2014-11-01 11:33:56 +01:00
|
|
|
# Copyright 1999-2013 Gentoo Foundation
|
|
|
|
|
# Distributed under the terms of the GNU General Public License v2
|
|
|
|
|
|
|
|
|
|
EAPI="5"
|
|
|
|
|
|
|
|
|
|
# Force users doing their own patches to install their own tools
|
|
|
|
|
AUTOTOOLS_AUTO_DEPEND=no
|
|
|
|
|
|
|
|
|
|
inherit autotools eutils git-r3 multilib systemd toolchain-funcs
|
|
|
|
|
|
|
|
|
|
DESCRIPTION="Linux kernel (3.13+) firewall, NAT and packet mangling tools, with nftables compatibility"
|
|
|
|
|
HOMEPAGE="http://www.netfilter.org/projects/nftables/"
|
|
|
|
|
EGIT_REPO_URI="git://git.netfilter.org/iptables.git"
|
|
|
|
|
|
|
|
|
|
LICENSE="GPL-2"
|
|
|
|
|
SLOT="0"
|
2014-11-02 02:01:38 +01:00
|
|
|
KEYWORDS=""
|
2014-11-01 11:33:56 +01:00
|
|
|
IUSE="ipv6 netlink static-libs"
|
|
|
|
|
|
|
|
|
|
RDEPEND="
|
|
|
|
|
netlink? ( net-libs/libnfnetlink )
|
|
|
|
|
"
|
|
|
|
|
DEPEND="${RDEPEND}
|
|
|
|
|
virtual/os-headers
|
|
|
|
|
virtual/pkgconfig
|
|
|
|
|
net-libs/libnetfilter_conntrack
|
|
|
|
|
net-libs/libnftnl
|
|
|
|
|
net-libs/libpcap
|
|
|
|
|
"
|
|
|
|
|
|
|
|
|
|
src_prepare() {
|
|
|
|
|
# use the saner headers from the kernel
|
|
|
|
|
rm -f include/linux/{kernel,types}.h
|
|
|
|
|
|
|
|
|
|
eautoreconf
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
src_configure() {
|
|
|
|
|
# Some libs use $(AR) rather than libtool to build #444282
|
|
|
|
|
tc-export AR
|
|
|
|
|
|
|
|
|
|
sed -i \
|
|
|
|
|
-e "/nfnetlink=[01]/s:=[01]:=$(usex netlink 1 0):" \
|
|
|
|
|
configure || die
|
|
|
|
|
|
|
|
|
|
econf \
|
|
|
|
|
--sbindir="${EPREFIX}/sbin" \
|
|
|
|
|
--libexecdir="${EPREFIX}/$(get_libdir)" \
|
|
|
|
|
--enable-devel \
|
|
|
|
|
--enable-shared \
|
|
|
|
|
--enable-libipq \
|
|
|
|
|
--enable-bpf-compiler \
|
|
|
|
|
--enable-nfsynproxy \
|
|
|
|
|
$(use_enable static-libs static) \
|
|
|
|
|
$(use_enable ipv6)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
src_compile() {
|
|
|
|
|
emake V=1
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
src_install() {
|
|
|
|
|
default
|
|
|
|
|
dodoc INCOMPATIBILITIES iptables/iptables.xslt
|
|
|
|
|
|
|
|
|
|
# all the iptables binaries are in /sbin, so might as well
|
|
|
|
|
# put these small files in with them
|
|
|
|
|
into /
|
|
|
|
|
dosbin iptables/iptables-apply
|
|
|
|
|
dosym iptables-apply /sbin/ip6tables-apply
|
|
|
|
|
doman iptables/iptables-apply.8
|
|
|
|
|
|
|
|
|
|
insinto /usr/include
|
|
|
|
|
doins include/iptables.h $(use ipv6 && echo include/ip6tables.h)
|
|
|
|
|
insinto /usr/include/iptables
|
|
|
|
|
doins include/iptables/internal.h
|
|
|
|
|
|
|
|
|
|
keepdir /var/lib/iptables
|
|
|
|
|
newinitd "${FILESDIR}"/${PN}-1.4.13-r1.init iptables
|
|
|
|
|
newconfd "${FILESDIR}"/${PN}-1.4.13.confd iptables
|
|
|
|
|
if use ipv6 ; then
|
|
|
|
|
keepdir /var/lib/ip6tables
|
|
|
|
|
newinitd "${FILESDIR}"/iptables-1.4.13-r1.init ip6tables
|
|
|
|
|
newconfd "${FILESDIR}"/ip6tables-1.4.13.confd ip6tables
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
systemd_dounit "${FILESDIR}"/systemd/iptables{,-{re,}store}.service
|
|
|
|
|
if use ipv6 ; then
|
|
|
|
|
systemd_dounit "${FILESDIR}"/systemd/ip6tables{,-{re,}store}.service
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
# Move important libs to /lib
|
|
|
|
|
gen_usr_ldscript -a ip{4,6}tc iptc xtables
|
|
|
|
|
|
|
|
|
|
prune_libtool_files
|
|
|
|
|
}
|
