]>
Commit | Line | Data |
---|---|---|
0e79507b | 1 | # |
f0f3ff9d | 2 | # TODO: |
c0ae8513 | 3 | # - update BR to real required llh version |
11e85ced | 4 | # - check if kernel-headers are still required to properly build iptabels for dist kernel |
83394586 | 5 | # - fix makefile (-D_UNKNOWN_KERNEL_POINTER_SIZE issue) |
f0f3ff9d | 6 | # |
0e79507b | 7 | # Conditional build: |
c322322e TP |
8 | %bcond_without doc # without documentation (HOWTOS) which needed TeX |
9 | %bcond_without dist_kernel # without distribution kernel | |
61d2127f | 10 | %bcond_without pcap # pcap-dependend utils (nfbpf_compile, nfsynproxy) |
c0ae8513 | 11 | %bcond_with vserver # build xt_owner module for non-dist kernel with vserver support |
d67a1056 | 12 | %bcond_with batch # build iptables-batch |
a0c2c091 | 13 | %bcond_with static # build static libraries, no dynamic modules (all linked into binaries) |
c0ae8513 | 14 | %bcond_with ipt_IPV4OPTSSTRIP # enable ipt_IPV4OPTSSTRIP for non-dist kernel |
11e85ced JB |
15 | %bcond_with ipt_rpc # enable ipt_rpc for non-dist kernel |
16 | %bcond_with xt_layer7 # enable xt_layer7 for non-dist kernel | |
c0ae8513 JB |
17 | %bcond_with usekernelsrc # include kernel headers from %{_kernelsrcdir} |
18 | ||
19 | %if %{with dist_kernel} | |
20 | %define with_ipt_IPV4OPTSSTRIP 1 | |
21 | %define with_ipt_rpc 1 | |
22 | %define with_xt_layer7 1 | |
c0ae8513 | 23 | %endif |
655beef5 | 24 | |
511b0491 | 25 | %define orgname iptables |
4869bea7 | 26 | %define name6 ip6tables |
511b0491 | 27 | |
0e79507b | 28 | Summary: Extensible packet filtering system && extensible NAT system |
e8c37038 ER |
29 | Summary(pl.UTF-8): System filtrowania pakietów oraz system translacji adresów (NAT) |
30 | Summary(pt_BR.UTF-8): Ferramenta para controlar a filtragem de pacotes no kernel-2.6.x | |
31 | Summary(ru.UTF-8): Утилиты для управления пакетными фильтрами ядра Linux | |
32 | Summary(uk.UTF-8): Утиліти для керування пакетними фільтрами ядра Linux | |
33 | Summary(zh_CN.UTF-8): Linux内核包过滤管理工具 | |
4869bea7 | 34 | Name: iptables%{?with_vserver:-vserver} |
037d4c5e | 35 | Version: 1.6.0 |
511b0491 | 36 | Release: 3 |
a0c2c091 | 37 | License: GPL v2 |
07594664 | 38 | Group: Networking/Admin |
511b0491 | 39 | Source0: ftp://ftp.netfilter.org/pub/iptables/%{orgname}-%{version}.tar.bz2 |
037d4c5e | 40 | # Source0-md5: 27ba3451cb622467fc9267a176f19a31 |
511b0491 | 41 | Source1: cvs://cvs.samba.org/netfilter/%{orgname}-howtos.tar.bz2 |
0e79507b | 42 | # Source1-md5: 2ed2b452daefe70ededd75dc0061fd07 |
511b0491 | 43 | Source2: %{orgname}.init |
f17e2be4 | 44 | Source3: %{name6}.init |
511b0491 | 45 | Source6: %{orgname}-config |
a94df067 | 46 | Source7: %{name6}-config |
511b0491 | 47 | Source8: %{orgname}.service |
63a6c82f | 48 | Source9: %{name6}.service |
9ec3dc4d JR |
49 | Source10: ebtables.init |
50 | Source11: ebtables-config | |
51 | Source12: ebtables.service | |
c0ae8513 | 52 | # --- GENERAL CHANGES (patches<10): |
511b0491 | 53 | Patch0: %{orgname}-man.patch |
d973e24a | 54 | # additional utils; off by default |
511b0491 | 55 | Patch1: %{orgname}-batch.patch |
4e86922f | 56 | Patch2: no-libiptc.patch |
511b0491 AM |
57 | Patch3: %{orgname}-aligned_u64.patch |
58 | Patch4: %{orgname}-ebtables.patch | |
c0ae8513 | 59 | # --- ADDITIONAL/CHANGED EXTENSIONS: |
d973e24a | 60 | # just ipt_IPV4OPTSSTRIP now |
511b0491 | 61 | Patch10: %{orgname}-20070806.patch |
a0c2c091 | 62 | # xt_layer7; almost based on iptables-1.4-for-kernel-2.6.20forward-layer7-2.18.patch |
92b2e10a | 63 | # http://downloads.sourceforge.net/l7-filter/netfilter-layer7-v2.18.tar.gz |
511b0491 | 64 | Patch11: %{orgname}-layer7.patch |
a0c2c091 | 65 | # ipt_rpc |
511b0491 | 66 | Patch12: %{orgname}-old-1.3.7.patch |
efecc54e | 67 | # xt_IMQ; http://linuximq.net/patchs/iptables-1.4.12-IMQ-test4.diff |
511b0491 | 68 | Patch13: %{orgname}-imq.patch |
92b2e10a | 69 | # enhances ipt_owner/ip6t_owner; http://people.linux-vserver.org/~dhozac/p/m/iptables-1.3.5-owner-xid.patch (currently disabled, needs update for xt_owner) |
511b0491 | 70 | Patch14: %{orgname}-owner-xid.patch |
d973e24a | 71 | # adjusts xt_owner for vserver-enabled kernel |
511b0491 | 72 | Patch15: %{orgname}-owner-struct-size-vs.patch |
c588d6c8 | 73 | URL: http://www.netfilter.org/ |
d973e24a | 74 | BuildRequires: autoconf >= 2.50 |
6dc7a739 | 75 | BuildRequires: automake |
92a25fae | 76 | BuildRequires: groff |
01369ac8 | 77 | BuildRequires: libnetfilter_conntrack-devel >= 1.0.4 |
a0c2c091 | 78 | BuildRequires: libnfnetlink-devel >= 1.0 |
52cee3e3 | 79 | BuildRequires: libnftnl-devel |
61d2127f | 80 | %{?with_pcap:BuildRequires: libpcap-devel} |
78e5603d | 81 | BuildRequires: libtool |
d973e24a | 82 | BuildRequires: pkgconfig >= 1:0.9.0 |
63a6c82f | 83 | BuildRequires: rpmbuild(macros) >= 1.647 |
0e79507b | 84 | %if %{with doc} |
c7a0fe01 | 85 | BuildRequires: sed >= 4.0 |
0e79507b PS |
86 | BuildRequires: sgml-tools |
87 | BuildRequires: sgmls | |
c322322e | 88 | BuildRequires: tetex-dvips |
6d30ffc5 | 89 | BuildRequires: tetex-format-latex |
c588d6c8 | 90 | BuildRequires: tetex-latex |
0e79507b | 91 | BuildRequires: tetex-tex-babel |
90b6f30d | 92 | BuildRequires: texlive-fonts-cmsuper |
122b99b3 | 93 | BuildRequires: texlive-fonts-jknappen |
199610f3 | 94 | %endif |
c0ae8513 | 95 | %if %{with dist_kernel} |
c0ae8513 | 96 | BuildRequires: kernel%{_alt_kernel}-headers(netfilter) |
0e79507b | 97 | %endif |
c0ae8513 | 98 | BuildRequires: linux-libc-headers >= 7:2.6.22.1 |
511b0491 | 99 | Requires: %{orgname}-libs = %{version}-%{release} |
ce449f84 | 100 | Requires: libnetfilter_conntrack >= 1.0.4 |
d973e24a | 101 | Requires: libnfnetlink >= 1.0 |
8417cd8c JR |
102 | Provides: arptables |
103 | Provides: ebtables | |
c322322e | 104 | Provides: firewall-userspace-tool |
037d4c5e JB |
105 | Obsoletes: arptables |
106 | Obsoletes: ebtables | |
0e79507b | 107 | Obsoletes: ipchains |
e51026eb | 108 | Obsoletes: iptables24-compat |
c7a0fe01 | 109 | Obsoletes: netfilter |
149c216c | 110 | Conflicts: xtables-addons < 1.25 |
511b0491 | 111 | BuildRoot: %{tmpdir}/%{orgname}-%{version}-root-%(id -u -n) |
0e79507b PS |
112 | |
113 | %description | |
114 | An extensible NAT system, and an extensible packet filtering system. | |
cc6a4371 | 115 | Replacement of ipchains in 2.4 and higher kernels. |
0e79507b | 116 | |
30bd20eb JR |
117 | %description -l pl.UTF-8 |
118 | Wydajny system translacji adresów (NAT) oraz system filtrowania | |
119 | pakietów. Zamiennik ipchains w jądrach 2.4 i nowszych. | |
0e79507b | 120 | |
30bd20eb JR |
121 | %description -l pt_BR.UTF-8 |
122 | Esta é a ferramenta que controla o código de filtragem de pacotes do | |
123 | kernel 2.4, obsoletando ipchains. Com esta ferramenta você pode | |
0e79507b | 124 | configurar filtros de pacotes, NAT, mascaramento (masquerading), |
30bd20eb | 125 | regras dinâmicas (stateful inspection), etc. |
0e79507b | 126 | |
30bd20eb JR |
127 | %description -l ru.UTF-8 |
128 | iptables управляют кодом фильтрации сетевых пакетов в ядре Linux. Они | |
129 | позволяют вам устанавливать межсетевые экраны (firewalls) и IP | |
130 | маскарадинг, и т.п. | |
0e79507b | 131 | |
30bd20eb JR |
132 | %description -l uk.UTF-8 |
133 | iptables управляють кодом фільтрації пакетів мережі в ядрі Linux. Вони | |
134 | дозволяють вам встановлювати міжмережеві екрани (firewalls) та IP | |
135 | маскарадинг, тощо. | |
0e79507b | 136 | |
dfc0441a AM |
137 | %package libs |
138 | Summary: iptables libraries | |
139 | Summary(pl.UTF-8): Biblioteki iptables | |
e4e1bc3c | 140 | Group: Libraries |
ae000808 | 141 | Conflicts: iptables < 1.4.3-1 |
dfc0441a AM |
142 | |
143 | %description libs | |
144 | iptables libraries. | |
145 | ||
146 | %description libs -l pl.UTF-8 | |
147 | Biblioteki iptables. | |
148 | ||
0e79507b PS |
149 | %package devel |
150 | Summary: Libraries and headers for developing iptables extensions | |
e8c37038 | 151 | Summary(pl.UTF-8): Biblioteki i nagłówki do tworzenia rozszerzeń iptables |
0e79507b | 152 | Group: Development/Libraries |
511b0491 | 153 | Requires: %{orgname}-libs = %{epoch}:%{version}-%{release} |
e51026eb | 154 | Obsoletes: iptables24-devel |
0e79507b PS |
155 | |
156 | %description devel | |
157 | Libraries and headers for developing iptables extensions. | |
158 | ||
30bd20eb JR |
159 | %description devel -l pl.UTF-8 |
160 | Biblioteki i pliki nagłówkowe niezbędne do tworzenia rozszerzeń dla | |
0e79507b PS |
161 | iptables. |
162 | ||
dfc0441a AM |
163 | %package static |
164 | Summary: Static iptables libraries | |
165 | Summary(pl.UTF-8): Biblioteki statyczne iptables | |
166 | Group: Development/Libraries | |
167 | Requires: %{name}-devel = %{epoch}:%{version}-%{release} | |
168 | ||
169 | %description static | |
170 | Static iptables libraries. | |
171 | ||
dbbdf4ad | 172 | %description static -l pl.UTF-8 |
dfc0441a AM |
173 | Biblioteki statyczne iptables. |
174 | ||
0e79507b PS |
175 | %package init |
176 | Summary: Iptables init (RedHat style) | |
e8c37038 | 177 | Summary(pl.UTF-8): Iptables init (w stylu RedHata) |
0e79507b | 178 | Group: Networking/Admin |
c322322e | 179 | Requires(post,preun): /sbin/chkconfig |
63a6c82f | 180 | Requires(post,preun,postun): systemd-units >= 38 |
c8cf446f | 181 | Requires: %{name} |
655beef5 | 182 | Requires: rc-scripts >= 0.4.3.0 |
63a6c82f | 183 | Requires: systemd-units >= 38 |
0e79507b | 184 | Obsoletes: firewall-init |
52d89633 | 185 | Obsoletes: firewall-init-ipchains |
e51026eb | 186 | Obsoletes: iptables24-init |
0e79507b PS |
187 | |
188 | %description init | |
189 | Iptables-init is meant to provide an alternate way than firewall-init | |
190 | to start and stop packet filtering through iptables(8). | |
191 | ||
30bd20eb JR |
192 | %description init -l pl.UTF-8 |
193 | Iptables-init ma na celu udostępnienie alternatywnego w stosunku do | |
194 | firewall-init sposobu włączania i wyłączania filtrów IP jądra poprzez | |
0e79507b PS |
195 | iptables(8). |
196 | ||
197 | %prep | |
511b0491 | 198 | %setup -q -n iptables-%{version} -a1 |
65ffbe22 | 199 | %patch0 -p1 |
d973e24a | 200 | %if %{with batch} |
65ffbe22 | 201 | %patch1 -p1 |
93ad9851 | 202 | %endif |
4e86922f | 203 | %patch2 -p1 |
534f47dd | 204 | %patch3 -p1 |
87ffab9e | 205 | %patch4 -p1 |
e803115b | 206 | |
c0ae8513 JB |
207 | %{?with_ipt_IPV4OPTSSTRIP:%patch10 -p1} |
208 | %{?with_xt_layer7:%patch11 -p1} | |
209 | %{?with_ipt_rpc:%patch12 -p1} | |
efecc54e | 210 | %patch13 -p1 |
d973e24a | 211 | %if %{with vserver} |
52cee3e3 | 212 | %patch14 -p1 |
d973e24a | 213 | %patch15 -p1 |
dfc0441a | 214 | %endif |
6c13dbc4 | 215 | |
0e79507b | 216 | %build |
78e5603d | 217 | %{__libtoolize} |
0a44bfb5 | 218 | %{__aclocal} -I m4 |
03ece50a | 219 | %{__autoconf} |
c0ae8513 | 220 | %{__autoheader} |
6dc7a739 | 221 | %{__automake} |
222 | %configure \ | |
b0abf64e | 223 | CFLAGS="%{rpmcflags} %{rpmcppflags} -D%{!?debug:N}DEBUG" \ |
c0ae8513 | 224 | %{?with_usekernelsrc:--with-kernel=%{_kernelsrcdir}} \ |
61d2127f | 225 | %{?with_pcap:--enable-bpf-compiler} \ |
6dc7a739 | 226 | --enable-libipq \ |
61d2127f | 227 | %{?with_pcap:--enable-nfsynproxy} \ |
a0c2c091 | 228 | %{?with_static:--enable-static} |
6dc7a739 | 229 | |
8b34696c | 230 | %{__make} -j1 all \ |
a0c2c091 | 231 | V=1 |
0e79507b | 232 | |
199610f3 | 233 | %if %{with doc} |
2958d7d0 | 234 | %{__make} -j1 -C iptables-howtos |
199610f3 PG |
235 | sed -i 's:$(HTML_HOWTOS)::g; s:$(PSUS_HOWTOS)::g' iptables-howtos/Makefile |
236 | %endif | |
0e79507b PS |
237 | |
238 | %install | |
239 | rm -rf $RPM_BUILD_ROOT | |
a94df067 | 240 | install -d $RPM_BUILD_ROOT/etc/{rc.d/init.d,sysconfig} \ |
63a6c82f JR |
241 | $RPM_BUILD_ROOT{%{_includedir},%{_libdir},%{_mandir}/man3} \ |
242 | $RPM_BUILD_ROOT%{systemdunitdir} | |
0e79507b | 243 | |
6dc7a739 | 244 | %{__make} install \ |
0e79507b PS |
245 | DESTDIR=$RPM_BUILD_ROOT \ |
246 | BINDIR=%{_sbindir} \ | |
247 | MANDIR=%{_mandir} \ | |
248 | LIBDIR=%{_libdir} | |
249 | ||
037d4c5e JB |
250 | # not installed; provide so we can obsolete arptables and ebtables packages |
251 | ln -sf xtables-compat-multi $RPM_BUILD_ROOT%{_sbindir}/arptables | |
252 | ln -sf xtables-compat-multi $RPM_BUILD_ROOT%{_sbindir}/ebtables | |
253 | ||
f9caff1e JB |
254 | # upstream solution with empty library with two DT_NEEDED entries doesn't work |
255 | # with PLD's default LDFLAGS (--as-needed --no-copy-dt-needed-entries); | |
256 | # use ld script instead (see no-libiptc.patch for source) | |
257 | cp -p libiptc/libiptc.ld $RPM_BUILD_ROOT%{_libdir}/libiptc.so | |
258 | ||
511b0491 | 259 | install -p %{SOURCE2} $RPM_BUILD_ROOT/etc/rc.d/init.d/%{orgname} |
90953ac7 | 260 | install -p %{SOURCE3} $RPM_BUILD_ROOT/etc/rc.d/init.d/%{name6} |
c322322e | 261 | |
511b0491 | 262 | install -p %{SOURCE6} $RPM_BUILD_ROOT/etc/sysconfig/%{orgname}-config |
a94df067 JR |
263 | install -p %{SOURCE7} $RPM_BUILD_ROOT/etc/sysconfig/%{name6}-config |
264 | ||
511b0491 | 265 | install -p %{SOURCE8} $RPM_BUILD_ROOT%{systemdunitdir}/%{orgname}.service |
63a6c82f JR |
266 | install -p %{SOURCE9} $RPM_BUILD_ROOT%{systemdunitdir}/%{name6}.service |
267 | ||
9ec3dc4d JR |
268 | install -p %{SOURCE10} $RPM_BUILD_ROOT/etc/rc.d/init.d/ebtables |
269 | install -p %{SOURCE11} $RPM_BUILD_ROOT/etc/sysconfig/ebtables-config | |
270 | install -p %{SOURCE12} $RPM_BUILD_ROOT%{systemdunitdir}/ebtables.service | |
271 | ||
0e79507b PS |
272 | %clean |
273 | rm -rf $RPM_BUILD_ROOT | |
274 | ||
a0c2c091 JB |
275 | %post libs -p /sbin/ldconfig |
276 | %postun libs -p /sbin/ldconfig | |
dfc0441a | 277 | |
0e79507b | 278 | %post init |
9ec3dc4d | 279 | /sbin/chkconfig --add ebtables |
511b0491 | 280 | /sbin/chkconfig --add %{orgname} |
740f0f65 | 281 | /sbin/chkconfig --add %{name6} |
511b0491 | 282 | %systemd_post %{orgname}.service %{name6}.service ebtables.service |
0e79507b PS |
283 | |
284 | %preun init | |
285 | if [ "$1" = "0" ]; then | |
9ec3dc4d | 286 | /sbin/chkconfig --del ebtables |
511b0491 | 287 | /sbin/chkconfig --del %{orgname} |
740f0f65 | 288 | /sbin/chkconfig --del %{name6} |
0e79507b | 289 | fi |
511b0491 | 290 | %systemd_preun %{orgname}.service %{name6}.service ebtables.service |
63a6c82f JR |
291 | |
292 | %postun init | |
293 | %systemd_reload | |
294 | ||
511b0491 AM |
295 | %triggerpostun init -- %{orgname}-init < 1.4.13-2 |
296 | %systemd_trigger %{orgname}.service %{name6}.service | |
0e79507b | 297 | |
511b0491 | 298 | %triggerpostun init -- %{orgname}-init < 1.6.0-1 |
9ec3dc4d JR |
299 | %systemd_trigger ebtables.service |
300 | ||
0e79507b PS |
301 | %files |
302 | %defattr(644,root,root,755) | |
0e79507b | 303 | %{?with_doc:%doc iptables-howtos/{NAT,networking-concepts,packet-filtering}-HOWTO*} |
6dc7a739 | 304 | %attr(755,root,root) %{_bindir}/iptables-xml |
037d4c5e JB |
305 | %attr(755,root,root) %{_sbindir}/arptables |
306 | %attr(755,root,root) %{_sbindir}/arptables-compat | |
307 | %attr(755,root,root) %{_sbindir}/ebtables | |
308 | %attr(755,root,root) %{_sbindir}/ebtables-compat | |
c7a0fe01 ER |
309 | %attr(755,root,root) %{_sbindir}/iptables |
310 | %attr(755,root,root) %{_sbindir}/iptables-restore | |
311 | %attr(755,root,root) %{_sbindir}/iptables-save | |
037d4c5e JB |
312 | %attr(755,root,root) %{_sbindir}/iptables-compat |
313 | %attr(755,root,root) %{_sbindir}/iptables-compat-restore | |
314 | %attr(755,root,root) %{_sbindir}/iptables-compat-save | |
c7a0fe01 ER |
315 | %attr(755,root,root) %{_sbindir}/ip6tables |
316 | %attr(755,root,root) %{_sbindir}/ip6tables-restore | |
317 | %attr(755,root,root) %{_sbindir}/ip6tables-save | |
037d4c5e JB |
318 | %attr(755,root,root) %{_sbindir}/ip6tables-compat |
319 | %attr(755,root,root) %{_sbindir}/ip6tables-compat-restore | |
320 | %attr(755,root,root) %{_sbindir}/ip6tables-compat-save | |
dfc0441a AM |
321 | %if %{with batch} |
322 | %attr(755,root,root) %{_sbindir}/iptables-batch | |
323 | %attr(755,root,root) %{_sbindir}/ip6tables-batch | |
324 | %endif | |
d67a1056 | 325 | %attr(755,root,root) %{_sbindir}/nfnl_osf |
61d2127f JB |
326 | %if %{with pcap} |
327 | %attr(755,root,root) %{_sbindir}/nfbpf_compile | |
328 | %attr(755,root,root) %{_sbindir}/nfsynproxy | |
329 | %endif | |
037d4c5e | 330 | %attr(755,root,root) %{_sbindir}/xtables-compat-multi |
9b1e8e39 | 331 | %attr(755,root,root) %{_sbindir}/xtables-multi |
d67a1056 | 332 | %{_datadir}/xtables |
a0c2c091 | 333 | %dir %{_libdir}/xtables |
037d4c5e JB |
334 | %attr(755,root,root) %{_libdir}/xtables/libarpt_mangle.so |
335 | %attr(755,root,root) %{_libdir}/xtables/libebt_802_3.so | |
336 | %attr(755,root,root) %{_libdir}/xtables/libebt_ip.so | |
337 | %attr(755,root,root) %{_libdir}/xtables/libebt_limit.so | |
338 | %attr(755,root,root) %{_libdir}/xtables/libebt_log.so | |
339 | %attr(755,root,root) %{_libdir}/xtables/libebt_mark.so | |
340 | %attr(755,root,root) %{_libdir}/xtables/libebt_mark_m.so | |
341 | %attr(755,root,root) %{_libdir}/xtables/libebt_nflog.so | |
a0c2c091 JB |
342 | %attr(755,root,root) %{_libdir}/xtables/libip6t_HL.so |
343 | %attr(755,root,root) %{_libdir}/xtables/libip6t_LOG.so | |
344 | %attr(755,root,root) %{_libdir}/xtables/libip6t_REJECT.so | |
6dc7a739 | 345 | %attr(755,root,root) %{_libdir}/xtables/libip6t_ah.so |
346 | %attr(755,root,root) %{_libdir}/xtables/libip6t_dst.so | |
347 | %attr(755,root,root) %{_libdir}/xtables/libip6t_eui64.so | |
348 | %attr(755,root,root) %{_libdir}/xtables/libip6t_frag.so | |
349 | %attr(755,root,root) %{_libdir}/xtables/libip6t_hbh.so | |
350 | %attr(755,root,root) %{_libdir}/xtables/libip6t_hl.so | |
6dc7a739 | 351 | %attr(755,root,root) %{_libdir}/xtables/libip6t_icmp6.so |
6dc7a739 | 352 | %attr(755,root,root) %{_libdir}/xtables/libip6t_ipv6header.so |
6dc7a739 | 353 | %attr(755,root,root) %{_libdir}/xtables/libip6t_mh.so |
6dc7a739 | 354 | %attr(755,root,root) %{_libdir}/xtables/libip6t_rt.so |
6dc7a739 | 355 | %attr(755,root,root) %{_libdir}/xtables/libipt_CLUSTERIP.so |
356 | %attr(755,root,root) %{_libdir}/xtables/libipt_DNAT.so | |
6dc7a739 | 357 | %attr(755,root,root) %{_libdir}/xtables/libipt_ECN.so |
6dc7a739 | 358 | %attr(755,root,root) %{_libdir}/xtables/libipt_LOG.so |
359 | %attr(755,root,root) %{_libdir}/xtables/libipt_MASQUERADE.so | |
6dc7a739 | 360 | %attr(755,root,root) %{_libdir}/xtables/libipt_NETMAP.so |
6dc7a739 | 361 | %attr(755,root,root) %{_libdir}/xtables/libipt_REDIRECT.so |
362 | %attr(755,root,root) %{_libdir}/xtables/libipt_REJECT.so | |
6dc7a739 | 363 | %attr(755,root,root) %{_libdir}/xtables/libipt_SNAT.so |
6dc7a739 | 364 | %attr(755,root,root) %{_libdir}/xtables/libipt_TTL.so |
365 | %attr(755,root,root) %{_libdir}/xtables/libipt_ULOG.so | |
a0c2c091 | 366 | %attr(755,root,root) %{_libdir}/xtables/libipt_ah.so |
a0c2c091 | 367 | %attr(755,root,root) %{_libdir}/xtables/libipt_icmp.so |
a0c2c091 | 368 | %attr(755,root,root) %{_libdir}/xtables/libipt_realm.so |
a0c2c091 | 369 | %attr(755,root,root) %{_libdir}/xtables/libipt_ttl.so |
df84948a AM |
370 | %attr(755,root,root) %{_libdir}/xtables/libip6t_DNAT.so |
371 | %attr(755,root,root) %{_libdir}/xtables/libip6t_DNPT.so | |
372 | %attr(755,root,root) %{_libdir}/xtables/libip6t_MASQUERADE.so | |
373 | %attr(755,root,root) %{_libdir}/xtables/libip6t_NETMAP.so | |
374 | %attr(755,root,root) %{_libdir}/xtables/libip6t_REDIRECT.so | |
375 | %attr(755,root,root) %{_libdir}/xtables/libip6t_SNAT.so | |
376 | %attr(755,root,root) %{_libdir}/xtables/libip6t_SNPT.so | |
9b1e8e39 | 377 | %attr(755,root,root) %{_libdir}/xtables/libxt_AUDIT.so |
0a44bfb5 | 378 | %attr(755,root,root) %{_libdir}/xtables/libxt_CHECKSUM.so |
6dc7a739 | 379 | %attr(755,root,root) %{_libdir}/xtables/libxt_CLASSIFY.so |
a0c2c091 JB |
380 | %attr(755,root,root) %{_libdir}/xtables/libxt_CONNMARK.so |
381 | %attr(755,root,root) %{_libdir}/xtables/libxt_CONNSECMARK.so | |
382 | %attr(755,root,root) %{_libdir}/xtables/libxt_CT.so | |
383 | %attr(755,root,root) %{_libdir}/xtables/libxt_DSCP.so | |
2c2ecb60 | 384 | %attr(755,root,root) %{_libdir}/xtables/libxt_HMARK.so |
a0c2c091 JB |
385 | %attr(755,root,root) %{_libdir}/xtables/libxt_IDLETIMER.so |
386 | %attr(755,root,root) %{_libdir}/xtables/libxt_IMQ.so | |
387 | %attr(755,root,root) %{_libdir}/xtables/libxt_LED.so | |
388 | %attr(755,root,root) %{_libdir}/xtables/libxt_MARK.so | |
389 | %attr(755,root,root) %{_libdir}/xtables/libxt_NFLOG.so | |
390 | %attr(755,root,root) %{_libdir}/xtables/libxt_NFQUEUE.so | |
391 | %attr(755,root,root) %{_libdir}/xtables/libxt_NOTRACK.so | |
392 | %attr(755,root,root) %{_libdir}/xtables/libxt_RATEEST.so | |
393 | %attr(755,root,root) %{_libdir}/xtables/libxt_SECMARK.so | |
394 | %attr(755,root,root) %{_libdir}/xtables/libxt_SET.so | |
61d2127f | 395 | %attr(755,root,root) %{_libdir}/xtables/libxt_SYNPROXY.so |
a0c2c091 JB |
396 | %attr(755,root,root) %{_libdir}/xtables/libxt_TCPMSS.so |
397 | %attr(755,root,root) %{_libdir}/xtables/libxt_TCPOPTSTRIP.so | |
398 | %attr(755,root,root) %{_libdir}/xtables/libxt_TEE.so | |
399 | %attr(755,root,root) %{_libdir}/xtables/libxt_TOS.so | |
400 | %attr(755,root,root) %{_libdir}/xtables/libxt_TPROXY.so | |
401 | %attr(755,root,root) %{_libdir}/xtables/libxt_TRACE.so | |
f5742d8d | 402 | %attr(755,root,root) %{_libdir}/xtables/libxt_addrtype.so |
488dc05d | 403 | %attr(755,root,root) %{_libdir}/xtables/libxt_bpf.so |
037d4c5e | 404 | %attr(755,root,root) %{_libdir}/xtables/libxt_cgroup.so |
ab1d9cfc | 405 | %attr(755,root,root) %{_libdir}/xtables/libxt_cluster.so |
6dc7a739 | 406 | %attr(755,root,root) %{_libdir}/xtables/libxt_comment.so |
407 | %attr(755,root,root) %{_libdir}/xtables/libxt_connbytes.so | |
488dc05d | 408 | %attr(755,root,root) %{_libdir}/xtables/libxt_connlabel.so |
6dc7a739 | 409 | %attr(755,root,root) %{_libdir}/xtables/libxt_connlimit.so |
410 | %attr(755,root,root) %{_libdir}/xtables/libxt_connmark.so | |
6dc7a739 | 411 | %attr(755,root,root) %{_libdir}/xtables/libxt_conntrack.so |
0a44bfb5 | 412 | %attr(755,root,root) %{_libdir}/xtables/libxt_cpu.so |
6dc7a739 | 413 | %attr(755,root,root) %{_libdir}/xtables/libxt_dccp.so |
9b1e8e39 | 414 | %attr(755,root,root) %{_libdir}/xtables/libxt_devgroup.so |
6dc7a739 | 415 | %attr(755,root,root) %{_libdir}/xtables/libxt_dscp.so |
f5742d8d | 416 | %attr(755,root,root) %{_libdir}/xtables/libxt_ecn.so |
6dc7a739 | 417 | %attr(755,root,root) %{_libdir}/xtables/libxt_esp.so |
418 | %attr(755,root,root) %{_libdir}/xtables/libxt_hashlimit.so | |
419 | %attr(755,root,root) %{_libdir}/xtables/libxt_helper.so | |
037d4c5e | 420 | %attr(755,root,root) %{_libdir}/xtables/libxt_ipcomp.so |
6dc7a739 | 421 | %attr(755,root,root) %{_libdir}/xtables/libxt_iprange.so |
0a44bfb5 | 422 | %attr(755,root,root) %{_libdir}/xtables/libxt_ipvs.so |
6dc7a739 | 423 | %attr(755,root,root) %{_libdir}/xtables/libxt_length.so |
424 | %attr(755,root,root) %{_libdir}/xtables/libxt_limit.so | |
425 | %attr(755,root,root) %{_libdir}/xtables/libxt_mac.so | |
037d4c5e | 426 | %attr(755,root,root) %{_libdir}/xtables/libxt_mangle.so |
6dc7a739 | 427 | %attr(755,root,root) %{_libdir}/xtables/libxt_mark.so |
6dc7a739 | 428 | %attr(755,root,root) %{_libdir}/xtables/libxt_multiport.so |
f5742d8d | 429 | %attr(755,root,root) %{_libdir}/xtables/libxt_nfacct.so |
d67a1056 | 430 | %attr(755,root,root) %{_libdir}/xtables/libxt_osf.so |
a0c2c091 | 431 | %attr(755,root,root) %{_libdir}/xtables/libxt_owner.so |
6dc7a739 | 432 | %attr(755,root,root) %{_libdir}/xtables/libxt_physdev.so |
433 | %attr(755,root,root) %{_libdir}/xtables/libxt_pkttype.so | |
ab1d9cfc | 434 | %attr(755,root,root) %{_libdir}/xtables/libxt_policy.so |
6dc7a739 | 435 | %attr(755,root,root) %{_libdir}/xtables/libxt_quota.so |
75dcc0ed | 436 | %attr(755,root,root) %{_libdir}/xtables/libxt_rateest.so |
a0c2c091 | 437 | %attr(755,root,root) %{_libdir}/xtables/libxt_recent.so |
f5742d8d | 438 | %attr(755,root,root) %{_libdir}/xtables/libxt_rpfilter.so |
6dc7a739 | 439 | %attr(755,root,root) %{_libdir}/xtables/libxt_sctp.so |
ec60ce35 | 440 | %attr(755,root,root) %{_libdir}/xtables/libxt_set.so |
6dc7a739 | 441 | %attr(755,root,root) %{_libdir}/xtables/libxt_socket.so |
442 | %attr(755,root,root) %{_libdir}/xtables/libxt_standard.so | |
443 | %attr(755,root,root) %{_libdir}/xtables/libxt_state.so | |
444 | %attr(755,root,root) %{_libdir}/xtables/libxt_statistic.so | |
445 | %attr(755,root,root) %{_libdir}/xtables/libxt_string.so | |
6dc7a739 | 446 | %attr(755,root,root) %{_libdir}/xtables/libxt_tcp.so |
a0c2c091 | 447 | %attr(755,root,root) %{_libdir}/xtables/libxt_tcpmss.so |
6dc7a739 | 448 | %attr(755,root,root) %{_libdir}/xtables/libxt_time.so |
449 | %attr(755,root,root) %{_libdir}/xtables/libxt_tos.so | |
6dc7a739 | 450 | %attr(755,root,root) %{_libdir}/xtables/libxt_u32.so |
451 | %attr(755,root,root) %{_libdir}/xtables/libxt_udp.so | |
c0ae8513 JB |
452 | %{?with_ipt_IPV4OPTSSTRIP:%attr(755,root,root) %{_libdir}/xtables/libipt_IPV4OPTSSTRIP.so} |
453 | %{?with_ipt_rpc:%attr(755,root,root) %{_libdir}/xtables/libipt_rpc.so} | |
454 | %{?with_xt_layer7:%attr(755,root,root) %{_libdir}/xtables/libxt_layer7.so} | |
037d4c5e | 455 | %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/ethertypes |
b4dea9ed | 456 | %{_mandir}/man1/iptables-xml.1* |
a0c2c091 JB |
457 | %{_mandir}/man8/ip6tables.8* |
458 | %{_mandir}/man8/ip6tables-restore.8* | |
459 | %{_mandir}/man8/ip6tables-save.8* | |
460 | %{_mandir}/man8/iptables.8* | |
f59ad890 | 461 | %{_mandir}/man8/iptables-extensions.8* |
a0c2c091 JB |
462 | %{_mandir}/man8/iptables-restore.8* |
463 | %{_mandir}/man8/iptables-save.8* | |
0e79507b | 464 | |
dfc0441a AM |
465 | %files libs |
466 | %defattr(644,root,root,755) | |
a0c2c091 | 467 | %attr(755,root,root) %{_libdir}/libip4tc.so.*.*.* |
d67a1056 | 468 | %attr(755,root,root) %ghost %{_libdir}/libip4tc.so.0 |
a0c2c091 | 469 | %attr(755,root,root) %{_libdir}/libip6tc.so.*.*.* |
d67a1056 | 470 | %attr(755,root,root) %ghost %{_libdir}/libip6tc.so.0 |
a0c2c091 JB |
471 | %attr(755,root,root) %{_libdir}/libipq.so.*.*.* |
472 | %attr(755,root,root) %ghost %{_libdir}/libipq.so.0 | |
a0c2c091 | 473 | %attr(755,root,root) %{_libdir}/libxtables.so.*.*.* |
037d4c5e | 474 | %attr(755,root,root) %ghost %{_libdir}/libxtables.so.11 |
dfc0441a | 475 | |
0e79507b PS |
476 | %files devel |
477 | %defattr(644,root,root,755) | |
478 | %{?with_doc:%doc iptables-howtos/netfilter-hacking-HOWTO*} | |
a0c2c091 JB |
479 | %attr(755,root,root) %{_libdir}/libip4tc.so |
480 | %attr(755,root,root) %{_libdir}/libip6tc.so | |
481 | %attr(755,root,root) %{_libdir}/libipq.so | |
f9caff1e | 482 | %attr(755,root,root) %{_libdir}/libiptc.so |
a0c2c091 JB |
483 | %attr(755,root,root) %{_libdir}/libxtables.so |
484 | %{_libdir}/libip4tc.la | |
485 | %{_libdir}/libip6tc.la | |
486 | %{_libdir}/libipq.la | |
a0c2c091 JB |
487 | %{_libdir}/libxtables.la |
488 | %{_includedir}/libipq.h | |
489 | %{_includedir}/xtables.h | |
f59ad890 | 490 | %{_includedir}/xtables-version.h |
dfc0441a | 491 | %{_includedir}/libiptc |
e803115b AM |
492 | %{_pkgconfigdir}/libip4tc.pc |
493 | %{_pkgconfigdir}/libip6tc.pc | |
9a5acd07 | 494 | %{_pkgconfigdir}/libipq.pc |
a0c2c091 JB |
495 | %{_pkgconfigdir}/libiptc.pc |
496 | %{_pkgconfigdir}/xtables.pc | |
497 | %{_mandir}/man3/ipq_*.3* | |
498 | %{_mandir}/man3/libipq.3* | |
0e79507b | 499 | |
d67a1056 | 500 | %if %{with static} |
dfc0441a AM |
501 | %files static |
502 | %defattr(644,root,root,755) | |
a0c2c091 JB |
503 | %{_libdir}/libip4tc.a |
504 | %{_libdir}/libip6tc.a | |
505 | %{_libdir}/libipq.a | |
a0c2c091 | 506 | %{_libdir}/libxtables.a |
d67a1056 | 507 | %endif |
dfc0441a | 508 | |
0e79507b PS |
509 | %files init |
510 | %defattr(644,root,root,755) | |
9ec3dc4d | 511 | %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/ebtables-config |
511b0491 | 512 | %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/%{orgname}-config |
a94df067 | 513 | %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/%{name6}-config |
9ec3dc4d | 514 | %attr(754,root,root) /etc/rc.d/init.d/ebtables |
c7a0fe01 ER |
515 | %attr(754,root,root) /etc/rc.d/init.d/iptables |
516 | %attr(754,root,root) /etc/rc.d/init.d/ip6tables | |
9ec3dc4d | 517 | %{systemdunitdir}/ebtables.service |
511b0491 | 518 | %{systemdunitdir}/%{orgname}.service |
63a6c82f | 519 | %{systemdunitdir}/%{name6}.service |