTER_XT_MATCH_NFACCT) += xt_nfacct.o |
| 160 | obj-$(CONFIG_NETFILTER_XT_MATCH_OSF) += xt_osf.o |
| 161 | obj-$(CONFIG_NETFILTER_XT_MATCH_OWNER) += xt_owner.o |
| 162 | obj-$(CONFIG_NETFILTER_XT_MATCH_CGROUP) += xt_cgroup.o |
| 163 | obj-$(CONFIG_NETFILTER_XT_MATCH_PHYSDEV) += xt_physdev.o |
| 164 | obj-$(CONFIG_NETFILTER_XT_MATCH_PKTTYPE) += xt_pkttype.o |
| 165 | obj-$(CONFIG_NETFILTER_XT_MATCH_POLICY) += xt_policy.o |
| 166 | obj-$(CONFIG_NETFILTER_XT_MATCH_QUOTA) += xt_quota.o |
| 167 | obj-$(CONFIG_NETFILTER_XT_MATCH_RATEEST) += xt_rateest.o |
| 168 | obj-$(CONFIG_NETFILTER_XT_MATCH_REALM) += xt_realm.o |
| 169 | obj-$(CONFIG_NETFILTER_XT_MATCH_RECENT) += xt_recent.o |
| 170 | obj-$(CONFIG_NETFILTER_XT_MATCH_SCTP) += xt_sctp.o |
| 171 | obj-$(CONFIG_NETFILTER_XT_MATCH_SOCKET) += xt_socket.o |
| 172 | obj-$(CONFIG_NETFILTER_XT_MATCH_STATE) += xt_state.o |
| 173 | obj-$(CONFIG_NETFILTER_XT_MATCH_STATISTIC) += xt_statistic.o |
| 174 | obj-$(CONFIG_NETFILTER_XT_MATCH_STRING) += xt_string.o |
| 175 | obj-$(CONFIG_NETFILTER_XT_MATCH_TCPMSS) += xt_tcpmss.o |
| 176 | obj-$(CONFIG_NETFILTER_XT_MATCH_TIME) += xt_time.o |
| 177 | obj-$(CONFIG_NETFILTER_XT_MATCH_U32) += xt_u32.o |
| 178 | |
| 179 | # ipset |
| 180 | obj-$(CONFIG_IP_SET) += ipset/ |
| 181 | |
| 182 | # IPVS |
| 183 | obj-$(CONFIG_IP_VS) += ipvs/ |