[Swan] iptables

[Andrew Cagney]

On Sat, 23 Sept 2023 at 22:45, manfred <mx2927 at gmail.com> wrote:
>
> As a suggestion, it may be useful for config.mk to have a comment list
> of USE_* and HAVE_* variables that may be enabled in the right place.
>
>
> On 9/23/2023 10:50 AM, manfred wrote:
> > mk/defaults/linux.mk has this:
> >
> > ifneq ($(HAVE_NFTABLES), true)
> >    HAVE_IPTABLES ?= true
> > endif
> >
> > So, most likely you have to define:
> >
> > HAVE_NFTABLES ?= true
> >
> > early in config.mk.

The preferred way to do this when building libreswan as part of a
package is to add it to the package file's build line vis:
  gmake HAVE_NFTABLES=true
The alternative, for when you're hacking on libreswan locally, is to
create the file Makefile.inc.local and add:
  HAVE_NFTABLES=true
Having to directly edit the sources should raise a red flag.