1 Installation instructions for iptables
2 ======================================
4 iptables uses the well-known configure(autotools) infrastructure.
14 * no kernel-source required
16 * but obviously a compiler, glibc-devel and linux-kernel-headers
20 Configuring and compiling
21 =========================
27 The prefix to put all installed files under. It defaults to
28 /usr/local, so the binaries will go into /usr/local/bin, sbin,
29 manpages into /usr/local/share/man, etc.
33 The path to where Xtables extensions should be installed to. It
34 defaults to ${prefix}/libexec/xtables.
36 --enable-devel (or --disable-devel)
38 This option causes development files to be installed to
39 ${includedir}, which is needed for building additional packages,
40 such as Xtables-addons or other 3rd-party extensions.
42 It is enabled by default.
46 Produce additional binaries, iptables-static/ip6tables-static,
47 which have all shipped extensions compiled in.
51 Produce binaries that have dynamic loading of extensions disabled.
52 This implies --enable-static.
53 (See some details below.)
57 This option causes libipq to be installed into ${libdir} and
62 Xtables does not depend on kernel headers anymore, but you can
63 optionally specify a search path to include anyway. This is
64 probably only useful for development.
66 If you want to enable debugging, use
68 ./configure CFLAGS="-ggdb3 -O0"
70 (-O0 is used to turn off instruction reordering, which makes debugging
77 The make process will automatically build multipurpose binaries.
78 These have the core (iptables), -save, -restore and -xml code
79 compiled into one binary, but extensions remain as modules.
85 Basically there are three configuration modes defined:
87 --disable-static --enable-shared (this is the default)
89 Build a binary that relies upon dynamic loading of extensions.
91 --enable-static --enable-shared
93 Build a binary that has the shipped extensions built-in, but
94 is still capable of loading additional extensions.
96 --enable-static --disable-shared
98 Shipped extensions are built-in, and dynamic loading is