# iptables/cfg - "Build" settings for package

#---------------------------------------------------------------------

[technotes]

1. The source tarball used by this  package was created based on "git"
upstream sources. The following command was used:

      ocgitfetch --run https://git.netfilter.org/iptables

#---------------------------------------------------------------------

2. As of Fall 2025,  this package replaces  the legacy  "iptables" and
"ip6tables" programs with symlinks  to the  corresponding "-nft-" pro-
grams.

#---------------------------------------------------------------------

3. "NO_SHARED_LIBS" mode shouldn't be used. In  other words,  the "ip-
tables" shared-object files should be built and installed. Other pack-
ages (such as IPAC-NG)  may need  to access these shared-object files.

#---------------------------------------------------------------------

[buildtimes]

00.01 hours (or 000.53 minutes) - HP EliteBook 8560w 32GB RAM
00.01 hours (or 000.60 minutes) - Dell Inspiron 6400 2.0 GHz Intel Duo
                                  7200 2GB RAM
00.01 hours (or 000.73 minutes) - ThinkPad E540 i7 4x2 16GB RAM
00.02 hours (or 001.32 minutes) - Toshiba Satellite C655 E-300 CPU 4GB
                                  RAM
00.05 hours (or 002.93 minutes) - Compaq 1.7 GHz Intel Pentium 4 512MB
                                  RAM

#---------------------------------------------------------------------

[settings]
build      = default
compiler   = clang
exepack    = yes
license    = See "license*.txt" in installed tree
licfile    = COPYING
nosyslinks = lib

#---------------------------------------------------------------------

[depends]
actools
bison2
bison3
flex
gawk
grep
libnfconntrack
libnfnetlink
libnftnl
libmnl
pkgconf
sed
shadow

#---------------------------------------------------------------------

[configure]
MANBASE=$PKGDIR_PROD/man
mkdir -p $MANBASE

./autogen.sh

bash ./configure \
    --prefix=$PKGDIR_PROD          \
    --build=$LACARCHBUILD          \
    --host=$LACARCHHOST            \
    --disable-dependency-tracking  \
    --enable-nftables              \
    --enable-libipq                \
    --enable-shared=yes            \
    --enable-static=no             \
    --mandir=$MANBASE

sed -e 's@HAVE_LINUX_BPF_H@HAVE_XYZZY_H@g' \
    -i config.h

#---------------------------------------------------------------------

[postbuild]
cd $PKGDIR_PROD/sbin/

ln -nsf iptables-nft            iptables
ln -nsf iptables-nft-restore    iptables-restore
ln -nsf iptables-nft-save       iptables-save

ln -nsf ip6tables-nft           ip6tables
ln -nsf ip6tables-nft-restore   ip6tables-restore
ln -nsf ip6tables-nft-save      ip6tables-save

#---------------------------------------------------------------------

# Original URLs. These URLs were valid at one point, but may have died
# since then. If you download newer versions of tarballs [etc.], don't
# delete  the  original versions,  as you may not  be able  to replace
# them.

[urls]
url_debian  = http://packages.debian.org/unstable/source/iptables
url_home    = http://www.iptables.org/

url_lfs     = http://www.linuxfromscratch.org/blfs/view/stable/\
postlfs/iptables.html

url_tarball = git               # See "technotes" in "cfg" file

#---------------------------------------------------------------------

[history]
171205 Updated from 1.4.21 to 1.6.1
180303 Updated to 1.6.2
180629 Added an Alpine patch
180710 Updated to 1.8.0
181023 Updated to 1.8.1
181013 Updated to 1.8.2
190529 Updated to 1.8.3
210202 Updated to 1.8.7
220513 Updated to 1.8.8
230113 Updated to 1.8.9
240310 Updated to 1.8.10
241110 Updated to 1.8.11
251210 Updated to 78d7a5f86 ("git" hash)
251210 Replaced "iptables" with a symlink to "iptables-nft"