2004-09-09 06:24:45 +00:00
|
|
|
|
%define build_devel 1
|
2004-09-09 06:22:13 +00:00
|
|
|
|
|
2004-09-09 06:19:25 +00:00
|
|
|
|
Name: iptables
|
|
|
|
|
|
Summary: Tools for managing Linux kernel packet filtering capabilities.
|
2006-02-02 13:24:00 +00:00
|
|
|
|
Version: 1.3.5
|
2006-02-11 03:37:55 +00:00
|
|
|
|
Release: 1.2
|
2004-09-09 06:21:27 +00:00
|
|
|
|
Source: http://www.netfilter.org/%{name}-%{version}.tar.bz2
|
2004-09-09 06:19:38 +00:00
|
|
|
|
Source1: iptables.init
|
2004-09-09 06:22:13 +00:00
|
|
|
|
Source2: iptables-config
|
2004-09-09 06:24:45 +00:00
|
|
|
|
Patch2: iptables-1.2.8-nolibnsl.patch
|
2004-09-09 06:25:10 +00:00
|
|
|
|
Patch4: iptables-1.2.9-netlink.patch
|
2005-02-22 11:09:58 +00:00
|
|
|
|
Patch5: iptables-1.3.0-selinux.patch
|
2004-09-09 06:26:03 +00:00
|
|
|
|
Patch6: iptables-1.2.10-counters.patch
|
2005-03-18 16:40:36 +00:00
|
|
|
|
Patch8: iptables-1.3.0-cleanup.patch
|
2005-02-22 11:09:58 +00:00
|
|
|
|
Patch9: iptables-1.3.0-autoload.patch
|
2005-03-18 16:40:36 +00:00
|
|
|
|
Patch10: iptables-1.3.0-no_root.patch
|
2004-09-09 06:19:25 +00:00
|
|
|
|
Group: System Environment/Base
|
2004-09-09 06:20:32 +00:00
|
|
|
|
URL: http://www.netfilter.org/
|
2004-09-09 06:19:25 +00:00
|
|
|
|
BuildRoot: %{_tmppath}/%{name}-buildroot
|
|
|
|
|
|
License: GPL
|
|
|
|
|
|
BuildPrereq: /usr/bin/perl
|
2005-03-18 16:40:36 +00:00
|
|
|
|
Conflicts: kernel < 2.4.20
|
2004-09-09 06:19:38 +00:00
|
|
|
|
Requires(post,postun): chkconfig
|
2004-09-09 06:19:25 +00:00
|
|
|
|
Prefix: %{_prefix}
|
2004-09-09 06:19:38 +00:00
|
|
|
|
|
|
|
|
|
|
%package ipv6
|
2004-09-09 06:19:55 +00:00
|
|
|
|
Summary: IPv6 support for iptables.
|
2004-09-09 06:19:38 +00:00
|
|
|
|
Group: System Environment/Base
|
|
|
|
|
|
Requires: %{name} = %{version}
|
2004-09-09 06:19:25 +00:00
|
|
|
|
|
2004-09-09 06:22:13 +00:00
|
|
|
|
%if %{build_devel}
|
|
|
|
|
|
%package devel
|
|
|
|
|
|
Summary: Development package for iptables.
|
|
|
|
|
|
Group: System Environment/Base
|
|
|
|
|
|
Requires: %{name} = %{version}
|
|
|
|
|
|
%endif
|
|
|
|
|
|
|
2004-09-09 06:19:25 +00:00
|
|
|
|
%description
|
2004-09-09 06:19:55 +00:00
|
|
|
|
The iptables utility controls the network packet filtering code in the
|
|
|
|
|
|
Linux kernel. If you need to set up firewalls and/or IP masquerading,
|
|
|
|
|
|
you should install this package.
|
2004-09-09 06:19:25 +00:00
|
|
|
|
|
2004-09-09 06:19:38 +00:00
|
|
|
|
%description ipv6
|
2004-09-09 06:19:55 +00:00
|
|
|
|
The iptables package contains IPv6 (the next version of the IP
|
|
|
|
|
|
protocol) support for iptables. Iptables controls the Linux kernel
|
|
|
|
|
|
network packet filtering code, allowing you to set up firewalls and IP
|
|
|
|
|
|
masquerading.
|
2004-09-09 06:19:38 +00:00
|
|
|
|
|
|
|
|
|
|
Install iptables-ipv6 if you need to set up firewalling for your
|
2004-09-09 06:19:55 +00:00
|
|
|
|
network and you are using ipv6.
|
2004-09-09 06:19:38 +00:00
|
|
|
|
|
2004-09-09 06:22:13 +00:00
|
|
|
|
%if %{build_devel}
|
|
|
|
|
|
%description devel
|
|
|
|
|
|
The iptables utility controls the network packet filtering code in the
|
|
|
|
|
|
Linux kernel. If you need to set up firewalls and/or IP masquerading,
|
|
|
|
|
|
you should install this package.
|
|
|
|
|
|
%endif
|
|
|
|
|
|
|
2004-09-09 06:19:25 +00:00
|
|
|
|
%prep
|
|
|
|
|
|
rm -rf %{buildroot}
|
|
|
|
|
|
|
|
|
|
|
|
%setup -q
|
2004-09-09 06:24:45 +00:00
|
|
|
|
%patch2 -p1 -b .nolibnsl
|
2004-09-09 06:24:55 +00:00
|
|
|
|
%patch4 -p1 -b .netlink
|
2004-09-09 06:25:17 +00:00
|
|
|
|
%patch5 -p1 -b .selinux
|
2004-09-09 06:25:49 +00:00
|
|
|
|
%patch6 -p1 -b .counters
|
2004-09-16 16:12:07 +00:00
|
|
|
|
%patch8 -p1 -b .cleanup
|
2004-11-11 11:55:39 +00:00
|
|
|
|
%patch9 -p1 -b .autoload
|
2005-03-18 16:40:36 +00:00
|
|
|
|
%patch10 -p1 -b .no_root
|
2004-09-09 06:21:27 +00:00
|
|
|
|
|
2004-09-09 06:19:25 +00:00
|
|
|
|
# Put it to a reasonable place
|
2004-09-09 06:22:13 +00:00
|
|
|
|
find . -type f -exec perl -pi -e "s,/usr/local,%{prefix},g" {} \;
|
2004-09-09 06:19:25 +00:00
|
|
|
|
|
2005-11-25 17:03:17 +00:00
|
|
|
|
# do not use ld -shared and _init
|
|
|
|
|
|
perl -pi -e "s/\(LD\) -shared/\(CC\) -shared/g" Rules.make
|
|
|
|
|
|
perl -pi -e "s/void _init\(/void __attribute\(\(constructor\)\) my_init\(/g" extensions/*.c
|
|
|
|
|
|
perl -pi -e "s/^_init\(/__attribute\(\(constructor\)\) my_init\(/g" extensions/*.c
|
|
|
|
|
|
|
2004-09-09 06:19:25 +00:00
|
|
|
|
%build
|
2004-09-09 06:22:13 +00:00
|
|
|
|
TOPDIR=`pwd`
|
2005-11-18 12:26:15 +00:00
|
|
|
|
OPT="$RPM_OPT_FLAGS -I$TOPDIR/include -fPIC"
|
2004-09-09 06:21:27 +00:00
|
|
|
|
make COPT_FLAGS="$OPT" KERNEL_DIR=/usr LIBDIR=/%{_lib}
|
|
|
|
|
|
make COPT_FLAGS="$OPT" KERNEL_DIR=/usr LIBDIR=/%{_lib} iptables-save iptables-restore
|
2004-09-09 06:22:13 +00:00
|
|
|
|
make COPT_FLAGS="$OPT" KERNEL_DIR=/usr LIBDIR=/%{_lib} ip6tables-save ip6tables-restore
|
2004-09-09 06:19:25 +00:00
|
|
|
|
|
|
|
|
|
|
%install
|
2004-09-09 06:21:27 +00:00
|
|
|
|
make install DESTDIR=%{buildroot} KERNEL_DIR=/usr BINDIR=/sbin LIBDIR=/%{_lib} MANDIR=%{_mandir}
|
2004-09-09 06:22:13 +00:00
|
|
|
|
%if %{build_devel}
|
|
|
|
|
|
make install-devel DESTDIR=%{buildroot} KERNEL_DIR=/usr BINDIR=/sbin LIBDIR=%{_libdir} MANDIR=%{_mandir}
|
|
|
|
|
|
%endif
|
2004-09-09 06:20:32 +00:00
|
|
|
|
cp ip{6,}tables-{save,restore} $RPM_BUILD_ROOT/sbin
|
2004-09-09 06:19:38 +00:00
|
|
|
|
cp iptables-*.8 $RPM_BUILD_ROOT%{_mandir}/man8
|
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d
|
|
|
|
|
|
install -c -m755 %{SOURCE1} $RPM_BUILD_ROOT/etc/rc.d/init.d/iptables
|
2004-09-09 06:22:13 +00:00
|
|
|
|
sed -e 's;iptables;ip6tables;g' -e 's;IPTABLES;IP6TABLES;g' < %{SOURCE1} > ip6tables.init
|
|
|
|
|
|
install -c -m755 ip6tables.init $RPM_BUILD_ROOT/etc/rc.d/init.d/ip6tables
|
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/etc/sysconfig
|
|
|
|
|
|
install -c -m755 %{SOURCE2} $RPM_BUILD_ROOT/etc/sysconfig/iptables-config
|
|
|
|
|
|
sed -e 's;iptables;ip6tables;g' -e 's;IPTABLES;IP6TABLES;g' < %{SOURCE2} > ip6tables-config
|
|
|
|
|
|
install -c -m755 ip6tables-config $RPM_BUILD_ROOT/etc/sysconfig/ip6tables-config
|
2006-01-24 14:18:57 +00:00
|
|
|
|
# install devel header files
|
|
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/usr/include
|
|
|
|
|
|
install -c include/ip*.h $RPM_BUILD_ROOT/usr/include/
|
|
|
|
|
|
|
2004-09-09 06:19:25 +00:00
|
|
|
|
|
|
|
|
|
|
%clean
|
2004-09-09 06:22:13 +00:00
|
|
|
|
rm -rf $RPM_BUILD_ROOT
|
2004-09-09 06:19:38 +00:00
|
|
|
|
|
|
|
|
|
|
%post
|
2004-09-09 06:20:32 +00:00
|
|
|
|
/sbin/chkconfig --add iptables
|
2004-09-09 06:19:38 +00:00
|
|
|
|
|
|
|
|
|
|
%preun
|
2004-09-09 06:20:13 +00:00
|
|
|
|
if [ "$1" = 0 ]; then
|
2004-09-09 06:20:32 +00:00
|
|
|
|
/sbin/chkconfig --del iptables
|
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
|
|
%post ipv6
|
|
|
|
|
|
/sbin/chkconfig --add ip6tables
|
|
|
|
|
|
|
|
|
|
|
|
%preun ipv6
|
|
|
|
|
|
if [ "$1" = 0 ]; then
|
|
|
|
|
|
/sbin/chkconfig --del ip6tables
|
2004-09-09 06:19:55 +00:00
|
|
|
|
fi
|
2004-09-09 06:19:25 +00:00
|
|
|
|
|
|
|
|
|
|
%files
|
|
|
|
|
|
%defattr(-,root,root,0755)
|
2004-09-09 06:25:10 +00:00
|
|
|
|
%doc COPYING INSTALL INCOMPATIBILITIES
|
2004-09-09 06:23:13 +00:00
|
|
|
|
%config %attr(0755,root,root) /etc/rc.d/init.d/iptables
|
2004-09-09 06:22:13 +00:00
|
|
|
|
%config(noreplace) %attr(0600,root,root) /etc/sysconfig/iptables-config
|
2004-09-09 06:19:38 +00:00
|
|
|
|
/sbin/iptables*
|
2004-09-09 06:22:13 +00:00
|
|
|
|
%{_mandir}/man8/iptables*
|
2004-09-09 06:21:27 +00:00
|
|
|
|
%dir /%{_lib}/iptables
|
|
|
|
|
|
/%{_lib}/iptables/libipt*
|
2004-09-09 06:19:38 +00:00
|
|
|
|
|
|
|
|
|
|
%files ipv6
|
|
|
|
|
|
%defattr(-,root,root,0755)
|
2004-09-09 06:23:13 +00:00
|
|
|
|
%config %attr(0755,root,root) /etc/rc.d/init.d/ip6tables
|
2004-09-09 06:22:13 +00:00
|
|
|
|
%config(noreplace) %attr(0600,root,root) /etc/sysconfig/ip6tables-config
|
2004-09-09 06:20:32 +00:00
|
|
|
|
/sbin/ip6tables*
|
2004-09-09 06:22:13 +00:00
|
|
|
|
%{_mandir}/man8/ip6tables*
|
2004-09-09 06:21:27 +00:00
|
|
|
|
/%{_lib}/iptables/libip6t*
|
2004-09-09 06:22:13 +00:00
|
|
|
|
|
|
|
|
|
|
%if %{build_devel}
|
|
|
|
|
|
%files devel
|
|
|
|
|
|
%defattr(-,root,root,0755)
|
2006-01-24 14:18:57 +00:00
|
|
|
|
%{_includedir}/ip*.h
|
2004-09-09 06:22:13 +00:00
|
|
|
|
%{_includedir}/libipq.h
|
|
|
|
|
|
%{_libdir}/libipq.a
|
|
|
|
|
|
%{_libdir}/libiptc.a
|
|
|
|
|
|
%{_mandir}/man3/*
|
|
|
|
|
|
%endif
|
2004-09-09 06:19:25 +00:00
|
|
|
|
|
|
|
|
|
|
%changelog
|
2006-02-11 03:37:55 +00:00
|
|
|
|
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.2
|
|
|
|
|
|
- bump again for double-long bug on ppc(64)
|
|
|
|
|
|
|
2006-02-07 12:17:14 +00:00
|
|
|
|
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.1
|
|
|
|
|
|
- rebuilt for new gcc4.1 snapshot and glibc changes
|
|
|
|
|
|
|
2006-02-02 13:24:00 +00:00
|
|
|
|
* Thu Feb 2 2006 Thomas Woerner <twoerner@redhat.com> 1.3.5-1
|
|
|
|
|
|
- new version 1.3.5
|
|
|
|
|
|
- fixed init script to set policy for raw tables, too (#179094)
|
|
|
|
|
|
|
2006-01-24 14:18:57 +00:00
|
|
|
|
* Tue Jan 24 2006 Thomas Woerner <twoerner@redhat.com> 1.3.4-3
|
|
|
|
|
|
- added important iptables header files to devel package
|
|
|
|
|
|
|
2005-12-09 22:41:00 +00:00
|
|
|
|
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
|
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
|
2005-11-25 17:03:17 +00:00
|
|
|
|
* Fri Nov 25 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-2
|
|
|
|
|
|
- fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and
|
|
|
|
|
|
replace "_init" with "__attribute((constructor)) my_init"
|
|
|
|
|
|
|
2005-11-25 13:27:51 +00:00
|
|
|
|
* Fri Nov 25 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-1.1
|
|
|
|
|
|
- rebuild due to unresolved symbols in shared libraries
|
|
|
|
|
|
|
2005-11-18 12:26:15 +00:00
|
|
|
|
* Fri Nov 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-1
|
|
|
|
|
|
- new version 1.3.4
|
|
|
|
|
|
- dropped free_opts patch (upstream fixed)
|
|
|
|
|
|
- made libipq PIC (#158623)
|
|
|
|
|
|
- additional configuration options for iptables startup script (#172929)
|
|
|
|
|
|
Thanks to Jan Gruenwald for the patch
|
|
|
|
|
|
- spec file cleanup (dropped linux_header define and usage)
|
|
|
|
|
|
|
2005-07-18 12:16:48 +00:00
|
|
|
|
* Mon Jul 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.2-1
|
|
|
|
|
|
- new version 1.3.2 with additional patch for the misplaced free_opts call
|
|
|
|
|
|
from Marcus Sundberg
|
|
|
|
|
|
|
2005-05-11 13:49:05 +00:00
|
|
|
|
* Wed May 11 2005 Thomas Woerner <twoerner@redhat.com> 1.3.1-1
|
|
|
|
|
|
- new version 1.3.1
|
|
|
|
|
|
|
2005-03-18 16:40:36 +00:00
|
|
|
|
* Fri Mar 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-2
|
|
|
|
|
|
- Remove unnecessary explicit kernel dep (#146142)
|
|
|
|
|
|
- Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
|
|
|
|
|
|
for the patch
|
|
|
|
|
|
- Adapted iptables-config to reference to modprobe.conf (#150143)
|
|
|
|
|
|
- Remove misleading message (#140154): Thanks to Ulrich Drepper
|
|
|
|
|
|
for the patch
|
|
|
|
|
|
|
2005-02-22 11:09:58 +00:00
|
|
|
|
* Mon Feb 21 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-1
|
|
|
|
|
|
- new version 1.3.0
|
|
|
|
|
|
|
2004-11-11 11:55:39 +00:00
|
|
|
|
* Thu Nov 11 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3.2
|
|
|
|
|
|
- fixed autoload problem in iptables and ip6tables (CAN-2004-0986)
|
|
|
|
|
|
|
2004-09-17 10:41:31 +00:00
|
|
|
|
* Fri Sep 17 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1
|
|
|
|
|
|
- changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
|
|
|
|
|
|
- modified config file to match this change and un-commented variables with
|
|
|
|
|
|
default values
|
|
|
|
|
|
|
2004-09-16 16:12:07 +00:00
|
|
|
|
* Thu Sep 16 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3
|
|
|
|
|
|
- applied second part of cleanup patch from (#131848): thanks to Steve Grubb
|
|
|
|
|
|
for the patch
|
|
|
|
|
|
|
2004-09-09 06:26:30 +00:00
|
|
|
|
* Wed Aug 25 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-2
|
|
|
|
|
|
- fixed free bug in iptables (#128322)
|
|
|
|
|
|
|
2004-09-09 06:26:05 +00:00
|
|
|
|
* Tue Jun 22 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-1
|
|
|
|
|
|
- new version 1.2.11
|
|
|
|
|
|
|
2004-09-09 06:26:03 +00:00
|
|
|
|
* Thu Jun 17 2004 Thomas Woerner <twoerner@redhat.com> 1.2.10-1
|
|
|
|
|
|
- new version 1.2.10
|
|
|
|
|
|
|
2004-09-09 06:25:55 +00:00
|
|
|
|
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
|
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
|
2004-09-09 06:25:49 +00:00
|
|
|
|
* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
|
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Feb 26 2004 Thomas Woerner <twoerner@redhat.com> 1.2.9-2.3
|
|
|
|
|
|
- fixed iptables-restore -c fault if there are no counters (#116421)
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
|
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
|
2004-09-09 06:25:17 +00:00
|
|
|
|
* Sun Jan 25 2004 Dan Walsh <dwalsh@redhat.com> 1.2.9-1.2
|
|
|
|
|
|
- Close File descriptors to prevent SELinux error message
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jan 7 2004 Thomas Woerner <twoerner@redhat.com> 1.2.9-1.1
|
|
|
|
|
|
- rebuild
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Dec 17 2003 Thomas Woerner <twoerner@redhat.com> 1.2.9-1
|
2004-09-09 06:25:10 +00:00
|
|
|
|
- vew version 1.2.9
|
|
|
|
|
|
- new config options in ipXtables-config:
|
|
|
|
|
|
IPTABLES_MODULES_UNLOAD
|
|
|
|
|
|
- more documentation in ipXtables-config
|
|
|
|
|
|
- fix for netlink security issue in libipq (devel package)
|
|
|
|
|
|
- print fix for libipt_icmp (#109546)
|
2004-09-09 06:24:55 +00:00
|
|
|
|
|
2004-09-09 06:24:45 +00:00
|
|
|
|
* Thu Oct 23 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-13
|
|
|
|
|
|
- marked all messages in iptables init script for translation (#107462)
|
|
|
|
|
|
- enabled devel package (#105884, #106101)
|
|
|
|
|
|
- bumped build for fedora for libipt_recent.so (#106002)
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Sep 23 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1
|
|
|
|
|
|
- fixed lost udp port range in ip6tables-save (#104484)
|
|
|
|
|
|
- fixed non numeric multiport port output in ipXtables-savs
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Sep 22 2003 Florian La Roche <Florian.LaRoche@redhat.de> 1.2.8-11
|
|
|
|
|
|
- do not link against -lnsl
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Sep 17 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-10
|
2004-09-09 06:23:22 +00:00
|
|
|
|
- made variables in rmmod_r local
|
|
|
|
|
|
|
2004-09-09 06:24:45 +00:00
|
|
|
|
* Tue Jul 22 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-9
|
2004-09-09 06:23:13 +00:00
|
|
|
|
- fixed permission for init script
|
|
|
|
|
|
|
|
|
|
|
|
* Sat Jul 19 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-8
|
2004-09-09 06:22:13 +00:00
|
|
|
|
- fixed save when iptables file is missing and iptables-config permissions
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Jul 8 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-7
|
|
|
|
|
|
- fixes for ip6tables: module unloading, setting policy only for existing
|
|
|
|
|
|
tables
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jul 3 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-6
|
|
|
|
|
|
- IPTABLES_SAVE_COUNTER defaults to no, now
|
|
|
|
|
|
- install config file in /etc/sysconfig
|
|
|
|
|
|
- exchange unload of ip_tables and ip_conntrack
|
|
|
|
|
|
- fixed start function
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jul 2 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-5
|
|
|
|
|
|
- new config option IPTABLES_SAVE_ON_RESTART
|
|
|
|
|
|
- init script: new status, save and restart
|
|
|
|
|
|
- fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jun 30 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-4
|
|
|
|
|
|
- new config option IPTABLES_STATUS_NUMERIC
|
|
|
|
|
|
- cleared IPTABLES_MODULES in iptables-config
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jun 30 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-3
|
|
|
|
|
|
- new init scripts
|
|
|
|
|
|
|
|
|
|
|
|
* Sat Jun 28 2003 Florian La Roche <Florian.LaRoche@redhat.de>
|
|
|
|
|
|
- remove check for very old kernel versions in init scripts
|
|
|
|
|
|
- sync up both init scripts and remove some further ugly things
|
|
|
|
|
|
- add some docu into rpm
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jun 26 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-2
|
|
|
|
|
|
- rebuild
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jun 16 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-1
|
|
|
|
|
|
- update to 1.2.8
|
|
|
|
|
|
|
2004-09-09 06:21:27 +00:00
|
|
|
|
* Wed Jan 22 2003 Tim Powers <timp@redhat.com>
|
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jan 13 2003 Bill Nottingham <notting@redhat.com> 1.2.7a-1
|
|
|
|
|
|
- update to 1.2.7a
|
|
|
|
|
|
- add a plethora of bugfixes courtesy Michael Schwendt <mschewndt@yahoo.com>
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Dec 13 2002 Elliot Lee <sopwith@redhat.com> 1.2.6a-3
|
|
|
|
|
|
- Fix multilib
|
|
|
|
|
|
|
2004-09-09 06:21:23 +00:00
|
|
|
|
* Wed Aug 07 2002 Karsten Hopp <karsten@redhat.de>
|
|
|
|
|
|
- fixed iptables and ip6tables initscript output, based on #70511
|
|
|
|
|
|
- check return status of all iptables calls, not just the last one
|
|
|
|
|
|
in a 'for' loop.
|
|
|
|
|
|
|
2004-09-09 06:21:17 +00:00
|
|
|
|
* Mon Jul 29 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.6a-1
|
|
|
|
|
|
- 1.2.6a (bugfix release, #69747)
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
|
|
|
|
|
|
- automated rebuild
|
|
|
|
|
|
|
|
|
|
|
|
* Thu May 23 2002 Tim Powers <timp@redhat.com>
|
|
|
|
|
|
- automated rebuild
|
|
|
|
|
|
|
2004-09-09 06:21:00 +00:00
|
|
|
|
* Mon Mar 4 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-3
|
|
|
|
|
|
- Add some fixes from CVS, fixing bug #60465
|
|
|
|
|
|
|
2004-09-09 06:20:32 +00:00
|
|
|
|
* Tue Feb 12 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2
|
|
|
|
|
|
- Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
|
|
|
|
|
|
#59402
|
|
|
|
|
|
- Update URL (#59354)
|
|
|
|
|
|
- Use /sbin/chkconfig rather than chkconfig in %postun script
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Jan 11 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-1
|
|
|
|
|
|
- 1.2.5
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jan 09 2002 Tim Powers <timp@redhat.com>
|
|
|
|
|
|
- automated rebuild
|
2004-09-09 06:20:22 +00:00
|
|
|
|
|
2004-09-09 06:20:13 +00:00
|
|
|
|
* Mon Nov 5 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-2
|
|
|
|
|
|
- Fix %preun script
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Oct 30 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1
|
|
|
|
|
|
- Update to 1.2.4 (various fixes, including security fixes; among others:
|
|
|
|
|
|
#42990, #50500, #53325, #54280)
|
|
|
|
|
|
- Fix init script (#31133)
|
2004-09-09 06:20:04 +00:00
|
|
|
|
|
2004-09-09 06:19:55 +00:00
|
|
|
|
* Mon Sep 3 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-1
|
|
|
|
|
|
- 1.2.3 (5 security fixes, some other fixes)
|
|
|
|
|
|
- Fix updating (#53032)
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Aug 27 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-4
|
|
|
|
|
|
- Fix #50990
|
|
|
|
|
|
- Add some fixes from current CVS; should fix #52620
|
|
|
|
|
|
|
2004-09-09 06:19:48 +00:00
|
|
|
|
* Mon Jul 16 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-3
|
|
|
|
|
|
- Add some fixes from the current CVS tree; fixes #49154 and some IPv6
|
|
|
|
|
|
issues
|
|
|
|
|
|
|
2004-09-09 06:19:45 +00:00
|
|
|
|
* Tue Jun 26 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-2
|
|
|
|
|
|
- Fix iptables-save reject-with (#45632), Patch from Michael Schwendt
|
|
|
|
|
|
<mschwendt@yahoo.com>
|
|
|
|
|
|
|
|
|
|
|
|
* Tue May 8 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-1
|
|
|
|
|
|
- 1.2.2
|
|
|
|
|
|
|
2004-09-09 06:19:38 +00:00
|
|
|
|
* Wed Mar 21 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
|
|
|
|
- 1.2.1a, fixes #28412, #31136, #31460, #31133
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Mar 1 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
|
|
|
|
- Yet another initscript fix (#30173)
|
|
|
|
|
|
- Fix the fixes; they fixed some issues but broke more important
|
|
|
|
|
|
stuff :/ (#30176)
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Feb 27 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
|
|
|
|
- Fix up initscript (#27962)
|
|
|
|
|
|
- Add fixes from CVS to iptables-{restore,save}, fixing #28412
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Feb 09 2001 Karsten Hopp <karsten@redhat.de>
|
|
|
|
|
|
- create /etc/sysconfig/iptables mode 600 (same problem as #24245)
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Feb 05 2001 Karsten Hopp <karsten@redhat.de>
|
|
|
|
|
|
- fix bugzilla #25986 (initscript not marked as config file)
|
|
|
|
|
|
- fix bugzilla #25962 (iptables-restore)
|
|
|
|
|
|
- mv chkconfig --del from postun to preun
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Feb 1 2001 Trond Eivind Glomsr<EFBFBD>d <teg@redhat.com>
|
|
|
|
|
|
- Fix check for ipchains
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jan 29 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
|
|
|
|
- Some fixes to init scripts
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jan 24 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
|
|
|
|
- Add some fixes from CVS, fixes among other things Bug #24732
|
|
|
|
|
|
|
|
|
|
|
|
* Wed Jan 17 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
|
|
|
|
- Add missing man pages, fix up init script (Bug #17676)
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jan 15 2001 Bill Nottingham <notting@redhat.com>
|
|
|
|
|
|
- add init script
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jan 15 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
|
|
|
|
- 1.2
|
|
|
|
|
|
- fix up ipv6 split
|
|
|
|
|
|
- add init script
|
|
|
|
|
|
- Move the plugins from /usr/lib/iptables to /lib/iptables.
|
|
|
|
|
|
This needs to work before /usr is mounted...
|
|
|
|
|
|
- Use -O1 on alpha (compiler bug)
|
|
|
|
|
|
|
|
|
|
|
|
* Sat Jan 6 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
|
|
|
|
- 1.1.2
|
|
|
|
|
|
- Add IPv6 support (in separate package)
|
|
|
|
|
|
|
2004-09-09 06:19:25 +00:00
|
|
|
|
* Thu Aug 17 2000 Bill Nottingham <notting@redhat.com>
|
|
|
|
|
|
- build everywhere
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Jul 25 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
|
|
|
|
- 1.1.1
|
|
|
|
|
|
|
|
|
|
|
|
* Thu Jul 13 2000 Prospector <bugzilla@redhat.com>
|
|
|
|
|
|
- automatic rebuild
|
|
|
|
|
|
|
|
|
|
|
|
* Tue Jun 27 2000 Preston Brown <pbrown@redhat.com>
|
|
|
|
|
|
- move iptables to /sbin.
|
|
|
|
|
|
- excludearch alpha for now, not building there because of compiler bug(?)
|
|
|
|
|
|
|
|
|
|
|
|
* Fri Jun 9 2000 Bill Nottingham <notting@redhat.com>
|
|
|
|
|
|
- don't obsolete ipchains either
|
|
|
|
|
|
- update to 1.1.0
|
|
|
|
|
|
|
|
|
|
|
|
* Mon Jun 4 2000 Bill Nottingham <notting@redhat.com>
|
|
|
|
|
|
- remove explicit kernel requirement
|
|
|
|
|
|
|
|
|
|
|
|
* Tue May 2 2000 Bernhard Rosenkr<EFBFBD>nzer <bero@redhat.com>
|
|
|
|
|
|
- initial package
|
