source: projects/specs/trunk/i/iptables/iptables-vl.spec @ 12364

Revision 12364, 11.8 KB checked in by tomop, 4 years ago (diff)

updated 13 packages

acpid-2.0.32-1

at-3.1.23-1

autofs-5.1.6-1

dracut-050-3

fcgi-2.4.2-1

fcgiwrap-1.1.0.git20200404-2

firefox-68.6.1-1

initscripts-8.91.16-3

iptables-1.8.4-2

lxc-4.0.0-1

libnftnl-1.1.6-1

smp_utils-0.99-1

util-linux-2.35.1-1

Line 
1%bcond_with systemd
2
3Summary: Packet filtering tool
4Summary(ja): パケットフィルタリングツール
5Name: iptables
6Version: 1.8.4
7Release: 2%{?_dist_release}%{?with_systemd:.systemd}
8Group: System Environment/Base
9Vendor: Project Vine
10Distribution: Vine Linux
11Packager: daisuke
12License: GPL
13URL: http://www.netfilter.org/
14Source0: ftp://ftp.netfilter.org/pub/iptables/%{name}-%{version}.tar.bz2
15Source1: iptables.init
16Source2: iptables-config
17Source3: iptables.service
18Source4: sysconfig_iptables
19Source5: sysconfig_ip6tables
20
21BuildRoot: %{_tmppath}/%{name}-%{version}-root
22BuildRequires: bison flex perl
23BuildRequires: kernel-headers >= 2.4.0
24BuildRequires: libmnl-devel
25BuildRequires: libnetfilter_conntrack-devel
26BuildRequires: libnfnetlink-devel
27BuildRequires: libnftnl-devel
28BuildRequires: libpcap-devel
29Conflicts : kernel < 2.4.20
30%if %{with systemd}
31%{?systemd_requires}
32%else
33Requires(post): chkconfig
34Requires(preun): chkconfig
35%endif
36
37%global script_path %{_libexecdir}/iptables
38
39%description
40The iptables utility controls the network packet filtering code in the
41Linux kernel. If you need to set up firewalls and/or IP masquerading,
42you should install this package.
43
44%description -l ja
45iptables は Linux kernel のネットワークパケットフィルタを制御するための
46ユーティリティです。これを用いることで、ファイアウオールや IP マスカレー
47ディング, NAT などを設定することができます。
48
49%package devel
50Summary: Libraries, includes, etc. to develop iptables
51Summary(ja): iptables 開発用ライブラリ、ヘッダファイル
52Group: Development/Libraries
53Requires: iptables = %{version}-%{release}
54
55%description devel
56Libraries, include files, etc you can use to develop iptables.
57
58%description devel -l ja
59iptables を用いた開発に使用するライブラリやヘッダファイルです。
60
61%package ipv6
62Summary: IPv6 Packet filtering tool
63Summary(ja): IPv6 用パケットフィルタリングツール
64Group: System Environment/Base
65Requires: %{name} = %{version}-%{release}
66Requires(post): chkconfig
67Requires(preun): chkconfig
68
69%description ipv6
70The iptables package contains IPv6 (the next version of the IP
71protocol) support for iptables. Iptables controls the Linux kernel
72network packet filtering code, allowing you to set up firewalls and IP
73masquerading.
74
75%description ipv6 -l ja
76iptables-ipv6 は iptables で IPv6 をサポートするためのパッケージです。
77これを用いることで、IPv6 環境におけるファイアウオールや IP マスカレー
78ディング, NAT などを設定することができます。
79
80%prep
81%setup -q
82# %patch5 -p1 -b .cloexec
83
84%build
85CFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing" \
86./configure \
87            --enable-devel \
88            --enable-bpf-compiler \
89            --enable-libipq \
90            --prefix=/usr \
91            --bindir=/bin \
92            --sbindir=/sbin \
93            --sysconfdir=/etc \
94            --libdir=%{_libdir} \
95            --libexecdir=/%{_lib} \
96            --with-xtlibdir=/%{_lib}/xtables \
97            --mandir=%{_mandir} \
98            --includedir=%{_includedir} \
99            --with-kernel=/usr \
100            --with-kbuild=/usr \
101            --with-ksource=/usr
102
103# do not use rpath
104sed -i 's|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g' libtool
105sed -i 's|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g' libtool
106
107make %{?_smp_mflags}
108
109%install
110rm -rf %{buildroot}
111
112make install DESTDIR=%{buildroot}
113# remove la file(s)
114rm -f %{buildroot}/%{_libdir}/*.la
115
116# install ip*tables.h header files
117install -m 644 include/ip*tables.h %{buildroot}%{_includedir}/
118
119# install ipulog header file
120install -d -m 755 %{buildroot}%{_includedir}/libipulog/
121install -m 644 include/libipulog/*.h %{buildroot}%{_includedir}/libipulog/
122
123install -d -m 755 %{buildroot}/etc/sysconfig
124install -c -m 755 %{SOURCE2} %{buildroot}/etc/sysconfig/iptables-config
125sed -e 's;iptables;ip6tables;g' -e 's;IPTABLES;IP6TABLES;g' < %{SOURCE2} > ip6tables-config
126install -c -m 755 ip6tables-config %{buildroot}/etc/sysconfig/ip6tables-config
127
128%if %{with systemd}
129# install systemd service files
130install -d -m 755 %{buildroot}/%{_unitdir}
131install -c -m 644 %{SOURCE3} %{buildroot}/%{_unitdir}
132sed -e 's;iptables;ip6tables;g' -e 's;IPv4;IPv6;g' -e 's;/usr/libexec/ip6tables;/usr/libexec/iptables;g' < %{SOURCE3} > ip6tables.service
133install -c -m 644 ip6tables.service %{buildroot}/%{_unitdir}
134
135# install init scripts and configuration files
136install -d -m 755 %{buildroot}%{script_path}
137install -c -m 755 %{SOURCE1} %{buildroot}%{script_path}/iptables.init
138sed -e 's;iptables;ip6tables;g' -e 's;IPTABLES;IP6TABLES;g' < %{SOURCE1} > ip6tables.init
139install -c -m 755 ip6tables.init %{buildroot}%{script_path}/ip6tables.init
140install -c -m 600 %{SOURCE4} %{buildroot}%{_sysconfdir}/sysconfig/iptables
141install -c -m 600 %{SOURCE5} %{buildroot}%{_sysconfdir}/sysconfig/ip6tables
142%else
143# install init scripts and configuration files
144install -d -m 755 %{buildroot}/etc/rc.d/init.d
145install -c -m 755 %{SOURCE1} %{buildroot}/etc/rc.d/init.d/iptables
146sed -e 's;iptables;ip6tables;g' -e 's;IPTABLES;IP6TABLES;g' < %{SOURCE1} > ip6tables.init
147install -c -m 755 ip6tables.init %{buildroot}/etc/rc.d/init.d/ip6tables
148%endif
149
150
151%clean
152rm -rf %{buildroot}
153
154%post
155/sbin/ldconfig
156%if %{with systemd}
157%systemd_post iptables.service
158%else
159/sbin/chkconfig --add iptables
160%endif
161
162%preun
163%if %{with systemd}
164%systemd_preun iptables.service
165%else
166if [ "$1" = 0 ]; then
167        /sbin/chkconfig --del iptables
168fi
169%endif
170
171%postun
172%if %{with systemd}
173%systemd_postun iptables.service
174%else
175/sbin/ldconfig
176%endif
177
178%post ipv6
179%if %{with systemd}
180%systemd_post ip6tables.service
181%else
182/sbin/chkconfig --add ip6tables
183%endif
184
185%preun ipv6
186%if %{with systemd}
187%systemd_preun ip6tables.service
188%else
189if [ "$1" = 0 ]; then
190        /sbin/chkconfig --del ip6tables
191fi
192%endif
193
194%if %{with systemd}
195%postun ipv6
196%systemd_postun ip6tables.service
197%endif
198
199%files
200%defattr(-,root,root)
201%license COPYING
202%doc INSTALL INCOMPATIBILITIES
203%if %{with systemd}
204%{_unitdir}/iptables.service
205%dir %{script_path}
206%{script_path}/iptables.init
207%config(noreplace) %attr(0600,root,root) /etc/sysconfig/iptables
208%else
209%attr(0755,root,root) /etc/rc.d/init.d/iptables
210%endif
211%config(noreplace) %attr(0600,root,root) /etc/sysconfig/iptables-config
212%config(noreplace) %attr(0600,root,root) /etc/ethertypes
213/sbin/arptables*
214/sbin/ebtables*
215/sbin/iptables*
216/sbin/nfbpf_compile
217/sbin/nfnl_osf
218/sbin/xtables-*
219%{_mandir}/man1/*
220%{_mandir}/man8/*
221%exclude %{_mandir}/man8/ip6tables*
222%dir /%{_lib}/xtables
223/%{_lib}/xtables/libarpt*
224/%{_lib}/xtables/libebt*
225/%{_lib}/xtables/libipt*
226/%{_lib}/xtables/libxt*
227%{_libdir}/libip*tc.so.*
228%{_libdir}/libxtables.so.*
229%{_libdir}/libipq.so.*
230%{_datadir}/xtables/pf.os
231
232%files ipv6
233%defattr(-,root,root)
234%if %{with systemd}
235%{_unitdir}/ip6tables.service
236%dir %{script_path}
237%{script_path}/ip6tables.init
238%config(noreplace) %attr(0600,root,root) /etc/sysconfig/ip6tables
239%else
240%attr(0755,root,root) /etc/rc.d/init.d/ip6tables
241%endif
242%config(noreplace) %attr(0600,root,root) /etc/sysconfig/ip6tables-config
243/sbin/ip6tables*
244/bin/iptables-xml
245%{_mandir}/man8/ip6tables*
246/%{_lib}/xtables/libip6t*
247
248%files devel
249%defattr(-,root,root)
250%{_includedir}/*.h
251%dir %{_includedir}/libiptc
252%{_includedir}/libiptc/*.h
253%dir %{_includedir}/libipulog
254%{_includedir}/libipulog/*.h
255%{_mandir}/man3/*
256%{_libdir}/libipq.so
257%{_libdir}/libip*tc.so
258%{_libdir}/libxtables.so
259%{_libdir}/pkgconfig/libiptc.pc
260%{_libdir}/pkgconfig/libip4tc.pc
261%{_libdir}/pkgconfig/libip6tc.pc
262%{_libdir}/pkgconfig/libipq.pc
263%{_libdir}/pkgconfig/xtables.pc
264
265%changelog
266* Sun Apr 05 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.8.4-2
267- added --wait option to ip{,6}tables.init.
268
269* Sun Apr 05 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.8.4-1
270- new upstream release.
271- added systemd stuff (disabled as default).
272
273* Mon Sep 02 2019 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.8.3-1
274- new upstream release.
275
276* Sat Feb 24 2018 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.6.2-1
277- new upstream release.
278
279* Tue Dec 10 2013 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.4.21
280- new upstream release.
281
282* Fri Oct 19 2012 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.4.16.3
283- new upstream release 1.4.16.2
284- update source1 url
285
286* Thu Oct 18 2012 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.4.16.2
287- new upstream release 1.4.16.2
288- fix ipv6 subpackage ja discription
289- drop old patch
290- add with-xtlibdir in configure section
291
292* Fri Apr 22 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 1.4.10-1
293- update to 1.4.10
294
295* Thu Mar 04 2010 Daisuke SUZUKI <daisuke@linux.or.jp> 1.4.7-1
296- new upstream release
297
298* Wed Aug 12 2009 Daisuke SUZUKI <daisuke@linux.or.jp> 1.4.4-2
299- don't fail initscript if config file is not found.
300
301* Wed Jun 17 2009 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.4.4-1
302- new upstream release
303
304* Mon Apr 13 2009 Daisuke SUZUKI <daisuke@linux.or.jp> 1.4.3.2-1
305- new upstream release
306
307* Mon Apr 13 2009 Daisuke SUZUKI <daisuke@linux.or.jp> 1.4.3.1-1
308- new upstream release
309  - libiptc is now shared
310- drop patch1
311- update patch2
312- fix typo in spec file
313
314* Fri Apr 03 2009 Daisuke SUZUKI <daisuke@linux.or.jp> 1.4.2-2
315- rebuild to add sign..
316
317* Wed Apr 01 2009 Daisuke SUZUKI <daisuke@linux.or.jp> 1.4.2-1
318- new upstream release
319- spec in utf-8
320
321* Sat Jul 28 2007 Ryoichi INAGAKI <ryo1@bc.wakwak.com> 1.3.6-0vl2
322- changed devel package Group to Development/Libraries
323
324* Sat Nov 04 2006 Daisuke SUZUKI <daisuke@linux.or.jp> 1.3.6-0vl1
325- new upstream release
326- remove libiptc.a from %%files
327  - libiptc is not a public interface
328
329* Wed Sep 06 2006 Kazutaka HARADA <kazutaka@dc4.so-net.ne.jp> 1.3.5-0vl4
330- updates Summaries and Descriptions (<BTS:0101>)
331
332* Sun Aug 13 2006 Daisuke SUZUKI <daisuke@linux.or.jp> 1.3.5-0vl3
333- updates Summaries (<BTS:0101>)
334
335* Thu Jul 06 2006 MATSUBAYASHI Kohji <shaolin@vinelinux.org> 1.3.5-0vl2
336- add Patch10 (to include libipt_recent.so)
337
338* Tue Jun 13 2006 Daisuke SUZUKI <daisuke@linux.or.jp> 1.3.5-0vl1
339- new upstream release
340
341* Tue Jun 22 2004 Daisuke SUZUKI <daisuke@linux.or.jp> 1.2.11-0vl1
342- new upstream release
343
344* Thu Jun 17 2004 Daisuke SUZUKI <daisuke@linux.or.jp> 1.2.10-0vl1
345- new upstream release
346
347* Fri Nov 21 2003 Daisuke SUZUKI <daisuke@linux.or.jp> 1.2.9-0vl1
348- new upstream release
349
350* Thu Jul 24 2003 Takeru INOUE <takeru.inoue@gamma.ocn.ne.jp> 1.2.7a-0vl3
351- add ipv6 version
352
353* Sun Mar 23 2003 Takeru INOUE <takeru.inoue@gamma.ocn.ne.jp> 1.2.7a-0vl2
354- rebuild development version
355
356* Sun Sep 29 2002 Daisuke SUZUKI <daisuke@linux.or.jp> 1.2.7a-0vl1
357- new upstream release 1.2.7a
358
359* Mon Mar 25 2002 Seiya Nishizawa <seiya@kugi.kyoto-u.ac.jp> 1.2.6-0vl0
360- updated to 1.2.6
361
362* Thu Mar 07 2002 Toru Sagami <sagami@vinelinux.org> 1.2.5-0vl1
363- kernel24 -> kernel for Requires
364
365* Sat Mar 02 2002 Toru Sagami <sagami@vinelinux.org> 1.2.5-0vl0
366- updated to 1.2.5 and merged with RHL's spec
367- compatibilities: %%{_sbindir} -> /sbin, %%{_libdir} -> /lib
368
369* Mon Nov 19 2001 Daisuke SUZUKI <daisuke@linux.or.jp> 1.2.2-2vl1
370- build for Vine Linux based on conectiva iptables package.
371
372* Sun Jun 17 2001 Harald Welte <laforge@conectiva.com>
373+ iptables-1.2.2-2cl
374- fixes iptables-save / -restore problems (Closes: #3673)
375- fixes REJECT save problem
376- fixes ipv6 compile problem
377- moved binaries to sbindir instead of bindir
378
379* Wed May 30 2001 Harald Welte <laforge@conectiva.com>
380+ iptables-1.2.2-1cl
381- updated to 1.2.2 (Closes: #3376)
382
383* Wed May 30 2001 Wanderlei Antonio Cavassin <cavassin@conectiva.com>
384+ iptables-1.2.1a-2cl
385- recompiled for kernel-2.4.4-2cl (Closes: #3354)
386- spec file changes provided by Vagner Farias <vfarias@conectiva.com>
387
388* Fri Apr 20 2001 Harald Welte <laforge@conectiva.com>
389+ iptables-1.2.1a-1cl
390- updated to version 1.2.1a because of various bugfixes
391
392* Fri Mar 16 2001 Harald Welte <laforge@conectiva.com>
393+ iptables-1.2.1-1cl
394- updated to version 1.2.1
395
396* Wed Jan 10 2001 Andreas Hasenack <andreas@conectiva.com>
397- updated to version 1.2
398- added requirement for kernel >= 2.4.0
399
400* Thu Dec 14 2000 Andreas Hasenack <andreas@conectiva.com>
401- first package for Conectiva Linux
402
Note: See TracBrowser for help on using the repository browser.