8 Commits

4 changed files with 70 additions and 29 deletions

View File

@@ -1,4 +0,0 @@
mtime: 1733147015
commit: 5f074bda5a10d96b965b4e60bd0f56762bb227d30bbb1c4b617012e3d6319e18
url: https://src.opensuse.org/jengelh/iptables
revision: master

View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:0ce3e2d396879c4d7b973da79452b49fce1fd2544f9d7201785d25a63b893cd8
size 256

View File

@@ -1,3 +1,13 @@
-------------------------------------------------------------------
Mon Apr 28 19:46:06 UTC 2025 - Antonio Teixeira <antonio.teixeira@suse.com>
- Provide ebtables for SLES16
-------------------------------------------------------------------
Thu Apr 17 18:48:56 UTC 2025 - Antonio Teixeira <antonio.teixeira@suse.com>
- Remove legacy backend from SLES16
-------------------------------------------------------------------
Mon Dec 2 13:40:26 UTC 2024 - Antonio Teixeira <antonio.teixeira@suse.com>
@@ -89,7 +99,7 @@ Wed Oct 20 11:15:19 UTC 2021 - Stefan Schubert <schubi@suse.de>
- Added alts requirements for iptables-backend-nft package.
-------------------------------------------------------------------
Thu Sep 16 11:40:45 UTC 2021 - Stefan Schubert <schubi@suse.com>
Thu Sep 16 11:40:45 UTC 2021 - Stefan Schubert <schubi@suse.com>
- Removed update-alternatives dependency in libalternatives mode.
@@ -127,7 +137,7 @@ Wed Jun 3 13:21:57 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
- Update to release 1.8.5
* IDLETIMER: Add alarm timer option
* nft: CT: add translation for NOTRACK
* nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)
-------------------------------------------------------------------
@@ -406,7 +416,7 @@ Mon Jan 2 21:30:38 UTC 2012 - jengelh@medozas.de
-------------------------------------------------------------------
Wed Dec 28 09:50:23 UTC 2011 - puzel@suse.com
- iptables-apply-mktemp-fix.patch (bnc#730161)
- iptables-apply-mktemp-fix.patch (bnc#730161)
-------------------------------------------------------------------
Wed Nov 30 14:28:11 UTC 2011 - coolo@suse.com
@@ -498,11 +508,11 @@ Fri Oct 29 17:56:48 UTC 2010 - jengelh@medozas.de
* support for the CHECKSUM target
* support for the ipvs match
* a fix for deletion of rules using the quota match
-------------------------------------------------------------------
Mon Aug 9 07:21:28 UTC 2010 - puzel@novell.com
- update to new upstream release 1.4.9.1
- update to new upstream release 1.4.9.1
* fixes a compilation problem with static linking in the 1.4.9
release
@@ -513,10 +523,10 @@ Wed Aug 4 09:56:11 UTC 2010 - puzel@novell.com
* this is the release for the Linux 2.6.35 kernel
* support for the LED target
* a new version of the set extension for the upcoming release
supporting IPv6
supporting IPv6
* negation support for the quota match
* support for the SACK-IMMEDIATELY SCTP extension and
FORWARD_TSN chunk type in the sctp match
* support for the SACK-IMMEDIATELY SCTP extension and
FORWARD_TSN chunk type in the sctp match
* documentation updates and various smaller bugfixes
-------------------------------------------------------------------
@@ -743,7 +753,7 @@ Tue Jan 8 17:10:54 CET 2008 - prusnak@suse.cz
* use <linux/types.h>
* Fix make/compile error for iptables-1.4.0rc1
* Fix for --random option in DNAT and REDIRECT
* Document xt_statistic
* Document xt_statistic
* sctp: fix - mistake to pass a pointer where array is required
* Fix connlimit output for inverted --connlimit-above:
! > is <=, not <
@@ -896,7 +906,7 @@ Wed Mar 9 11:28:10 CET 2005 - postadal@suse.cz
Thu Feb 17 10:02:14 CET 2005 - postadal@suse.cz
- updated to version 1.3.0
- removed obsoleted patch modules-secfix
- removed obsoleted patch modules-secfix
-------------------------------------------------------------------
Tue Nov 02 17:00:05 CET 2004 - postadal@suse.cz
@@ -1035,12 +1045,12 @@ Tue Oct 17 16:15:51 CEST 2000 - nadvornik@suse.cz
-------------------------------------------------------------------
Fri Sep 22 02:34:07 CEST 2000 - ro@suse.de
- up to 1.1.1
- up to 1.1.1
-------------------------------------------------------------------
Fri Jun 9 08:58:25 CEST 2000 - ro@suse.de
- fixed neededforbuild
- fixed neededforbuild
-------------------------------------------------------------------
Wed Jun 7 08:33:45 CEST 2000 - nadvornik@suse.cz

View File

@@ -1,7 +1,7 @@
#
# spec file for package iptables
#
# Copyright (c) 2024 SUSE LLC
# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -22,6 +22,12 @@
%bcond_with libalternatives
%endif
%if 0%{?suse_version} == 1600 && !0%{?is_opensuse}
%bcond_with legacy_backend
%else
%bcond_without legacy_backend
%endif
Name: iptables
Version: 1.8.11
Release: 0
@@ -51,6 +57,7 @@ BuildRequires: pkgconfig(libnfnetlink) >= 1.0.0
BuildRequires: pkgconfig(libnftnl) >= 1.2.6
Requires: netcfg >= 11.6
Requires: xtables-plugins = %version-%release
%if %{with legacy_backend}
%if %{with libalternatives}
Requires: alts
BuildRequires: alts
@@ -58,6 +65,11 @@ BuildRequires: alts
Requires(post): update-alternatives
Requires(postun): update-alternatives
%endif
%else
Provides: %name-backend-nft = %version-%release
Obsoletes: %name-backend-nft < %version-%release
Provides: ebtables
%endif
# During the update to iptables 1.8, ip6tables-restore-translate, ip6tables-translate,
# iptables-restore-translate and iptables-translate were moved from iptables-nft subpackage
# (now iptables-backend-nft) to the main package so we need to add a conflict here otherwise
@@ -74,7 +86,6 @@ Group: Productivity/Networking/Security
Requires: iptables >= 1.8.0
%if %{with libalternatives}
Requires: alts
BuildRequires: alts
%else
Requires(post): update-alternatives
Requires(postun): update-alternatives
@@ -200,17 +211,29 @@ rm -f "$b/%_sysconfdir/xtables.conf" # packaging bug
for i in iptables iptables-restore iptables-save ip6tables ip6tables-restore \
ip6tables-save arptables arptables-restore arptables-save ebtables \
ebtables-restore ebtables-save; do
%if ! %{with libalternatives}
ln -fsv "%_sysconfdir/alternatives/$i" "$b/%_sbindir/$i"
%if %{with legacy_backend}
%if !%{with libalternatives}
ln -fsv "%_sysconfdir/alternatives/$i" "$b/%_sbindir/$i"
%else
ln -fsv %_bindir/alts "$b/%_sbindir/$i"
%endif
%else
ln -fsv %_bindir/alts "$b/%_sbindir/$i"
ln -fsv %_sbindir/xtables-nft-multi "$b/%_sbindir/$i"
%endif
done
%if %{without legacy_backend}
rm "$b/%_sbindir/xtables-legacy-multi"
rm $b/%_sbindir/iptables-legacy*
rm $b/%_sbindir/ip6tables-legacy*
ln -fsv %_sbindir/xtables-nft-multi $b/%_bindir/iptables-xml
%endif
%if 0%{?suse_version}
%fdupes %buildroot/%_prefix
%endif
%if %{with legacy_backend}
%if %{with libalternatives}
mkdir -pv "$b/%_datadir/libalternatives/iptables"
cat >"$b/%_datadir/libalternatives/iptables/1.conf" <<-EOF
@@ -307,6 +330,7 @@ if test "$1" = 0; then
update-alternatives --remove ebtables "%_sbindir/xtables-nft-multi"
fi
%endif
%endif
%post -n libipq0 -p /sbin/ldconfig
%postun -n libipq0 -p /sbin/ldconfig
@@ -322,21 +346,24 @@ fi
%_bindir/iptables-xml
%_sbindir/arptables-*translate*
%_sbindir/iptables-apply
%_sbindir/iptables-legacy*
%_sbindir/iptables-nft*
%_sbindir/iptables-*translate*
%_sbindir/ip6tables-apply
%_sbindir/ip6tables-legacy*
%_sbindir/ip6tables-nft*
%_sbindir/ip6tables-*translate*
%_sbindir/arptables-nft*
%_sbindir/ebtables-nft*
%_sbindir/ebtables-*translate*
%_sbindir/xtables*
%_sbindir/xtables-monitor
%_sbindir/xtables-nft-multi
%_mandir/man1/*tables*
%_mandir/man8/*tables*
%if %{with legacy_backend}
%_sbindir/iptables-legacy*
%_sbindir/ip6tables-legacy*
%_sbindir/xtables-legacy-multi
# backend-legacy (implicit)
%if ! %{with libalternatives}
%if !%{with libalternatives}
%ghost %_sysconfdir/alternatives/iptables
%ghost %_sysconfdir/alternatives/iptables-restore
%ghost %_sysconfdir/alternatives/iptables-save
@@ -357,15 +384,25 @@ fi
%_datadir/libalternatives/iptables-save/1.conf
%dir %_datadir/libalternatives/iptables-save
%endif
%endif
%_sbindir/iptables
%_sbindir/iptables-restore
%_sbindir/iptables-save
%_sbindir/ip6tables
%_sbindir/ip6tables-restore
%_sbindir/ip6tables-save
%if %{without legacy_backend}
%_sbindir/arptables
%_sbindir/arptables-restore
%_sbindir/arptables-save
%_sbindir/ebtables
%_sbindir/ebtables-restore
%_sbindir/ebtables-save
%endif
%if %{with legacy_backend}
%files backend-nft
%if ! %{with libalternatives}
%if !%{with libalternatives}
%ghost %_sysconfdir/alternatives/iptables
%ghost %_sysconfdir/alternatives/iptables-restore
%ghost %_sysconfdir/alternatives/iptables-save
@@ -417,6 +454,7 @@ fi
%_sbindir/ebtables
%_sbindir/ebtables-restore
%_sbindir/ebtables-save
%endif
%files -n xtables-plugins
%_libdir/xtables/