diff --git a/ufw-0.33.tar.bz2 b/ufw-0.33.tar.bz2 deleted file mode 100644 index 0697a0a..0000000 --- a/ufw-0.33.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:3d1638bee14ffd1d7d9993c609f1951e0b2968cdcf95dd5ec8f74bb6757bca4e -size 241680 diff --git a/ufw-0.36.tar.gz b/ufw-0.36.tar.gz new file mode 100644 index 0000000..e67d26d --- /dev/null +++ b/ufw-0.36.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:754b22ae5edff0273460ac9f57509c3938187e0cf4fb9692c6a02833fff33cfc +size 580338 diff --git a/ufw-init b/ufw-init deleted file mode 100644 index 4387204..0000000 --- a/ufw-init +++ /dev/null @@ -1,61 +0,0 @@ -#! /bin/bash -# Copyright (c) 2000-2002 SuSE GmbH Nuernberg, Germany. -# Copyright (C) 2003,2004 SUSE Linux AG -# Copyright (C) 2005-2008 SUSE LINUX Products GmbH -# -# Author: LUCE Johann -# Maintainer: LUCE Johann -# -# /etc/init.d/ufw -# -### BEGIN INIT INFO -# Provides: ufw -# Required-Start: $local_fs $remote_fs -# Required-Stop: $local_fs $remote_fs -# Default-Start: 3 5 -# Default-Stop: 0 1 2 6 -# Short-Description: ufw_enable -# Description: Uncomplicated Firewall -### END INIT INFO - -UFWALL="/usr/sbin/ufw" - -test -x $UFWALL || exit 5 - -. /etc/rc.status -. /etc/ufw/ufw.conf - -rc_reset - -case "$1" in - start) - echo -n "checking if ufw enable" - if [ $ENABLED == 'yes' ] ;then - $UFWALL enable - else - echo -n "ufw is disable" - fi - rc_status -v - ;; - stop) - rc_status - ;; - restart|force-reload) - $O stop - $0 start - ;; - try-restart|reload) - if ($0 status) >/dev/null 2>&1; then - $0 start - else - rc_reset - fi - ;; - *) - echo "Usage: $0 {start|stop|status|restart|reload|}" - exit 1 - ;; -esac - -# Set exit status -rc_exit diff --git a/ufw.changes b/ufw.changes index e90f6d1..b58c831 100644 --- a/ufw.changes +++ b/ufw.changes @@ -1,3 +1,116 @@ +------------------------------------------------------------------- +Thu Jan 08 13:44:54 UTC 2019 - alexander_naumov@opensuse.org + +- Update to version 0.36 + * adds snap packaging + * concurrent updates + * many bug fixes + * a new 'prepend' command to better support IPS and dynamic firewalls. + +------------------------------------------------------------------- +Fri Dec 30 20:29:23 UTC 2016 - mardnh@gmx.de + +- Update to version 0.35 + * update check-requirements and README for python 3.5 + * update unit tests to not fail when /proc/net/* has no useful information + (Closes: 797020) + * update rsyslog example to use 'stop' instead of the deprecated '~' + (Closes: 798100) + * add --rootdir and --datadir options to ufw and ufw-init to make + relocatable + * files owned by 'clickpkg' are ok too + * add preliminary snappy packaging + * add support for comments (LP: #448503) + * don't allow 'route delete NUM' and suggest 'delete NUM' instead + * move user[6].rules to /etc/ufw (LP: #728128) + * update README: python3 < 3.4 is no longer supported + +- remove Source2: ufw.service + * replaced with upstream provided proper systemd-service file +- add support for bash completion +- minor specfile cleanup + +------------------------------------------------------------------- +Wed Dec 2 13:22:00 UTC 2015 - p.drouand@gmail.com + +- Update to version 0.34 + * refactor capabilities checks and only call when needed + * error out early instead of tracing back with iptables errors in + get_netfilter_capabilities() (LP: #1044361) + * fix TypeError which somehow only manifested itself when using zh_CN + * add 'reload' to help (LP: #1059060) + * check-requirements now gives iptables output on failure. Patch thanks to + S. Nizio. + * use conntrack instead of state module. Patch based on work by S. Nizio. + (LP: #1065297) + * don't use get_netfilter_capabilities() with ipv6 if ipv6 is disabled + (LP: #1039729, LP: #1062521) + * fix parse error when finding PPID (LP: #1101304) + * implement before and after hooks in /etc/ufw/(before|after).init + (LP: #1075975) TODO: add tests + * add unit test framework and cleanup, remove dead and refactor some code + * honor UFW_SKIP_CHECKS=1 environment variable with setup.py, which eases + testing + * tests/check-requirements: add a check for -m rt --rt-type 0 (LP: #1191197) + * match simple rule syntax and don't allow ports with esp and ah protocols + with extended rule syntax + * when displaying extended rules via parser.get_command(), show "out" if the + direction is "out" and there is no corresponding interface + * fix return of various invalid extended rules in parser.get_command() + * clarify 'limit' command in man page (LP: #1089262) + * implement route rules (ie, manage FORWARD, LP: #262421). See man page for + details. This change reworked interface parsing and we now allow + interfaces with '_' in the name (LP: #1098472) + * add state RELATED,ESTABLISHED rule to ufw-before-forward in before*.rules + like we do with ufw-before-input. This will only affect systems with ip + forwarding enabled via sysctl + * add ufw[6]-track-forward chain and handle it the same as for + ufw[6]track-input and ufw[6]-track-output + * document ufw[6]-track-* in README (dropped in previous commit) + * fix for 'status' not distingushing between some v4/v6 targets + (LP: #1078665) + * add safe icmp packets packets to ufw-before-forward in before*.rules like + we do for ufw-before-input. This will only affect systems with ip + forwarding enabled via sysctl + * update check-requirements for python 3.3 and 3.4 + * add 5269/tcp to XMPP (LP: #1327162) + * fix traceback with forward rule + * import new and updated Launchpad translations: + - po/ar.po, po/ast.po, po/bg.po, po/bs.po, po/ca.po, po/ce.po, po/cs.po, + po/da.po, po/de.po, po/el.po, po/en_AU.po, po/en_GB.po, po/es.po, + po/et.po, po/fi.po, po/fr.po, po/he.po, po/hu.po, po/id.po, po/it.po, + po/ja.po, po/ko.po, po/lv.po, po/nb.po, po/nl.po, po/pl.po, po/pt_BR.po, + po/pt.po, po/ru.po, po/se.po, po/sk.po, po/sl.po, po/sr.po, po/sv.po, + po/tl.po, po/tr.po, po/uk.po, po/ur.po, po/zh_CN.po, po/zh_TW.po + * also use .lower() on translations for 'yes' (LP: #1438647) + * adjust/rearrange before6.rules for rfc4890 'must not be blocked' and + 'should not be blocked' (LP: #1434525, LP: #1030214) + * doc/systemd.example: add service file from Ubuntu (LP: #1341083) + * correctly spell qBittorrent (LP: #1273965) + * update man page for app rules (LP: #1155292) + * support igmp protocol (LP: #946322) + * adjust testsuite for systems supporting smtp/udp (LP: #815982) + * enforce that basic commands don't have arguments (LP: #1155250) + * update command completion for --dry-run, --force, --help and route + (LP: #1225666) + * support gre protocol (LP: #1418879) + * support ./setup.py build (LP: #819600) + * doc/ufw.8: + - clarify log level behavior (LP: #1461701) + - add app profile syntax + - add protocol support + * skip profiles with invalid port declarations (LP: #1201934) + * tests/check-locales: skip locales that fail to install or generate + +------------------------------------------------------------------- +Tue Apr 7 16:09:56 UTC 2015 - p.drouand@gmail.com + +- Remove obsolete macros +- Drop sysvinit support; ufw doesn't build for SLE11 anyway +- Cleanup specfile +- Split out translation files +- Use download Url as source + ------------------------------------------------------------------- Fri Nov 9 12:28:27 UTC 2012 - johann.luce@wanadoo.fr diff --git a/ufw.service b/ufw.service deleted file mode 100644 index 48258c7..0000000 --- a/ufw.service +++ /dev/null @@ -1,19 +0,0 @@ -# This file is part of systemd. -# -# systemd is free software; you can redistribute it and/or modify it -# under the terms of the GNU General Public License as published by -# the Free Software Foundation; either version 2 of the License, or -# (at your option) any later version. - -[Unit] -Description=/etc/init.d/ufw Compatibility -After=network.target - - -[Service] -ExecStart=/etc/init.d/ufw start -ExecStop=/etc/init.d/ufw stop -StandardOutput=syslog - -[Install] -WantedBy=multi-user.target diff --git a/ufw.spec b/ufw.spec index 9cfd1fd..93602ca 100644 --- a/ufw.spec +++ b/ufw.spec @@ -1,7 +1,7 @@ # # spec file for package ufw # -# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,32 +17,30 @@ Name: ufw -Version: 0.33 +Version: 0.36 Release: 0 Summary: Uncomplicated Firewall -License: GPL-3.0 +License: GPL-3.0-only Group: Productivity/Networking/Security -Url: http://launchpad.net/%{name} -Source0: %{name}-%{version}.tar.bz2 -Source1: ufw-init -Source2: ufw.service -BuildArch: noarch - +Url: https://launchpad.net/ufw +Source0: https://launchpad.net/ufw/%{version}/%{version}/+download/%{name}-%{version}.tar.gz +BuildRequires: bash-completion BuildRequires: iptables BuildRequires: python-base >= 2.7 BuildRequires: python-devel - -%if 0%{?suse_version} > 1140 -BuildRequires: systemd +BuildRequires: systemd-rpm-macros +Requires: bash-completion +Recommends: %{name}-lang +BuildArch: noarch %systemd_requires -%endif -#Requires: %description The Uncomplicated Firewall(ufw) is a front-end for netfilter, which aims to make it easier for people unfamiliar with firewall concepts. -Ufw provides a framework for managing netfilter as well as -manipulating the firewall. +Ufw provides a framework for managing netfilter as well as +manipulating the firewall. + +%lang_package %prep %setup -q @@ -54,106 +52,83 @@ manipulating the firewall. #python setup.py build %install -rm -rf %{buildroot} -python setup.py install --prefix=/usr \ ---root %{buildroot} -mkdir -p $RPM_BUILD_ROOT/etc/init.d/ -install -m 755 $RPM_SOURCE_DIR/ufw-init $RPM_BUILD_ROOT/etc/init.d/ufw -ln -s /etc/init.d/ufw $RPM_BUILD_ROOT/usr/sbin/rcufw -ln -s /usr/share/man/man8/ufw.8.gz $RPM_BUILD_ROOT/usr/share/man/man8/rcufw.8.gz -mkdir -p $RPM_BUILD_ROOT/usr/bin/ -ln -s /usr/sbin/ufw $RPM_BUILD_ROOT/usr/bin/ufw -%if 0%{?suse_version} > 1220 -mkdir -p $RPM_BUILD_ROOT/usr/lib/systemd/ -mkdir -p $RPM_BUILD_ROOT/usr/lib/systemd/system -install -m 644 $RPM_SOURCE_DIR/ufw.service $RPM_BUILD_ROOT/usr/lib/systemd/system/ufw.service -%else -mkdir -p $RPM_BUILD_ROOT/lib/systemd/ -mkdir -p $RPM_BUILD_ROOT/lib/systemd/system -install -m 644 $RPM_SOURCE_DIR/ufw.service $RPM_BUILD_ROOT/lib/systemd/system/ufw.service -%endif +python setup.py install --prefix=%{_prefix} --root %{buildroot} +mkdir -p %{buildroot}/%{_bindir} +install -Dm0644 shell-completion/bash %{buildroot}%{_sysconfdir}/bash_completion.d/ufw.sh +install -Dm0644 doc/systemd.example %{buildroot}%{_unitdir}/%{name}.service +ln -s %{_mandir}/man8/ufw.8.gz %{buildroot}%{_mandir}/man8/rcufw.8.gz +ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name} +ln -s %{_sbindir}/ufw %{buildroot}/%{_bindir}/ufw %pre -%if 0%{?suse_version} > 1140 %service_add_pre ufw.service -%endif %post -%if 0%{?suse_version} > 1140 %service_add_post ufw.service -%endif %preun -%stop_on_removal ufw -%if 0%{?suse_version} > 1140 %service_del_preun ufw.service -%endif %postun -%restart_on_update -%insserv_cleanup /etc/init.d/ufw -%if 0%{?suse_version} > 1140 %service_del_postun ufw.service -%endif %files %defattr(-,root,root) - /lib/ufw/ufw-init - /lib/ufw/ufw-init-functions - /lib/ufw/user.rules - /lib/ufw/user6.rules - /usr/lib/python%python_version/site-packages/ufw-%{version}-py%python_version.egg-info - /usr/sbin/ufw - /usr/sbin/rcufw - /usr/bin/ufw - /usr/share/man/man8/ufw-framework.8.gz - /usr/share/man/man8/ufw.8.gz - /usr/share/man/man8/rcufw.8.gz - %config/etc/init.d/ufw - %config/etc/ufw - %config/etc/ufw/applications.d - %config/etc/default/ufw -%if 0%{?suse_version} > 1220 - /usr/lib/systemd/system/ufw.service -%else - /lib/systemd/system/ufw.service -%endif - /lib/ufw - /usr/lib/python%python_version/site-packages/ufw - /usr/share/ufw - /usr/share/ufw/iptables -%lang(zh_TW) /usr/share/ufw/messages/zh_TW.mo -%lang(ar) /usr/share/ufw/messages/ar.mo -%lang(bg) /usr/share/ufw/messages/bg.mo -%lang(ca) /usr/share/ufw/messages/ca.mo -%lang(cs) /usr/share/ufw/messages/cs.mo -%lang(da) /usr/share/ufw/messages/da.mo -%lang(de) /usr/share/ufw/messages/de.mo -%lang(el) /usr/share/ufw/messages/el.mo -%lang(en_AU) /usr/share/ufw/messages/en_AU.mo -%lang(en_GB) /usr/share/ufw/messages/en_GB.mo -%lang(es) /usr/share/ufw/messages/es.mo -%lang(fi) /usr/share/ufw/messages/fi.mo -%lang(fr) /usr/share/ufw/messages/fr.mo -%lang(he) /usr/share/ufw/messages/he.mo -%lang(hu) /usr/share/ufw/messages/hu.mo -%lang(id) /usr/share/ufw/messages/id.mo -%lang(it) /usr/share/ufw/messages/it.mo -%lang(nb) /usr/share/ufw/messages/nb.mo -%lang(nl) /usr/share/ufw/messages/nl.mo -%lang(pl) /usr/share/ufw/messages/pl.mo -%lang(pt) /usr/share/ufw/messages/pt.mo -%lang(pt_BR) /usr/share/ufw/messages/pt_BR.mo -%lang(ru) /usr/share/ufw/messages/ru.mo -%lang(sk) /usr/share/ufw/messages/sk.mo -%lang(dl) /usr/share/ufw/messages/sl.mo -%lang(sr) /usr/share/ufw/messages/sr.mo -%lang(sv) /usr/share/ufw/messages/sv.mo -%lang(tl) /usr/share/ufw/messages/tl.mo -%lang(zh_CN) /usr/share/ufw/messages/zh_CN.mo -%lang(ast) /usr/share/ufw/messages/ast.mo -%lang(bs) /usr/share/ufw/messages/bs.mo -%lang(ja) /usr/share/ufw/messages/ja.mo -%lang(ur) /usr/share/ufw/messages/ur.mo +/lib/ufw/ufw-init +/lib/ufw/ufw-init-functions +%{python_sitelib}/ufw-%{version}-py%{python_version}.egg-info +%{_sbindir}/ufw +%{_sbindir}/rcufw +%{_bindir}/ufw +%{_mandir}/man8/ufw-framework.8%{ext_man} +%{_mandir}/man8/ufw.8%{ext_man} +%{_mandir}/man8/rcufw.8%{ext_man} +%config %{_sysconfdir}/%{name} +%config %{_sysconfdir}/%{name}/applications.d +%config %{_sysconfdir}/default/ufw +%config %{_sysconfdir}/bash_completion.d/ufw.sh +%{_unitdir}/%{name}.service +/lib/ufw +%{python_sitelib}/ufw +%{_datadir}/%{name} +%{_datadir}/%{name}/iptables +%exclude %{_datadir}/%{name}/messages + +%files lang +%defattr(-,root,root) +%dir %{_datadir}/%{name}/messages +%lang(zh_TW) %{_datadir}/%{name}/messages/zh_TW.mo +%lang(ar) %{_datadir}/%{name}/messages/ar.mo +%lang(bg) %{_datadir}/%{name}/messages/bg.mo +%lang(ca) %{_datadir}/%{name}/messages/ca.mo +%lang(cs) %{_datadir}/%{name}/messages/cs.mo +%lang(da) %{_datadir}/%{name}/messages/da.mo +%lang(de) %{_datadir}/%{name}/messages/de.mo +%lang(el) %{_datadir}/%{name}/messages/el.mo +%lang(en_AU) %{_datadir}/%{name}/messages/en_AU.mo +%lang(en_GB) %{_datadir}/%{name}/messages/en_GB.mo +%lang(es) %{_datadir}/%{name}/messages/es.mo +%lang(fi) %{_datadir}/%{name}/messages/fi.mo +%lang(fr) %{_datadir}/%{name}/messages/fr.mo +%lang(he) %{_datadir}/%{name}/messages/he.mo +%lang(hu) %{_datadir}/%{name}/messages/hu.mo +%lang(id) %{_datadir}/%{name}/messages/id.mo +%lang(it) %{_datadir}/%{name}/messages/it.mo +%lang(nb) %{_datadir}/%{name}/messages/nb.mo +%lang(nl) %{_datadir}/%{name}/messages/nl.mo +%lang(pl) %{_datadir}/%{name}/messages/pl.mo +%lang(pt) %{_datadir}/%{name}/messages/pt.mo +%lang(pt_BR) %{_datadir}/%{name}/messages/pt_BR.mo +%lang(ru) %{_datadir}/%{name}/messages/ru.mo +%lang(sk) %{_datadir}/%{name}/messages/sk.mo +%lang(dl) %{_datadir}/%{name}/messages/sl.mo +%lang(sr) %{_datadir}/%{name}/messages/sr.mo +%lang(sv) %{_datadir}/%{name}/messages/sv.mo +%lang(tl) %{_datadir}/%{name}/messages/tl.mo +%lang(zh_CN) %{_datadir}/%{name}/messages/zh_CN.mo +%lang(ast) %{_datadir}/%{name}/messages/ast.mo +%lang(bs) %{_datadir}/%{name}/messages/bs.mo +%lang(ja) %{_datadir}/%{name}/messages/ja.mo +%lang(ur) %{_datadir}/%{name}/messages/ur.mo %changelog