/ltmain.sh
/missing
/stamp-h1
+/xtables-addons.8
AUTOMAKE_OPTIONS = foreign subdir-objects
SUBDIRS = extensions
+man_MANS := xtables-addons.8
+
+xtables-addons.8: ${srcdir}/xtables-addons.8.in extensions/matches.man extensions/targets.man
+ ${AM_VERBOSE_GEN} sed -e '/@MATCHES@/ r extensions/matches.man' -e '/@TARGET@/ r extensions/targets.man' $< >$@;
+
+extensions/%:
+ ${MAKE} ${AM_MAKEFLAGS} -C $(@D) $(@F)
+
.PHONY: tarball
tarball:
rm -Rf /tmp/xtables-addons-${PACKAGE_VERSION};
.*.cmd
.*.d
+.manpages.lst
.tmp_versions
*.ko
*.mod.c
GNUmakefile
Module.symvers
modules.order
+matches.man
+targets.man
.PHONY: all install clean distclean FORCE
-all: modules ${targets}
+all: modules ${targets} matches.man targets.man
install: modules_install ${targets_install}
@mkdir -p "${DESTDIR}${xtlibdir}";
rm -f *.oo *.so;
distclean: clean
- rm -f .*.d;
+ rm -f .*.d .manpages.lst;
-include .*.d
lib%.oo: ${srcdir}/lib%.c
${AM_VERBOSE_CC} ${CC} ${AM_DEPFLAGS} ${AM_CFLAGS} -D_INIT=lib$*_init -DPIC -fPIC ${CFLAGS} -o $@ -c $<;
+
+
+#
+# Manpages
+#
+wcman_matches := $(wildcard ${srcdir}/libxt_[a-z]*.man)
+wcman_targets := $(wildcard ${srcdir}/libxt_[A-Z]*.man)
+wlist_matches := $(patsubst ${srcdir}/libxt_%.man,%,${wcman_matches})
+wlist_targets := $(patsubst ${srcdir}/libxt_%.man,%,${wcman_targets})
+
+.manpages.lst: FORCE
+ @echo "${wlist_targets} ${wlist_matches}" >$@.tmp; \
+ cmp -s $@ $@.tmp || mv $@.tmp $@; \
+ rm -f $@.tmp;
+
+man_run = \
+ ${AM_VERBOSE_GEN} \
+ for ext in $(1); do \
+ f="${srcdir}/libxt_$$ext.man"; \
+ if [ -f "$$f" ]; then \
+ echo ".SS $$ext"; \
+ cat "$$f"; \
+ continue; \
+ fi; \
+ done >$@;
+
+matches.man: .manpages.lst ${wcman_matches}
+ $(call man_run,${wlist_matches})
+
+targets.man: .manpages.lst ${wcman_targets}
+ $(call man_run,${wlist_targets})
can replace many mangle/mark entries with only one, if you use
firewall based classifier.
-This target is to be used inside the mangle table, in the PREROUTING,
-POSTROUTING or FORWARD hooks.
+This target is to be used inside the \fBmangle\fP table.
.TP
-.BI "--addr " "src/dst"
-Use source or destination IP address.
+\fB--addr\fP {\fBsrc\fP|\fBdst\fP}
+Select source or destination IP address as a basis for the mark.
.TP
.BI "--and-mask " "mask"
Perform bitwise `and' on the IP address and this mask.
-A FORWARD -p tcp -j TARPIT
.IP
-A FORWARD -j DROP
-.TP
+.PP
NOTE:
If you use the conntrack module while you are using TARPIT, you should also use
the NOTRACK target, or the kernel will unnecessarily allocate resources for
.B "--ares "
Matches Ares and AresLite packets. Use together with -j DROP only.
.TP
-.B "--ipp2p "
-Short hand for: --edk --kazaa --gnu --dc
-.TP
.B "--debug "
Prints some information about each hit into kernel logfile. May
produce huge logfiles so beware!
--- /dev/null
+.TH xtables-addons 8 2008-04-09
+.SH NAME
+Xtables-addons - additional extensions for iptables, ip6tables, etc.
+.SH TARGETS
+.\" @TARGET@
+.SH MATCHES
+.\" @MATCHES@
+.SH "SEE ALSO"
+\fBiptables\fP(8), \fBip6tables\fP(8)
+.PP
+For developers, the book "Writing your own Netfilter modules" at
+http://jengelh.medozas.de/documents/Netfilter_Modules.pdf provides detailed
+information on how to write such modules/extensions.