Commit Graph

247 Commits

Author SHA1 Message Date
Jiri Popelka
208299e925 revert the libtoolize change 2014-01-10 15:48:33 +01:00
Thomas Woerner
85656c6cde - Dropped virtual provide for xtables.so.9 2014-01-10 13:35:50 +01:00
Jiri Popelka
d303677f88 add libtoolize to build properly on ppc64le (RHBZ#1051220) 2014-01-10 13:18:23 +01:00
Jiri Popelka
7922fcbc7d fix self-obsoletion 2014-01-09 16:36:48 +01:00
Jiri Popelka
74edc3b4b2 remove unused patches 2014-01-09 16:34:15 +01:00
Jiri Popelka
ba11125edd spec clean up 2014-01-09 16:28:18 +01:00
Jiri Popelka
791b05803d ./configure -> %configure 2014-01-09 16:19:43 +01:00
Jiri Popelka
9832ccc0c7 remove scriptlets for migrating to a systemd unit from a SysV initscripts
https://lists.fedoraproject.org/pipermail/devel/2013-June/184271.html
2014-01-09 16:17:42 +01:00
Jiri Popelka
52081b603c use systemd macros (#850166) 2014-01-09 16:14:01 +01:00
Jiri Popelka
b848c2b54c no need to support the pre-systemd things 2014-01-09 16:12:00 +01:00
Thomas Woerner
0316b6eed1 - fixed system hang at shutdown if root device is network based (RHBZ#1007934)
Thanks to Rodrigo A B Freire for the patch
2014-01-09 12:53:42 +01:00
Thomas Woerner
9c976a7caa - no connlabel.conf upstream anymore
- new version 1.4.21
  - doc: clarify DEBUG usage macro
  - iptables: use autoconf to process .in man pages
  - extensions: libipt_ULOG: man page should mention NFLOG as replacement
  - extensions: libxt_connlabel: use libnetfilter_conntrack
  - Introduce a new revision for the set match with the counters support
  - libxt_CT: Add the "NOTRACK" alias
  - libip6t_mh: Correct command to list named mh types in manpage
  - extensions: libxt_DNAT, libxt_REDIRECT, libxt_NETMAP, libxt_SNAT, libxt_MASQUERADE, libxt_LOG: rename IPv4 manpage and tell about IPv6 support
  - extensions: libxt_LED: fix parsing of delay
  - ip{6}tables-restore: fix breakage due to new locking approach
  - libxt_recent: restore minimum value for --seconds
  - iptables-xml: fix parameter parsing (similar to 2165f38)
  - extensions: add copyright statements
  - xtables: improve get_modprobe handling
  - ip[6]tables: Add locking to prevent concurrent instances
  - iptables: Fix connlabel.conf install location
  - ip6tables: don't print out /128
  - libip6t_LOG: target output is different to libipt_LOG
  - build: additional include path required after UAPI changes
  - iptables: iptables-xml: Fix various parsing bugs
  - libxt_recent: restore reap functionality to recent module
  - build: fail in configure on missing dependency with --enable-bpf-compiler
  - extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter
  - extensions: libxt_set, libxt_SET: check the set family too
  - ip6tables: Use consistent exit code for EAGAIN
  - iptables: libxt_hashlimit.man: correct address
  - iptables: libxt_conntrack.man extraneous commas
  - iptables: libip(6)t_REJECT.man default icmp types
  - iptables: iptables-xm1.1 correct man section
  - iptables: libxt_recent.{c,man} dead URL
  - iptables: libxt_string.man add examples
  - extensions: libxt_LOG: use generic syslog reference in manpage
  - iptables: extensions/GNUMakefile.in use CPPFLAGS
  - iptables: correctly reference generated file
  - ip[6]tables: fix incorrect alignment in commands_v_options
  - build: add software version to manpage first line at configure stage
  - extensions: libxt_cluster: add note on arptables-jf
  - utils: nfsynproxy: fix error while compiling the BPF filter
  - extensions: add SYNPROXY extension
  - utils: add nfsynproxy tool
  - iptables: state match incompatibilty across versions
  - libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks
  - iptables: improve chain name validation
  - iptables: spurious error in load_extension
  - xtables: trivial spelling fix
2014-01-09 11:31:48 +01:00
Ville Skyttä
875d810b85 Drop INSTALL from docs, escape macros in %changelog. 2013-12-22 22:48:34 +02:00
Thomas Woerner
234c14529e - new version 1.4.19.1
- libxt_NFQUEUE: fix bypass option documentation
  - extensions: add connlabel match
  - extensions: add connlabel match
  - ip[6]tables: show --protocol instead of --proto in usage
  - libxt_recent: Fix missing space in manpage for --mask option
  - extensions: libxt_multiport: Update manpage to list valid protocols
  - utils: nfnl_osf: use the right nfnetlink lib
  - libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency
  - Revert "build: resolve link failure for ip6t_NETMAP"
  - libxt_osf: fix missing --ttl and --log in save output
  - libxt_osf: fix bad location for location in --genre
  - libip6t_SNPT: add manpage
  - libip6t_DNPT: add manpage
  - utils: updates .gitignore to include nfbpf_compile
  - extensions: libxt_bpf: clarify --bytecode argument
  - libxtables: fix parsing of dotted network mask format
  - build: bump version to 1.4.19
  - libxt_conntrack: fix state match alias state parsing
  - extensions: add libxt_bpf extension
  - utils: nfbpf_compile
  - doc: mention SNAT in INPUT chain since kernel 2.6.36
- fixed changelog date weekdays where needed
2013-07-31 20:31:24 +02:00
Thomas Woerner
e6060d4640 New version 1.4.18
- lots of documentation changes
  - Introduce match/target aliases
  - Add the "state" alias to the "conntrack" match
  - iptables: remove unused leftover definitions
  - libxtables: add xtables_rule_matches_free
  - libxtables: add xtables_print_num
  - extensions: libip6t_DNPT: fix wording in DNPT target
  - extension: libip6t_DNAT: allow port DNAT without address
  - extensions: libip6t_DNAT: set IPv6 DNAT --to-destination
  - extensions: S/DNPT: add missing save function
- changes of 1.4.17:
  - libxt_time: add support to ignore day transition
  - Convert the NAT targets to use the kernel supplied nf_nat.h header
  - extensions: add IPv6 MASQUERADE extension
  - extensions: add IPv6 SNAT extension
  - extensions: add IPv6 DNAT target
  - extensions: add IPv6 REDIRECT extension
  - extensions: add IPv6 NETMAP extension
  - extensions: add NPT extension
  - extensions: libxt_statistic: Fix save output
2013-03-04 16:37:19 +01:00
Dennis Gilmore
76c313d842 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild 2013-02-13 20:13:21 -06:00
Ville Skyttä
1920e0d30a Own unowned -services libexec dirs (#894464, Michael Scherer).
- Fix -services unit file permissions (#732936, Michal Schmidt).
2013-01-16 18:38:19 +02:00
Thomas Woerner
e34d762c5c - fixed path of ip6tables.init in ip6tables.service 2012-11-08 13:03:44 +01:00
Thomas Woerner
dd96cc5585 - fixed missing services for update of pre F-18 installations (rhbz#867960)
- provide and obsolete old main package in services sub package
  - provide and obsolete old ipv6 sub package (pre F-17) in services sub package
2012-11-02 13:48:53 +01:00
Dan Hor?k
fa59546b65 fix the compat provides for all 64-bit arches 2012-10-14 17:22:13 +02:00
Thomas Woerner
2fe636d5d4 - new sub package services providing the systemd services (RHBZ#862922)
- new sub package utils: provides nfnl_osf and the pf.os database
- using %{_libexecdir}/iptables as script path for the original init scripts
- added service iptables save funcitonality using the new way provided by
  initscripts 9.37.1 (RHBZ#748134)
- added virtual provide for libxtables.so.7
2012-10-12 16:23:05 +02:00
Thomas Woerner
79f3fa812b - new version 1.4.16.2
- build: support for automake-1.12
  - build: separate AC variable replacements from xtables.h
  - build: have `make clean` remove dep files too
  - doc: grammatical updates to libxt_SET
  - doc: clean up interpunction in state list for xt_conntrack
  - doc: deduplicate extension descriptions into a new manpage
  - doc: trim "state" manpage and reference conntrack instead
  - doc: have NOTRACK manpage point to CT instead
  - doc: mention iptables-apply in the SEE ALSO sections
  - extensions: libxt_addrtype: fix type in help message
  - include: add missing linux/netfilter_ipv4/ip_queue.h
  - iptables: fix wrong error messages
  - iptables: support for match aliases
  - iptables: support for target aliases
  - iptables-restore: warn about -t in rule lines
  - ip[6]tables-restore: cleanup to reduce one level of indentation
  - libip6t_frag: match any frag id by default
  - libxtables: consolidate preference logic
  - libxt_devgroup: consolidate devgroup specification parsing
  - libxt_devgroup: guard against negative numbers
  - libxt_LED: guard against negative numbers
  - libxt_NOTRACK: replace as an alias to CT --notrack
  - libxt_state: replace as an alias to xt_conntrack
  - libxt_tcp: print space before, not after "flags:"
  - libxt_u32: do bounds checking for @'s operands
  - libxt_*limit: avoid division by zero
  - Merge branch 'master' of git://git.inai.de/iptables
  - Merge remote-tracking branch 'nf/stable'
  - New set match revision with --return-nomatch flag support
- dropped fixrestore patch, upstream
2012-10-08 15:36:30 +02:00
Thomas Woerner
0645ca64a7 - added fixrestore patch submitted to upstream by fryasu (nfbz#774)
(RHBZ#825796)

Merge commit '3670a98a72eedbbc76cfcab606b27da7094f7488'

Conflicts:
	iptables.spec
2012-07-18 16:17:58 +02:00
Thomas Woerner
3670a98a72 - added fixrestore patch submitted to upstream by fryasu (nfbz#774)
(RHBZ#825796)
2012-07-18 16:14:07 +02:00
Thomas Woerner
243a920c56 - disabled libipq, removed upstream, not provided by kernel anymore 2012-07-18 10:14:12 +02:00
Thomas Woerner
dde6759990 - new version 1.4.14
- extensions: add IPv6 capable ECN match extension
  - extensions: add nfacct match
  - extensions: add rpfilter module
  - extensions: libxt_rateest: output all options in save hook
  - iptables: missing free() in function cache_add_entry()
  - iptables: missing free() in function delete_entry()
  - libiptc: fix retry path in TC_INIT
  - libiptc: Returns the position the entry was inserted
  - libipt_ULOG: fix --ulog-cprange
  - libxt_CT: add --timeout option
  - ip(6)tables-restore: make sure argv is NULL terminated
  - Revert "libiptc: Returns the position the entry was inserted"
  - src: mark newly opened fds as FD_CLOEXEC (close on exec)
  - tests: add rateest match rules
- dropped patch5 (cloexec), merged upstream
2012-07-18 09:23:34 +02:00
Thomas Woerner
566ade3bdb - reenable iptables default services 2012-04-23 20:08:59 +02:00
Thomas Woerner
989a1ddebf - New global tag default_service 2012-04-20 17:27:09 +02:00
Harald Hoyer
e71311de3a install everything in /usr
https://fedoraproject.org/wiki/Features/UsrMove
2012-02-29 16:52:04 +01:00
Harald Hoyer
f586a1b819 install everything in /usr
This patch is needed for the /usr-move feature
https://fedoraproject.org/wiki/Features/UsrMove

This package requires now 'filesystem' >= 3, which is only
installable on a system which has /bin, /sbin, /lib, /lib64 as
symlinks to /usr and not regular directories. The 'filesystem'
package acts as a guard, to prevent *this* package to be installed
on old unconverted systems.

New installations will have the 'filesystem' >=3 layout right away,
old installations need to be converted with anaconda or dracut first;
only after that, the 'filesystem' package, and also *this* package
can be installed.

Packages *should* not install files in /bin, /sbin, /lib, /lib64,
but only in the corresponding directories in /usr. Packages *must*
not install conflicting files with the same names in the corresponding
directories in / and /usr. Especially compatibilty symlinks must not
be installed.

Feel free to modify any of the changes to the spec file, but keep
the above in mind.
2012-02-29 16:49:18 +01:00
Thomas Woerner
ba28c6a8b0 - fixed auto enable check for Fedora > 16 and added rhel > 6 check 2012-02-16 20:19:26 +01:00
Thomas Woerner
9b9f064100 - disabled autostart and auto enable for iptables.service and ip6tables.service
for Fedora > 16
2012-02-15 19:52:36 +01:00
Thomas Woerner
0b45b2759a - new version 1.4.12.2 2012-01-16 14:25:00 +01:00
Thomas Woerner
900581a58b - new version 1.4.12.2 with new pkgconfig/libip4tc.pc and pkgconfig/libip6tc.pc
- build: make check stage not fail when building statically
  - build: restore build order of modules
  - build: scan for unreferenced symbols
  - build: sort file list before build
  - doc: clarification on the meaning of -p 0
  - doc: document iptables-restore's -T option
  - doc: fix undesired newline in ip6tables-restore(8)
  - ip6tables-restore: implement missing -T option
  - iptables: move kernel version find routing into libxtables
  - libiptc: provide separate pkgconfig files
  - libipt_SAME: set PROTO_RANDOM on all ranges
  - libxtables: Fix file descriptor leak in xtables_lmap_init on error
  - libxt_connbytes: fix handling of --connbytes FROM
  - libxt_CONNSECMARK: fix spacing in output
  - libxt_conntrack: improve error message on parsing violation
  - libxt_NFQUEUE: fix --queue-bypass ipt-save output
  - libxt_RATEEST: link with -lm
  - libxt_statistic: link with -lm
  - Merge branch 'stable'
  - Merge branch 'stable' of git://dev.medozas.de/iptables
  - nfnl_osf: add missing libnfnetlink_CFLAGS to compile process
  - xtoptions: fill in fallback value for nvals
  - xtoptions: simplify xtables_parse_interface
2012-01-16 14:23:44 +01:00
Dennis Gilmore
b6effdeb2c - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild 2012-01-12 23:58:37 -06:00
Thomas Woerner
697bb55852 - removed include/linux/types.h before build to be able to compile 2011-12-12 16:09:46 +01:00
Thomas Woerner
2830e77cd7 - new version 1.4.12.1 with new pkgconfig/libipq.pc
- build: abort autogen on subcommand failure
  - build: strengthen check for overlong lladdr components
  - build: workaround broken linux-headers on RHEL-5
  - doc: clarify libxt_connlimit defaults
  - doc: fix typo in libxt_TRACE
  - extensions: use multi-target registration
  - libip6t_dst: restore setting IP6T_OPTS_LEN flag
  - libip6t_frag: restore inversion support
  - libip6t_hbh: restore setting IP6T_OPTS_LEN flag
  - libipq: add pkgconfig file
  - libipt_ttl: document that negation is available
  - libxt_conntrack: fix --ctproto 0 output
  - libxt_conntrack: remove one misleading comment
  - libxt_dccp: fix deprecated intrapositional ordering of !
  - libxt_dccp: fix random output of ! on --dccp-option
  - libxt_dccp: provide man pages options in short help too
  - libxt_dccp: restore missing XTOPT_INVERT tags for options
  - libxt_dccp: spell out option name on save
  - libxt_dscp: restore inversion support
  - libxt_hashlimit: default htable-expire must be in milliseconds
  - libxt_hashlimit: observe new default gc-expire time when saving
  - libxt_hashlimit: remove inversion from hashlimit rev 0
  - libxt_owner: restore inversion support
  - libxt_physdev: restore inversion support
  - libxt_policy: remove superfluous inversion
  - libxt_set: put differing variable names in directly
  - libxt_set: update man page about kernel support on the feature
  - libxt_string: define _GNU_SOURCE for strnlen
  - libxt_string: escape the escaping char too
  - libxt_string: fix space around arguments
  - libxt_string: replace hex codes by char equivalents
  - libxt_string: simplify hex output routine
  - libxt_tcp: always print the mask parts
  - libxt_TCPMSS: restore build with IPv6-less libcs
  - libxt_TOS: update linux kernel version list for backported fix
  - libxt_u32: fix missing allowance for inversion
  - src: remove unused IPTABLES_MULTI define
  - tests: add negation tests for libxt_statistic
  - xtoptions: flag use of XTOPT_POINTER without XTOPT_PUT
2011-12-12 15:19:49 +01:00
Thomas Woerner
46fbaf570a - dropped temporary provide again 2011-07-26 11:29:28 +02:00
Thomas Woerner
a74a2b4ef7 - added temporary provides for libxtables.so.6 to be able to rebuild iproute,
which is part of the standard build environment
2011-07-26 09:59:58 +02:00
Thomas Woerner
60fba6574f - fixed sources 2011-07-25 18:13:05 +02:00
Thomas Woerner
29d193fcc8 - new version 1.4.12 with support of all new features of kernel 3.0
- build: attempt to fix building under Linux 2.4
  - build: bump soversion for recent data structure change
  - build: install modules in arch-dependent location
  - doc: fix group range in libxt_NFLOG's man
  - doc: fix version string in ip6tables.8
  - doc: include matches/targets in manpage again
  - doc: mention multiple verbosity flags
  - doc: the -m option cannot be inverted
  - extensions: support for per-extension instance global variable space
  - iptables-apply: select default rule file depending on call name
  - iptables: consolidate target/match init call
  - iptables: Coverity: DEADCODE
  - iptables: Coverity: NEGATIVE_RETURNS
  - iptables: Coverity: RESOURCE_LEAK
  - iptables: Coverity: REVERSE_INULL
  - iptables: Coverity: VARARGS
  - iptables: restore negation for -f
  - libip6t_HL: fix option names from ttl -> hl
  - libipt_LOG: fix ignoring all but last flags
  - libxtables: ignore whitespace in the multiaddress argument parser
  - libxtables: properly reject empty hostnames
  - libxtables: set clone's initial data to NULL
  - libxt_conntrack: move more data into the xt_option_entry
  - libxt_conntrack: restore network-byte order for v1,v2
  - libxt_hashlimit: use a more obvious expiry value by default
  - libxt_rateest: abolish global variables
  - libxt_RATEEST: abolish global variables
  - libxt_RATEEST: fix userspacesize field
  - libxt_RATEEST: use guided option parser
  - libxt_state: fix regression about inversion of main option
  - option: remove last traces of intrapositional negation
- complete changelog:
  http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.12.txt
2011-07-25 18:12:15 +02:00
Thomas Woerner
1392835e93 - merged ipv6 sub package into main package
- renamed init scripts to /usr/libexec/ip*tables.init
2011-07-21 15:53:48 +02:00
Thomas Woerner
48928b097d - added support for native systemd file (rhbz#694738)
- new iptables.service file
  - additional requires
  - moved sysv init scripts to /usr/libexec
  - added new post, preun and postun scripts and triggers
2011-07-15 16:21:02 +02:00
Thomas Woerner
9269623657 - dropped temporary provide again
- enabled smp build
2011-07-12 14:07:48 +02:00
Thomas Woerner
bae0f3016a - added temporary provides for libxtables.so.5 to be able to rebuild iproute,
which is part of the standard build environment
2011-07-12 13:34:12 +02:00
Thomas Woerner
efe5bd8132 - uploaded source archive 2011-07-11 16:06:18 +02:00
Thomas Woerner
d2526b7251 - new version 1.4.11.1, bug and doc fix release for 1.4.11
* Tue Jun  7 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11-1
- new version 1.4.11 with all new features of 2.6.37-39 (not usable)
  - lots of changes and bugfixes for base and extensions
  - complete changelog:
    http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.11.txt
2011-07-11 15:52:54 +02:00
Thomas Woerner
9ff5d90c9f - upload was working now, therefore .gitignore was changed 2011-02-14 13:35:37 +01:00
Dennis Gilmore
a06a4f2e5c - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild 2011-02-09 07:01:05 -06:00
Thomas Woerner
74f361e244 - new version 1.4.10 with all new features of 2.6.36
- all: consistent syntax use in struct option
  - build: fix static linking
  - doc: let man(1) autoalign the text in xt_cpu
  - doc: remove extra empty line from xt_cpu
  - doc: minimal spelling updates to xt_cpu
  - doc: consistent use of markup
  - extensions: libxt_quota: don't ignore the quota value on deletion
  - extensions: REDIRECT: add random help
  - extensions: add xt_cpu match
  - extensions: add idletimer xt target extension
  - extensions: libxt_IDLETIMER: use xtables_param_act when checking options
  - extensions: libxt_CHECKSUM extension
  - extensions: libipt_LOG/libip6t_LOG: support macdecode option
  - extensions: fix compilation of the new CHECKSUM target
  - extensions: libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
  - iptables-xml: resolve compiler warnings
  - iptables: limit chain name length to be consistent with targets
  - libiptc: add Libs.private to pkgconfig files
  - libiptc: build with -Wl,--no-as-needed
  - xtables: remove unnecessary cast
- dropped xt_CHECKSUM, added upstream
2011-01-10 17:05:15 +01:00