added iptables build

Makefile

@@ -33,5 +33,8 @@ hostapd:
 openssl:
 	./scripts/build_image.sh openssl
 
+iptables:
+	./scripts/build_image.sh iptables
+
 sdroot_usable:
 	./scripts/build_image.sh sdroot_usable

kernel/config-6.13.3

@@ -11,8 +11,8 @@ CONFIG_AS_VERSION=24100
 CONFIG_LD_IS_BFD=y
 CONFIG_LD_VERSION=24100
 CONFIG_LLD_VERSION=0
-CONFIG_RUSTC_VERSION=108500
+CONFIG_RUSTC_VERSION=108200
-CONFIG_RUSTC_LLVM_VERSION=190107
+CONFIG_RUSTC_LLVM_VERSION=190101
 CONFIG_CC_CAN_LINK=y
 CONFIG_CC_CAN_LINK_STATIC=y
 CONFIG_CC_HAS_ASM_GOTO_OUTPUT=y
@@ -164,6 +164,7 @@ CONFIG_SCHED_MM_CID=y
 # CONFIG_CGROUP_CPUACCT is not set
 # CONFIG_CGROUP_PERF is not set
 # CONFIG_CGROUP_MISC is not set
+CONFIG_SOCK_CGROUP_DATA=y
 CONFIG_NAMESPACES=y
 CONFIG_UTS_NS=y
 CONFIG_USER_NS=y
@@ -824,6 +825,7 @@ CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IP_MULTIPLE_TABLES=y
 # CONFIG_IP_ROUTE_MULTIPATH is not set
 # CONFIG_IP_ROUTE_VERBOSE is not set
+CONFIG_IP_ROUTE_CLASSID=y
 CONFIG_IP_PNP=y
 CONFIG_IP_PNP_DHCP=y
 CONFIG_IP_PNP_BOOTP=y
@@ -832,7 +834,7 @@ CONFIG_NET_IPIP=y
 CONFIG_NET_IPGRE_DEMUX=y
 CONFIG_NET_IP_TUNNEL=y
 CONFIG_NET_IPGRE=y
-# CONFIG_SYN_COOKIES is not set
+CONFIG_SYN_COOKIES=y
 CONFIG_NET_IPVTI=y
 CONFIG_NET_UDP_TUNNEL=y
 # CONFIG_NET_FOU is not set
@@ -884,128 +886,157 @@ CONFIG_NETFILTER_INGRESS=y
 CONFIG_NETFILTER_EGRESS=y
 CONFIG_NETFILTER_SKIP_EGRESS=y
 CONFIG_NETFILTER_NETLINK=y
+CONFIG_NETFILTER_FAMILY_ARP=y
 # CONFIG_NETFILTER_NETLINK_HOOK is not set
-# CONFIG_NETFILTER_NETLINK_ACCT is not set
+CONFIG_NETFILTER_NETLINK_ACCT=m
 # CONFIG_NETFILTER_NETLINK_QUEUE is not set
 # CONFIG_NETFILTER_NETLINK_LOG is not set
-# CONFIG_NETFILTER_NETLINK_OSF is not set
+CONFIG_NETFILTER_NETLINK_OSF=m
-CONFIG_NF_CONNTRACK=y
+CONFIG_NF_CONNTRACK=m
 CONFIG_NF_LOG_SYSLOG=y
-# CONFIG_NF_CONNTRACK_MARK is not set
+CONFIG_NETFILTER_CONNCOUNT=m
+CONFIG_NF_CONNTRACK_MARK=y
 # CONFIG_NF_CONNTRACK_ZONES is not set
 # CONFIG_NF_CONNTRACK_PROCFS is not set
 # CONFIG_NF_CONNTRACK_EVENTS is not set
 # CONFIG_NF_CONNTRACK_TIMEOUT is not set
 # CONFIG_NF_CONNTRACK_TIMESTAMP is not set
-# CONFIG_NF_CONNTRACK_LABELS is not set
+CONFIG_NF_CONNTRACK_LABELS=y
 CONFIG_NF_CT_PROTO_DCCP=y
 CONFIG_NF_CT_PROTO_SCTP=y
 CONFIG_NF_CT_PROTO_UDPLITE=y
 # CONFIG_NF_CONNTRACK_AMANDA is not set
-# CONFIG_NF_CONNTRACK_FTP is not set
+CONFIG_NF_CONNTRACK_FTP=m
 # CONFIG_NF_CONNTRACK_H323 is not set
 # CONFIG_NF_CONNTRACK_IRC is not set
+CONFIG_NF_CONNTRACK_BROADCAST=m
 # CONFIG_NF_CONNTRACK_NETBIOS_NS is not set
-# CONFIG_NF_CONNTRACK_SNMP is not set
+CONFIG_NF_CONNTRACK_SNMP=m
 # CONFIG_NF_CONNTRACK_PPTP is not set
 # CONFIG_NF_CONNTRACK_SANE is not set
 # CONFIG_NF_CONNTRACK_SIP is not set
-# CONFIG_NF_CONNTRACK_TFTP is not set
+CONFIG_NF_CONNTRACK_TFTP=m
-# CONFIG_NF_CT_NETLINK is not set
+CONFIG_NF_CT_NETLINK=m
-# CONFIG_NF_NAT is not set
+CONFIG_NF_NAT=m
+CONFIG_NF_NAT_FTP=m
+CONFIG_NF_NAT_TFTP=m
+CONFIG_NF_NAT_REDIRECT=y
+CONFIG_NF_NAT_MASQUERADE=y
+CONFIG_NETFILTER_SYNPROXY=m
 CONFIG_NF_TABLES=y
-# CONFIG_NF_TABLES_INET is not set
+CONFIG_NF_TABLES_INET=y
 CONFIG_NF_TABLES_NETDEV=y
-# CONFIG_NFT_NUMGEN is not set
+CONFIG_NFT_NUMGEN=m
-# CONFIG_NFT_CT is not set
+CONFIG_NFT_CT=m
-# CONFIG_NFT_CONNLIMIT is not set
+CONFIG_NFT_FLOW_OFFLOAD=m
-# CONFIG_NFT_LOG is not set
+CONFIG_NFT_CONNLIMIT=m
-# CONFIG_NFT_LIMIT is not set
+CONFIG_NFT_LOG=m
-# CONFIG_NFT_TUNNEL is not set
+CONFIG_NFT_LIMIT=m
-# CONFIG_NFT_QUOTA is not set
+CONFIG_NFT_MASQ=m
-# CONFIG_NFT_REJECT is not set
+CONFIG_NFT_REDIR=m
-# CONFIG_NFT_COMPAT is not set
+CONFIG_NFT_NAT=m
-# CONFIG_NFT_HASH is not set
+CONFIG_NFT_TUNNEL=m
-# CONFIG_NFT_XFRM is not set
+CONFIG_NFT_QUOTA=m
-# CONFIG_NFT_SOCKET is not set
+CONFIG_NFT_REJECT=m
-# CONFIG_NFT_OSF is not set
+CONFIG_NFT_REJECT_INET=m
-# CONFIG_NFT_TPROXY is not set
+CONFIG_NFT_COMPAT=m
-# CONFIG_NFT_SYNPROXY is not set
+CONFIG_NFT_HASH=m
+CONFIG_NFT_FIB=m
+CONFIG_NFT_XFRM=m
+CONFIG_NFT_SOCKET=m
+CONFIG_NFT_OSF=m
+CONFIG_NFT_TPROXY=m
+CONFIG_NFT_SYNPROXY=m
 CONFIG_NF_DUP_NETDEV=y
-# CONFIG_NFT_DUP_NETDEV is not set
+CONFIG_NFT_DUP_NETDEV=m
 CONFIG_NFT_FWD_NETDEV=y
-# CONFIG_NF_FLOW_TABLE is not set
+CONFIG_NFT_REJECT_NETDEV=m
-CONFIG_NETFILTER_XTABLES=y
+CONFIG_NF_FLOW_TABLE_INET=m
+CONFIG_NF_FLOW_TABLE=m
+CONFIG_NF_FLOW_TABLE_PROCFS=y
+CONFIG_NETFILTER_XTABLES=m
 
 #
 # Xtables combined modules
 #
-# CONFIG_NETFILTER_XT_MARK is not set
+CONFIG_NETFILTER_XT_MARK=m
-# CONFIG_NETFILTER_XT_CONNMARK is not set
+CONFIG_NETFILTER_XT_CONNMARK=m
 
 #
 # Xtables targets
 #
+# CONFIG_NETFILTER_XT_TARGET_CHECKSUM is not set
 # CONFIG_NETFILTER_XT_TARGET_CLASSIFY is not set
 # CONFIG_NETFILTER_XT_TARGET_CONNMARK is not set
+# CONFIG_NETFILTER_XT_TARGET_CT is not set
+# CONFIG_NETFILTER_XT_TARGET_DSCP is not set
+CONFIG_NETFILTER_XT_TARGET_HL=m
 # CONFIG_NETFILTER_XT_TARGET_HMARK is not set
 # CONFIG_NETFILTER_XT_TARGET_IDLETIMER is not set
 # CONFIG_NETFILTER_XT_TARGET_LED is not set
-CONFIG_NETFILTER_XT_TARGET_LOG=y
+CONFIG_NETFILTER_XT_TARGET_LOG=m
 # CONFIG_NETFILTER_XT_TARGET_MARK is not set
+CONFIG_NETFILTER_XT_NAT=m
+CONFIG_NETFILTER_XT_TARGET_NETMAP=m
 # CONFIG_NETFILTER_XT_TARGET_NFLOG is not set
 # CONFIG_NETFILTER_XT_TARGET_NFQUEUE is not set
-# CONFIG_NETFILTER_XT_TARGET_RATEEST is not set
+# CONFIG_NETFILTER_XT_TARGET_NOTRACK is not set
+CONFIG_NETFILTER_XT_TARGET_RATEEST=m
+CONFIG_NETFILTER_XT_TARGET_REDIRECT=m
+CONFIG_NETFILTER_XT_TARGET_MASQUERADE=m
 # CONFIG_NETFILTER_XT_TARGET_TEE is not set
+# CONFIG_NETFILTER_XT_TARGET_TPROXY is not set
+# CONFIG_NETFILTER_XT_TARGET_TRACE is not set
 # CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set
+# CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set
 
 #
 # Xtables matches
 #
-# CONFIG_NETFILTER_XT_MATCH_ADDRTYPE is not set
+CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m
-# CONFIG_NETFILTER_XT_MATCH_BPF is not set
+CONFIG_NETFILTER_XT_MATCH_BPF=m
-# CONFIG_NETFILTER_XT_MATCH_CGROUP is not set
+CONFIG_NETFILTER_XT_MATCH_CGROUP=m
-# CONFIG_NETFILTER_XT_MATCH_CLUSTER is not set
+CONFIG_NETFILTER_XT_MATCH_CLUSTER=m
-# CONFIG_NETFILTER_XT_MATCH_COMMENT is not set
+CONFIG_NETFILTER_XT_MATCH_COMMENT=m
-# CONFIG_NETFILTER_XT_MATCH_CONNBYTES is not set
+CONFIG_NETFILTER_XT_MATCH_CONNBYTES=m
-# CONFIG_NETFILTER_XT_MATCH_CONNLABEL is not set
+CONFIG_NETFILTER_XT_MATCH_CONNLABEL=m
-# CONFIG_NETFILTER_XT_MATCH_CONNLIMIT is not set
+CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=m
-# CONFIG_NETFILTER_XT_MATCH_CONNMARK is not set
+CONFIG_NETFILTER_XT_MATCH_CONNMARK=m
-# CONFIG_NETFILTER_XT_MATCH_CONNTRACK is not set
+CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m
-# CONFIG_NETFILTER_XT_MATCH_CPU is not set
+CONFIG_NETFILTER_XT_MATCH_CPU=m
-# CONFIG_NETFILTER_XT_MATCH_DCCP is not set
+CONFIG_NETFILTER_XT_MATCH_DCCP=m
-# CONFIG_NETFILTER_XT_MATCH_DEVGROUP is not set
+CONFIG_NETFILTER_XT_MATCH_DEVGROUP=m
-# CONFIG_NETFILTER_XT_MATCH_DSCP is not set
+CONFIG_NETFILTER_XT_MATCH_DSCP=m
-# CONFIG_NETFILTER_XT_MATCH_ECN is not set
+CONFIG_NETFILTER_XT_MATCH_ECN=m
-# CONFIG_NETFILTER_XT_MATCH_ESP is not set
+CONFIG_NETFILTER_XT_MATCH_ESP=m
-# CONFIG_NETFILTER_XT_MATCH_HASHLIMIT is not set
+CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=m
-# CONFIG_NETFILTER_XT_MATCH_HELPER is not set
+CONFIG_NETFILTER_XT_MATCH_HELPER=m
-# CONFIG_NETFILTER_XT_MATCH_HL is not set
+CONFIG_NETFILTER_XT_MATCH_HL=m
-# CONFIG_NETFILTER_XT_MATCH_IPCOMP is not set
+CONFIG_NETFILTER_XT_MATCH_IPCOMP=m
-# CONFIG_NETFILTER_XT_MATCH_IPRANGE is not set
+CONFIG_NETFILTER_XT_MATCH_IPRANGE=m
-# CONFIG_NETFILTER_XT_MATCH_L2TP is not set
+CONFIG_NETFILTER_XT_MATCH_L2TP=m
-# CONFIG_NETFILTER_XT_MATCH_LENGTH is not set
+CONFIG_NETFILTER_XT_MATCH_LENGTH=m
-# CONFIG_NETFILTER_XT_MATCH_LIMIT is not set
+CONFIG_NETFILTER_XT_MATCH_LIMIT=m
-# CONFIG_NETFILTER_XT_MATCH_MAC is not set
+CONFIG_NETFILTER_XT_MATCH_MAC=m
-# CONFIG_NETFILTER_XT_MATCH_MARK is not set
+CONFIG_NETFILTER_XT_MATCH_MARK=m
-# CONFIG_NETFILTER_XT_MATCH_MULTIPORT is not set
+CONFIG_NETFILTER_XT_MATCH_MULTIPORT=m
-# CONFIG_NETFILTER_XT_MATCH_NFACCT is not set
+CONFIG_NETFILTER_XT_MATCH_NFACCT=m
-# CONFIG_NETFILTER_XT_MATCH_OSF is not set
+CONFIG_NETFILTER_XT_MATCH_OSF=m
-# CONFIG_NETFILTER_XT_MATCH_OWNER is not set
+CONFIG_NETFILTER_XT_MATCH_OWNER=m
-# CONFIG_NETFILTER_XT_MATCH_POLICY is not set
+CONFIG_NETFILTER_XT_MATCH_POLICY=m
-# CONFIG_NETFILTER_XT_MATCH_PKTTYPE is not set
+CONFIG_NETFILTER_XT_MATCH_PKTTYPE=m
-# CONFIG_NETFILTER_XT_MATCH_QUOTA is not set
+CONFIG_NETFILTER_XT_MATCH_QUOTA=m
-# CONFIG_NETFILTER_XT_MATCH_RATEEST is not set
+CONFIG_NETFILTER_XT_MATCH_RATEEST=m
-# CONFIG_NETFILTER_XT_MATCH_REALM is not set
+CONFIG_NETFILTER_XT_MATCH_REALM=m
-# CONFIG_NETFILTER_XT_MATCH_RECENT is not set
+CONFIG_NETFILTER_XT_MATCH_RECENT=m
-# CONFIG_NETFILTER_XT_MATCH_SCTP is not set
+CONFIG_NETFILTER_XT_MATCH_SCTP=m
-# CONFIG_NETFILTER_XT_MATCH_SOCKET is not set
+CONFIG_NETFILTER_XT_MATCH_SOCKET=m
-# CONFIG_NETFILTER_XT_MATCH_STATE is not set
+CONFIG_NETFILTER_XT_MATCH_STATE=m
-# CONFIG_NETFILTER_XT_MATCH_STATISTIC is not set
+CONFIG_NETFILTER_XT_MATCH_STATISTIC=m
-# CONFIG_NETFILTER_XT_MATCH_STRING is not set
+CONFIG_NETFILTER_XT_MATCH_STRING=m
-# CONFIG_NETFILTER_XT_MATCH_TCPMSS is not set
+CONFIG_NETFILTER_XT_MATCH_TCPMSS=m
-# CONFIG_NETFILTER_XT_MATCH_TIME is not set
+CONFIG_NETFILTER_XT_MATCH_TIME=m
-# CONFIG_NETFILTER_XT_MATCH_U32 is not set
+CONFIG_NETFILTER_XT_MATCH_U32=m
 # end of Core Netfilter Configuration
 
 # CONFIG_IP_SET is not set
@@ -1014,43 +1045,59 @@ CONFIG_NETFILTER_XT_TARGET_LOG=y
 #
 # IP: Netfilter Configuration
 #
-CONFIG_NF_DEFRAG_IPV4=y
+CONFIG_NF_DEFRAG_IPV4=m
-# CONFIG_IP_NF_IPTABLES_LEGACY is not set
+CONFIG_IP_NF_IPTABLES_LEGACY=m
-# CONFIG_NF_SOCKET_IPV4 is not set
+CONFIG_NF_SOCKET_IPV4=m
-# CONFIG_NF_TPROXY_IPV4 is not set
+CONFIG_NF_TPROXY_IPV4=m
-# CONFIG_NF_TABLES_IPV4 is not set
+CONFIG_NF_TABLES_IPV4=y
-# CONFIG_NF_TABLES_ARP is not set
+CONFIG_NFT_REJECT_IPV4=m
-# CONFIG_NF_DUP_IPV4 is not set
+CONFIG_NFT_DUP_IPV4=m
-# CONFIG_NF_LOG_ARP is not set
+CONFIG_NFT_FIB_IPV4=m
-# CONFIG_NF_LOG_IPV4 is not set
+CONFIG_NF_TABLES_ARP=y
-# CONFIG_NF_REJECT_IPV4 is not set
+CONFIG_NF_DUP_IPV4=m
-CONFIG_IP_NF_IPTABLES=y
+CONFIG_NF_LOG_ARP=m
-# CONFIG_IP_NF_MATCH_AH is not set
+CONFIG_NF_LOG_IPV4=m
-# CONFIG_IP_NF_MATCH_ECN is not set
+CONFIG_NF_REJECT_IPV4=m
-# CONFIG_IP_NF_MATCH_TTL is not set
+CONFIG_NF_NAT_SNMP_BASIC=m
-# CONFIG_IP_NF_FILTER is not set
+CONFIG_IP_NF_IPTABLES=m
-# CONFIG_IP_NF_TARGET_SYNPROXY is not set
+CONFIG_IP_NF_MATCH_AH=m
-# CONFIG_IP_NF_NAT is not set
+CONFIG_IP_NF_MATCH_ECN=m
-# CONFIG_IP_NF_MANGLE is not set
+CONFIG_IP_NF_MATCH_RPFILTER=m
-# CONFIG_IP_NF_RAW is not set
+CONFIG_IP_NF_MATCH_TTL=m
-# CONFIG_IP_NF_ARPTABLES is not set
+CONFIG_IP_NF_FILTER=m
-# CONFIG_IP_NF_ARPFILTER is not set
+CONFIG_IP_NF_TARGET_REJECT=m
+CONFIG_IP_NF_TARGET_SYNPROXY=m
+CONFIG_IP_NF_NAT=m
+CONFIG_IP_NF_TARGET_MASQUERADE=m
+CONFIG_IP_NF_TARGET_NETMAP=m
+CONFIG_IP_NF_TARGET_REDIRECT=m
+CONFIG_IP_NF_MANGLE=m
+CONFIG_IP_NF_TARGET_ECN=m
+CONFIG_IP_NF_TARGET_TTL=m
+CONFIG_IP_NF_RAW=m
+CONFIG_IP_NF_ARPTABLES=m
+CONFIG_NFT_COMPAT_ARP=m
+CONFIG_IP_NF_ARPFILTER=m
+CONFIG_IP_NF_ARP_MANGLE=m
 # end of IP: Netfilter Configuration
 
 #
 # IPv6: Netfilter Configuration
 #
 # CONFIG_IP6_NF_IPTABLES_LEGACY is not set
-# CONFIG_NF_SOCKET_IPV6 is not set
+CONFIG_NF_SOCKET_IPV6=m
-# CONFIG_NF_TPROXY_IPV6 is not set
+CONFIG_NF_TPROXY_IPV6=m
-# CONFIG_NF_TABLES_IPV6 is not set
+CONFIG_NF_TABLES_IPV6=y
+CONFIG_NFT_REJECT_IPV6=m
+# CONFIG_NFT_DUP_IPV6 is not set
+# CONFIG_NFT_FIB_IPV6 is not set
 # CONFIG_NF_DUP_IPV6 is not set
-# CONFIG_NF_REJECT_IPV6 is not set
+CONFIG_NF_REJECT_IPV6=m
 # CONFIG_NF_LOG_IPV6 is not set
 # CONFIG_IP6_NF_IPTABLES is not set
 # end of IPv6: Netfilter Configuration
 
-CONFIG_NF_DEFRAG_IPV6=y
+CONFIG_NF_DEFRAG_IPV6=m
 # CONFIG_NF_TABLES_BRIDGE is not set
 # CONFIG_NF_CONNTRACK_BRIDGE is not set
 # CONFIG_BRIDGE_NF_EBTABLES_LEGACY is not set
@@ -1100,7 +1147,7 @@ CONFIG_RFS_ACCEL=y
 CONFIG_SOCK_RX_QUEUE_MAPPING=y
 CONFIG_XPS=y
 # CONFIG_CGROUP_NET_PRIO is not set
-# CONFIG_CGROUP_NET_CLASSID is not set
+CONFIG_CGROUP_NET_CLASSID=y
 CONFIG_NET_RX_BUSY_POLL=y
 CONFIG_BQL=y
 CONFIG_NET_FLOW_LIMIT=y
@@ -5788,6 +5835,10 @@ CONFIG_DECOMPRESS_LZO=y
 CONFIG_DECOMPRESS_LZ4=y
 CONFIG_DECOMPRESS_ZSTD=y
 CONFIG_GENERIC_ALLOCATOR=y
+CONFIG_TEXTSEARCH=y
+CONFIG_TEXTSEARCH_KMP=m
+CONFIG_TEXTSEARCH_BM=m
+CONFIG_TEXTSEARCH_FSM=m
 CONFIG_XARRAY_MULTI=y
 CONFIG_ASSOCIATIVE_ARRAY=y
 CONFIG_HAS_IOMEM=y

scripts/build_image.sh

@@ -14,6 +14,7 @@
 . ./scripts/iw.sh
 . ./scripts/hostapd.sh
 . ./scripts/openssl.sh
+. ./scripts/iptables.sh
 
 case $1 in
     build)
@@ -48,6 +49,9 @@ case $1 in
     openssl)
         openssl
         ;;
+    iptables)
+        iptables
+        ;;
     sdroot_usable)
         if [ ! -d downloads ]; then
           download_sources

scripts/config.sh

@@ -37,4 +37,5 @@ export wpa_supplicant_enable="false"
 export hostapd_enable="false"
 export openssl_enable="false"
 export dnsmasq_enable="true"
+export iptables_enable="true"
 #--------------------------------------

scripts/iptables.sh

@@ -0,0 +1,34 @@
+#!/bin/bash
+
+. ./scripts/colors.sh
+. ./scripts/funcs.sh
+. ./scripts/config.sh
+
+iptables() {
+    pkgname=iptables
+    pkgver=1.8.11
+    printf "$GREEN** Building and installing $pkgname\n$RESET"
+    [ ! -d $build/$pkgname ] && mkdir $build/$pkgname
+    cd $build/$pkgname
+    tar -xvf $root/downloads/${pkgname}-${pkgver}.tar.xz
+    cd ${pkgname}-${pkgver}
+    ./configure \
+        --prefix=/usr \
+        --build=x86_64-pc-linux-gnu \
+        --host=${CROSS_COMPILE} \
+        --disable-nftables \
+        --disable-libnfnetlink \
+        --disable-connlabel
+    check $? "Configure ${pkgname}"
+    make ${makeflags}
+    check $? "Build ${pkgname}"
+    make install DESTDIR=$rootfspath
+    check $? "Install to rootfs ${pkgname}"
+    ${CROSS_COMPILE}-strip \
+        $rootfspath/usr/bin/* \
+        $rootfspath/usr/sbin/* \
+        $rootfspath/usr/lib/* \
+        $rootfspath/usr/lib/xtables/*
+    rm -rv $rootfspath/usr/share/man
+    printf "$GREEN** SUCCESS: Building and installing ${pkgname}\n$RESET"
+}

scripts/rootfs.sh

@@ -18,6 +18,7 @@
 . ./scripts/openssl.sh
 . ./scripts/hostapd.sh
 . ./scripts/dnsmasq.sh
+. ./scripts/iptables.sh
 
 #----------- Building rootfs ----------------------
 rootfs() {
@@ -62,6 +63,7 @@ rootfs() {
     [ "$libnl_enable" = "true" ] && libnl
     [ "$iw_enable" = "true" ] && iw
     [ "$hostapd_enable" = "true" ] && hostapd
+    [ "$iptables_enable" = "true" ] && iptables
 
     chmod 640 $rootfspath/etc/shadow $rootfspath/etc/inittab
     chmod 755 $rootfspath/etc/init.d/* $rootfspath/usr/share/udhcpc/default.script $rootfspath/init