[src/trunk]: src/sys/modules New module for ipl (aka ipfilter).

[pgoyette <pgoyette%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/688e0aa4a230
branches:  trunk
changeset: 815941:688e0aa4a230
user:      pgoyette <pgoyette%NetBSD.org@localhost>
date:      Thu Jun 09 04:44:18 2016 +0000

description:
New module for ipl (aka ipfilter).

diffstat:

 sys/modules/Makefile     |   3 +-
 sys/modules/ipl/Makefile |  57 ++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 59 insertions(+), 1 deletions(-)

diffs (78 lines):

diff -r d448241857ee -r 688e0aa4a230 sys/modules/Makefile
--- a/sys/modules/Makefile      Thu Jun 09 04:43:46 2016 +0000
+++ b/sys/modules/Makefile      Thu Jun 09 04:44:18 2016 +0000
@@ -1,4 +1,4 @@
-#      $NetBSD: Makefile,v 1.166 2016/06/07 01:06:27 pgoyette Exp $
+#      $NetBSD: Makefile,v 1.167 2016/06/09 04:44:18 pgoyette Exp $
 
 .include <bsd.own.mk>
 
@@ -50,6 +50,7 @@
 SUBDIR+=       if_npflog
 SUBDIR+=       if_smsc
 SUBDIR+=       iic
+SUBDIR+=       ipl
 SUBDIR+=       kernfs
 SUBDIR+=       layerfs
 SUBDIR+=       lfs
diff -r d448241857ee -r 688e0aa4a230 sys/modules/ipl/Makefile
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/sys/modules/ipl/Makefile  Thu Jun 09 04:44:18 2016 +0000
@@ -0,0 +1,57 @@
+#      $NetBSD: Makefile,v 1.1 2016/06/09 04:44:19 pgoyette Exp $
+#
+
+.include "../Makefile.inc"
+
+.PATH: ${S}/external/bsd/ipf/netinet
+
+KMOD=  ipl     # Use "formal" name of ipfilter device to enable autoload
+
+# Options for opt_ipfilter.h
+
+CPPFLAGS+=     -DIPFILTER_LOG          # logging of ip packets
+#CPPFLAGS+=    -DIPFILTER_DEFAULT_BLOCK
+#CPPFLAGS+=    -DIPFILTER_BPF          # BPF opcodes in rules
+#CPPFLAGS+=    -DIPFILTER_CKSUM        # check layer 4 checksums
+#CPPFLAGS+=    -DIPFILTER_COMPILED     # support for compiled IPF rules
+CPPFLAGS+=     -DIPFILTER_LOOKUP       # support for ippool(8)
+#CPPFLAGS+=    -DIPFILTER_SCAN         # scanning of packet contents
+#CPPFLAGS+=    -DIPFILTER_SYNC         # synchronisation of state 
+CPPFLAGS+=     -DIPFILTER_COMPAT       # IPFilter version compat.
+
+# IPFILTER_LOGSIZE     # size of logging buffer
+# IPSTATE_MAX          # maximum number of references to state table entry
+# IPSTATE_SIZE         # size of state hash table
+# NAT_TABLE_MAX                # maximum number of NAT state entries
+# NAT_TABLE_SZ         # size of NAT state hash table
+# NAT_SIZE             # size of nat rules hash table
+# RDR_SIZE             # size of rdr rules hash table
+# HOSTMAP_SIZE         # size of hostmap hash table
+
+CPPFLAGS+=     -I$S/external/bsd/ipf
+
+# Other options:
+
+CPPFLAGS+=     -DINET                  # opt_inet.h
+CPPFLAGS+=     -DINET6                 # opt_inet.h
+CPPFLAGS+=     -DIPSEC                 # opt_ipsec.h
+
+SRCS+= fil.c
+SRCS+= ip_auth.c
+SRCS+= ip_dstlist.c
+SRCS+= ip_fil_netbsd.c
+SRCS+= ip_frag.c
+SRCS+= ip_htable.c
+SRCS+= ip_log.c
+SRCS+= ip_lookup.c
+SRCS+= ip_nat.c
+SRCS+= ip_nat6.c
+SRCS+= ip_pool.c
+SRCS+= ip_proxy.c
+SRCS+= ip_scan.c
+SRCS+= ip_state.c
+SRCS+= ip_sync.c
+SRCS+= ip_fil_compat.c
+SRCS+= radix_ipf.c
+
+.include <bsd.kmodule.mk>