mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-09-13 22:25:03 +00:00
c1deb065cf
very little code, so it really doesn't make sense to have extra
modules or even a kconfig knob for this.
Merge them and make functionality available unconditionally.
The merge makes inet family route support trivial, so add it
as well here.
Before:
text data bss dec hex filename
835 832 0 1667 683 nft_chain_route_ipv4.ko
870 832 0 1702 6a6 nft_chain_route_ipv6.ko
111568 2556 529 114653 1bfdd nf_tables.ko
After:
text data bss dec hex filename
113133 2556 529 116218 1c5fa nf_tables.ko
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
62 lines
1.9 KiB
Makefile
62 lines
1.9 KiB
Makefile
# SPDX-License-Identifier: GPL-2.0
|
|
#
|
|
# Makefile for the netfilter modules on top of IPv4.
|
|
#
|
|
|
|
# defrag
|
|
obj-$(CONFIG_NF_DEFRAG_IPV4) += nf_defrag_ipv4.o
|
|
|
|
obj-$(CONFIG_NF_SOCKET_IPV4) += nf_socket_ipv4.o
|
|
obj-$(CONFIG_NF_TPROXY_IPV4) += nf_tproxy_ipv4.o
|
|
|
|
# logging
|
|
obj-$(CONFIG_NF_LOG_ARP) += nf_log_arp.o
|
|
obj-$(CONFIG_NF_LOG_IPV4) += nf_log_ipv4.o
|
|
|
|
# reject
|
|
obj-$(CONFIG_NF_REJECT_IPV4) += nf_reject_ipv4.o
|
|
|
|
# NAT helpers (nf_conntrack)
|
|
obj-$(CONFIG_NF_NAT_H323) += nf_nat_h323.o
|
|
obj-$(CONFIG_NF_NAT_PPTP) += nf_nat_pptp.o
|
|
|
|
nf_nat_snmp_basic-y := nf_nat_snmp_basic.asn1.o nf_nat_snmp_basic_main.o
|
|
$(obj)/nf_nat_snmp_basic_main.o: $(obj)/nf_nat_snmp_basic.asn1.h
|
|
obj-$(CONFIG_NF_NAT_SNMP_BASIC) += nf_nat_snmp_basic.o
|
|
|
|
obj-$(CONFIG_NFT_REJECT_IPV4) += nft_reject_ipv4.o
|
|
obj-$(CONFIG_NFT_FIB_IPV4) += nft_fib_ipv4.o
|
|
obj-$(CONFIG_NFT_DUP_IPV4) += nft_dup_ipv4.o
|
|
|
|
# flow table support
|
|
obj-$(CONFIG_NF_FLOW_TABLE_IPV4) += nf_flow_table_ipv4.o
|
|
|
|
# generic IP tables
|
|
obj-$(CONFIG_IP_NF_IPTABLES) += ip_tables.o
|
|
|
|
# the three instances of ip_tables
|
|
obj-$(CONFIG_IP_NF_FILTER) += iptable_filter.o
|
|
obj-$(CONFIG_IP_NF_MANGLE) += iptable_mangle.o
|
|
obj-$(CONFIG_IP_NF_NAT) += iptable_nat.o
|
|
obj-$(CONFIG_IP_NF_RAW) += iptable_raw.o
|
|
obj-$(CONFIG_IP_NF_SECURITY) += iptable_security.o
|
|
|
|
# matches
|
|
obj-$(CONFIG_IP_NF_MATCH_AH) += ipt_ah.o
|
|
obj-$(CONFIG_IP_NF_MATCH_RPFILTER) += ipt_rpfilter.o
|
|
|
|
# targets
|
|
obj-$(CONFIG_IP_NF_TARGET_CLUSTERIP) += ipt_CLUSTERIP.o
|
|
obj-$(CONFIG_IP_NF_TARGET_ECN) += ipt_ECN.o
|
|
obj-$(CONFIG_IP_NF_TARGET_MASQUERADE) += ipt_MASQUERADE.o
|
|
obj-$(CONFIG_IP_NF_TARGET_REJECT) += ipt_REJECT.o
|
|
obj-$(CONFIG_IP_NF_TARGET_SYNPROXY) += ipt_SYNPROXY.o
|
|
|
|
# generic ARP tables
|
|
obj-$(CONFIG_IP_NF_ARPTABLES) += arp_tables.o
|
|
obj-$(CONFIG_IP_NF_ARP_MANGLE) += arpt_mangle.o
|
|
|
|
# just filtering instance of ARP tables for now
|
|
obj-$(CONFIG_IP_NF_ARPFILTER) += arptable_filter.o
|
|
|
|
obj-$(CONFIG_NF_DUP_IPV4) += nf_dup_ipv4.o
|