rpms/iptables
7
0
Fork 0
Code Issues Pull Requests Releases Activity
248 Commits 8 Branches 52 Tags 2 MiB
c7a1e984df
Commit Graph

248 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bogdan Dobrelya
abf89772b1 Optimize systemd dependency for containers 
According to https://fedoraproject.org/wiki/Packaging:Scriptlets:
If a package is suitable for installation without systemd (in a
container image, for example) and does not require any of the
systemd mechanisms such as tmpfiles.d, then the systemd_ordering macro
MAY be used instead of the systemd_requires macro.

That is exactly the case we want to address for container images
when installing packages in it.

Resolves: rhbz#1668678
Related-Bug: #1804822
Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
 2019-01-23 11:31:38 +01:00
Peter Robinson
3ee5faca7e drop groups 2018-10-14 18:42:59 +01:00
Fedora Release Engineering
fc1d0e4b43 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2018-07-13 05:48:59 +00:00
Phil Sutter
a52c75665f iptables-1.8.0-2 
- Fix calling ebtables-nft and arptables-nft via their new names.
 2018-07-10 18:48:49 +02:00
Phil Sutter
dc75e7cdb9 Update sources for new version 2018-07-10 16:37:45 +02:00
Phil Sutter
86e31320cc iptables-1.8.0-1 
- New upstream version 1.8.0.
- Replace ldconfig calls with newly introduced macros.
- Rename compat subpackage to iptables-nft to clarify its purpose.
- Make use of Alternatives system.
 2018-07-10 15:23:40 +02:00
Phil Sutter
5910b701c2 iptables-1.6.2-3 
* Fri May 04 2018 Phil Sutter <psutter@redhat.com> - 1.6.2-3
- Fix License: tag in spec-file
- Fix separation into compat subpackage
 2018-05-04 16:53:35 +02:00
Phil Sutter
1d5c584741 Fix separation into compat subpackage 
Install translate symlinks with compat package, not the main one since
they link to xtables-compat-multi.
 2018-05-04 16:48:13 +02:00
Phil Sutter
0d01e8b0ab Fix License: tag in spec-file 2018-05-04 16:10:07 +02:00
Phil Sutter
dbcad37b42 iptables-1.6.2-2 
* Thu Mar 01 2018 Phil Sutter <psutter@redhat.com> - 1.6.2-2
- Kill module unloading support
- Support /etc/sysctl.d
- Don't restart services after package update
- Add support for --wait options to restore commands
 2018-03-01 16:33:16 +01:00
Phil Sutter
6714065736 Add support for --wait options to restore commands 
Without this, either one of iptables and ip6tables services is likely to
fail at system startup because the other one is holding the xtables
lock.
 2018-02-28 08:51:23 +01:00
Phil Sutter
82de804ec0 Don't restart services after package update 
There's no point in restarting iptables/ip6tables services if
iptables-services package is updated. On the other hand, doing so
potentially breaks VMs in OpenStack since they drop temporary rules.
 2018-02-28 08:39:09 +01:00
Phil Sutter
85aff8c513 Support /etc/sysctl.d 
When searching for sysctl settings to reapply at start/restart, search
in all files in /etc/sysctl.d/ instead of just in /etc/sysctl.conf.
 2018-02-28 08:34:22 +01:00
Phil Sutter
948527f3fe Kill module unloading support 
The whole concept is unfixably broken:

Some kernel modules are used by both IPv4 and IPv6 netfilter and the
algorithm has no way to identify this situation. Therefore if iptables
and ip6tables services are restarted in parallel, one's module unloading
tends to stomp onto the other's attempt at loading rules.

Another problem is with OVS: iptables service unloading conntrack
modules breaks a running OVS instance.
 2018-02-28 08:18:43 +01:00
Michael Cronenworth
7ad3a27f69 Update to 1.6.2 2018-02-21 16:55:57 -06:00
Fedora Release Engineering
cb6ace7de5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2018-02-07 17:37:12 +00:00
Phil Sutter
8375340a72 Merge #1 Initial checkin of tests from upstreamfirst project 2018-01-24 13:03:35 +00:00
Kevin Fenzi
7cee468d60 Rebuild for new libnftnl 2017-10-22 17:51:40 -07:00
Mike Gahagan
b241cc5c2f Initial checkin of tests from upstreamfirst project 2017-10-12 14:41:36 -04:00
Fedora Release Engineering
d67764cf41 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-02 23:50:56 +00:00
Fedora Release Engineering
4b5891814a - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-26 13:40:00 +00:00
Fedora Release Engineering
7ee46ed2f5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-10 16:32:06 +00:00
Thomas Woerner
ab4bf24e8c - New upstream version 1.6.1 with enhanced translation to nft support and 
several fixes (RHBZ#1417323)
  http://netfilter.org/projects/iptables/files/changes-iptables-1.6.1.txt
- Enable parallel build again
 2017-02-02 13:23:06 +01:00
Petr Šabata
b1d8cbb34a Disabling parallel build to avoid build issues with xtables 
See http://patchwork.alpinelinux.org/patch/1787/ for reference
This should be fixed in 1.6.1; parallel build can be restored after the
  update
 2017-02-02 12:40:51 +01:00
Thomas Woerner
453291408a - Dropped bad provides for iptables in services sub package (RHBZ#1327786) 2016-12-19 17:23:43 +01:00
Thomas Woerner
803e775de0 Made /etc/ethertypes provide and conflict for setup < 2.10.4-1 fedora version dependant 2016-07-22 13:45:10 +02:00
Thomas Woerner
faa3761f94 - /etc/ethertypes has been moved into the setup package. (RHBZ#1329256) 2016-07-22 13:29:16 +02:00
Thomas Woerner
28989740b2 iMissing iptables-apply mktemp patch 2016-04-13 19:07:50 +02:00
Thomas Woerner
6791134663 - New upstream version 1.6.0 with nft-compat support and lots of fixes (RHBZ#1292990) 
Upstream changelog:
  http://netfilter.org/projects/iptables/files/changes-iptables-1.6.0.txt
- New libs sub package containing libxtables and unstable libip*tc libraries (RHBZ#1323161)
- Using scripts form RHEL-7 (RHBZ#1240366)
- New compat sub package for nftables compatibility
- Install iptables-apply (RHBZ#912047)
- Fixed module uninstall (RHBZ#1324101)
- Incorporated changes by Petr Pisar
- Enabled bpf compiler (RHBZ#1170227) Thanks to Yanko Kaneti for the patch
 2016-04-13 19:00:02 +02:00
Dennis Gilmore
cea668f0bf - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-04 00:37:42 +00:00
Jiri Popelka
35929033de %define -> %global 2016-01-04 15:50:43 +01:00
Dennis Gilmore
1fdfc18236 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-17 11:32:02 +00:00
Jiri Popelka
69f9a1a33c add dhcpv6-client to /etc/sysconfig/ip6tables (RHBZ#1169036) 
In firewalld it's also allowed by default.
 2014-12-01 12:46:00 +01:00
Jiri Popelka
2962b798c0 iptables.init: make sure the subsys directory exists (RHBZ#1159573) 
Also use /run/lock/subsys/ instead of /var/lock/subsys/
to be consistent with /usr/lib/tmpfiles.d/legacy.conf
 2014-11-03 14:44:32 +01:00
Jiri Popelka
edc59df70f ip[6]tables.init: change shebang from /bin/sh to /bin/bash (RHBZ#1147272) 2014-09-29 14:10:21 +02:00
Jiri Popelka
bede095d8e Merge branch 'f21' 2014-09-29 14:09:01 +02:00
Peter Robinson
952410fde0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-16 21:47:17 +00:00
Peter Robinson
466c4fce29 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-16 21:47:05 +00:00
Tom Callaway
d9665f2d1d fix license handling 2014-07-12 18:17:52 -04:00
Tom Callaway
f46436e6be fix license handling 2014-07-12 18:17:33 -04:00
Dennis Gilmore
0ff94dd968 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-07 17:38:38 -05:00
Jiri Popelka
957e271192 no need to specify file mode bits twice (in %install and %files) 2014-03-12 15:05:45 +01:00
Jiri Popelka
40b71666b9 BuildRequires: pkgconfig(x) instead of x-devel 
https://fedoraproject.org/wiki/Packaging:PkgConfigBuildRequires
 2014-03-12 14:55:46 +01:00
Jiri Popelka
e4ddd6e657 add missing reload and panic actions 2014-03-12 14:47:42 +01:00
Ville Skyttä
77482a7964 Don't order services after syslog.target. 
https://bugzilla.redhat.com/show_bug.cgi?id=1055204
 2014-01-20 18:56:12 +01:00
Thomas Woerner
bec2813925 - Enable connlabel support again, needs libnetfilter_conntrack 2014-01-15 16:28:53 +01:00
Thomas Woerner
b16a3888f1 - fixed update from RHEL-6 to RHEL-7 (RHBZ#1043901) 2014-01-15 13:22:39 +01:00
Jiri Popelka
e3b3aa4924 chmod /etc/sysconfig/ip[6]tables 755 -> 600 2014-01-14 16:59:53 +01:00
Jiri Popelka
d94a3dd4be better comment in default /etc/sysconfig/ip[6]tables 2014-01-10 16:37:48 +01:00
Jiri Popelka
77638b4505 fix permission mode value for installing /etc/sysconfig/ip[6]tables-config 2014-01-10 16:25:25 +01:00