3 # - update BR to real required llh version
4 # - check if kernel-headers are still required to properly build iptabels for dist kernel
5 # - fix makefile (-D_UNKNOWN_KERNEL_POINTER_SIZE issue)
8 %bcond_without doc # without documentation (HOWTOS) which needed TeX
9 %bcond_without dist_kernel # without distribution kernel
10 %bcond_without nftables # nftables compatibility
11 %bcond_without pcap # pcap-dependend utils (nfbpf_compile, nfsynproxy)
12 %bcond_with vserver # build xt_owner module for non-dist kernel with vserver support
13 %bcond_with batch # build iptables-batch
14 %bcond_with static # build static libraries, no dynamic modules (all linked into binaries)
15 %bcond_with ipt_IPV4OPTSSTRIP # enable ipt_IPV4OPTSSTRIP for non-dist kernel
16 %bcond_with ipt_rpc # enable ipt_rpc for non-dist kernel
17 %bcond_with xt_layer7 # enable xt_layer7 for non-dist kernel
18 %bcond_with usekernelsrc # include kernel headers from %{_kernelsrcdir}
20 %if %{with dist_kernel}
21 %define with_ipt_IPV4OPTSSTRIP 1
22 %define with_ipt_rpc 1
23 %define with_xt_layer7 1
26 %define orgname iptables
27 %define name6 ip6tables
29 Summary: Extensible packet filtering system && extensible NAT system
30 Summary(pl.UTF-8): System filtrowania pakietów oraz system translacji adresów (NAT)
31 Summary(pt_BR.UTF-8): Ferramenta para controlar a filtragem de pacotes no kernel-2.6.x
32 Summary(ru.UTF-8): Утилиты для управления пакетными фильтрами ядра Linux
33 Summary(uk.UTF-8): Утиліти для керування пакетними фільтрами ядра Linux
34 Summary(zh_CN.UTF-8): Linux内核包过滤管理工具
35 Name: iptables%{?with_vserver:-vserver}
39 Group: Networking/Admin
40 Source0: ftp://ftp.netfilter.org/pub/iptables/%{orgname}-%{version}.tar.bz2
41 # Source0-md5: ab38a33806b6182c6f53d6afb4619add
42 Source1: cvs://cvs.samba.org/netfilter/%{orgname}-howtos.tar.bz2
43 # Source1-md5: 2ed2b452daefe70ededd75dc0061fd07
44 Source2: %{orgname}.init
45 Source3: %{name6}.init
46 Source6: %{orgname}-config
47 Source7: %{name6}-config
48 Source8: %{orgname}.service
49 Source9: %{name6}.service
50 Source10: ebtables.init
51 Source11: ebtables-config
52 Source12: ebtables.service
53 # --- GENERAL CHANGES (patches<10):
54 Patch0: %{orgname}-man.patch
55 # additional utils; off by default
56 Patch1: %{orgname}-batch.patch
57 Patch2: no-libiptc.patch
58 Patch3: %{orgname}-aligned_u64.patch
59 Patch4: %{orgname}-ebtables.patch
60 # --- ADDITIONAL/CHANGED EXTENSIONS:
61 # just ipt_IPV4OPTSSTRIP now
62 Patch10: %{orgname}-20070806.patch
63 # xt_layer7; almost based on iptables-1.4-for-kernel-2.6.20forward-layer7-2.18.patch
64 # http://downloads.sourceforge.net/l7-filter/netfilter-layer7-v2.18.tar.gz
65 Patch11: %{orgname}-layer7.patch
67 Patch12: %{orgname}-old-1.3.7.patch
68 # xt_IMQ; http://linuximq.net/patchs/iptables-1.4.12-IMQ-test4.diff
69 Patch13: %{orgname}-imq.patch
70 # enhances ipt_owner/ip6t_owner; http://people.linux-vserver.org/~dhozac/p/m/iptables-1.3.5-owner-xid.patch (currently disabled, needs update for xt_owner)
71 Patch14: %{orgname}-owner-xid.patch
72 # adjusts xt_owner for vserver-enabled kernel
73 Patch15: %{orgname}-owner-struct-size-vs.patch
74 URL: http://www.netfilter.org/
75 BuildRequires: autoconf >= 2.50
76 BuildRequires: automake
77 %{?with_nftables:BuildRequires: bison}
78 %{?with_nftables:BuildRequires: flex}
80 %{?with_nftables:BuildRequires: libmnl-devel >= 1.0}
81 BuildRequires: libnetfilter_conntrack-devel >= 1.0.6
82 BuildRequires: libnfnetlink-devel >= 1.0
83 %{?with_nftables:BuildRequires: libnftnl-devel >= 1.0.5}
84 %{?with_pcap:BuildRequires: libpcap-devel}
85 BuildRequires: libtool
86 BuildRequires: pkgconfig >= 1:0.9.0
87 BuildRequires: rpmbuild(macros) >= 1.647
89 BuildRequires: sed >= 4.0
90 BuildRequires: sgml-tools
92 BuildRequires: tetex-dvips
93 BuildRequires: tetex-format-latex
94 BuildRequires: tetex-latex
95 BuildRequires: tetex-tex-babel
96 BuildRequires: texlive-fonts-cmsuper
97 BuildRequires: texlive-fonts-jknappen
99 %if %{with dist_kernel}
100 BuildRequires: kernel%{_alt_kernel}-headers(netfilter)
102 BuildRequires: linux-libc-headers >= 7:2.6.22.1
103 Requires: %{orgname}-libs = %{version}-%{release}
104 %{?with_nftables:Requires: libmnl >= 1.0}
105 Requires: libnetfilter_conntrack >= 1.0.6
106 Requires: libnfnetlink >= 1.0
107 %{?with_nftables:Requires: libnftnl >= 1.0.5}
110 Provides: firewall-userspace-tool
114 Obsoletes: iptables24-compat
116 Conflicts: xtables-addons < 1.25
117 BuildRoot: %{tmpdir}/%{orgname}-%{version}-root-%(id -u -n)
120 An extensible NAT system, and an extensible packet filtering system.
121 Replacement of ipchains in 2.4 and higher kernels.
123 %description -l pl.UTF-8
124 Wydajny system translacji adresów (NAT) oraz system filtrowania
125 pakietów. Zamiennik ipchains w jądrach 2.4 i nowszych.
127 %description -l pt_BR.UTF-8
128 Esta é a ferramenta que controla o código de filtragem de pacotes do
129 kernel 2.4, obsoletando ipchains. Com esta ferramenta você pode
130 configurar filtros de pacotes, NAT, mascaramento (masquerading),
131 regras dinâmicas (stateful inspection), etc.
133 %description -l ru.UTF-8
134 iptables управляют кодом фильтрации сетевых пакетов в ядре Linux. Они
135 позволяют вам устанавливать межсетевые экраны (firewalls) и IP
138 %description -l uk.UTF-8
139 iptables управляють кодом фільтрації пакетів мережі в ядрі Linux. Вони
140 дозволяють вам встановлювати міжмережеві екрани (firewalls) та IP
144 Summary: iptables libraries
145 Summary(pl.UTF-8): Biblioteki iptables
147 Conflicts: iptables < 1.4.3-1
152 %description libs -l pl.UTF-8
156 Summary: Libraries and headers for developing iptables extensions
157 Summary(pl.UTF-8): Biblioteki i nagłówki do tworzenia rozszerzeń iptables
158 Group: Development/Libraries
159 Requires: %{orgname}-libs = %{epoch}:%{version}-%{release}
160 Obsoletes: iptables24-devel
163 Libraries and headers for developing iptables extensions.
165 %description devel -l pl.UTF-8
166 Biblioteki i pliki nagłówkowe niezbędne do tworzenia rozszerzeń dla
170 Summary: Static iptables libraries
171 Summary(pl.UTF-8): Biblioteki statyczne iptables
172 Group: Development/Libraries
173 Requires: %{name}-devel = %{epoch}:%{version}-%{release}
176 Static iptables libraries.
178 %description static -l pl.UTF-8
179 Biblioteki statyczne iptables.
182 Summary: Iptables init (RedHat style)
183 Summary(pl.UTF-8): Iptables init (w stylu RedHata)
184 Group: Networking/Admin
185 Requires(post,preun): /sbin/chkconfig
186 Requires(post,preun,postun): systemd-units >= 38
188 Requires: rc-scripts >= 0.4.3.0
189 Requires: systemd-units >= 38
190 Obsoletes: firewall-init
191 Obsoletes: firewall-init-ipchains
192 Obsoletes: iptables24-init
195 Iptables-init is meant to provide an alternate way than firewall-init
196 to start and stop packet filtering through iptables(8).
198 %description init -l pl.UTF-8
199 Iptables-init ma na celu udostępnienie alternatywnego w stosunku do
200 firewall-init sposobu włączania i wyłączania filtrów IP jądra poprzez
204 %setup -q -n iptables-%{version} -a1
213 %{?with_ipt_IPV4OPTSSTRIP:%patch10 -p1}
214 %{?with_xt_layer7:%patch11 -p1}
215 %{?with_ipt_rpc:%patch12 -p1}
229 CFLAGS="%{rpmcflags} %{rpmcppflags} -D%{!?debug:N}DEBUG" \
230 %{?with_usekernelsrc:--with-kernel=%{_kernelsrcdir}} \
231 %{?with_pcap:--enable-bpf-compiler} \
233 %{?with_pcap:--enable-nfsynproxy} \
234 %{!?with_nftables:--disable-nftables} \
235 %{?with_static:--enable-static}
241 %{__make} -j1 -C iptables-howtos
242 sed -i 's:$(HTML_HOWTOS)::g; s:$(PSUS_HOWTOS)::g' iptables-howtos/Makefile
246 rm -rf $RPM_BUILD_ROOT
247 install -d $RPM_BUILD_ROOT/etc/{rc.d/init.d,sysconfig} \
248 $RPM_BUILD_ROOT{%{_includedir},%{_libdir},%{_mandir}/man3} \
249 $RPM_BUILD_ROOT%{systemdunitdir}
252 DESTDIR=$RPM_BUILD_ROOT \
257 # not installed; provide so we can obsolete arptables and ebtables packages
258 ln -sf xtables-compat-multi $RPM_BUILD_ROOT%{_sbindir}/arptables
259 ln -sf xtables-compat-multi $RPM_BUILD_ROOT%{_sbindir}/ebtables
261 # upstream solution with empty library with two DT_NEEDED entries doesn't work
262 # with PLD's default LDFLAGS (--as-needed --no-copy-dt-needed-entries);
263 # use ld script instead (see no-libiptc.patch for source)
264 cp -p libiptc/libiptc.ld $RPM_BUILD_ROOT%{_libdir}/libiptc.so
266 install -p %{SOURCE2} $RPM_BUILD_ROOT/etc/rc.d/init.d/%{orgname}
267 install -p %{SOURCE3} $RPM_BUILD_ROOT/etc/rc.d/init.d/%{name6}
269 install -p %{SOURCE6} $RPM_BUILD_ROOT/etc/sysconfig/%{orgname}-config
270 install -p %{SOURCE7} $RPM_BUILD_ROOT/etc/sysconfig/%{name6}-config
272 install -p %{SOURCE8} $RPM_BUILD_ROOT%{systemdunitdir}/%{orgname}.service
273 install -p %{SOURCE9} $RPM_BUILD_ROOT%{systemdunitdir}/%{name6}.service
275 install -p %{SOURCE10} $RPM_BUILD_ROOT/etc/rc.d/init.d/ebtables
276 install -p %{SOURCE11} $RPM_BUILD_ROOT/etc/sysconfig/ebtables-config
277 install -p %{SOURCE12} $RPM_BUILD_ROOT%{systemdunitdir}/ebtables.service
280 rm -rf $RPM_BUILD_ROOT
282 %post libs -p /sbin/ldconfig
283 %postun libs -p /sbin/ldconfig
286 /sbin/chkconfig --add ebtables
287 /sbin/chkconfig --add %{orgname}
288 /sbin/chkconfig --add %{name6}
289 %systemd_post %{orgname}.service %{name6}.service ebtables.service
292 if [ "$1" = "0" ]; then
293 /sbin/chkconfig --del ebtables
294 /sbin/chkconfig --del %{orgname}
295 /sbin/chkconfig --del %{name6}
297 %systemd_preun %{orgname}.service %{name6}.service ebtables.service
302 %triggerpostun init -- %{orgname}-init < 1.4.13-2
303 %systemd_trigger %{orgname}.service %{name6}.service
305 %triggerpostun init -- %{orgname}-init < 1.6.0-1
306 %systemd_trigger ebtables.service
309 %defattr(644,root,root,755)
310 %{?with_doc:%doc iptables-howtos/{NAT,networking-concepts,packet-filtering}-HOWTO*}
311 %attr(755,root,root) %{_bindir}/iptables-xml
312 %attr(755,root,root) %{_sbindir}/arptables
313 %attr(755,root,root) %{_sbindir}/ebtables
314 %attr(755,root,root) %{_sbindir}/iptables
315 %attr(755,root,root) %{_sbindir}/iptables-restore
316 %attr(755,root,root) %{_sbindir}/iptables-save
317 %attr(755,root,root) %{_sbindir}/ip6tables
318 %attr(755,root,root) %{_sbindir}/ip6tables-restore
319 %attr(755,root,root) %{_sbindir}/ip6tables-save
321 %attr(755,root,root) %{_sbindir}/iptables-batch
322 %attr(755,root,root) %{_sbindir}/ip6tables-batch
324 %attr(755,root,root) %{_sbindir}/nfnl_osf
326 %attr(755,root,root) %{_sbindir}/nfbpf_compile
327 %attr(755,root,root) %{_sbindir}/nfsynproxy
329 %attr(755,root,root) %{_sbindir}/xtables-multi
331 %attr(755,root,root) %{_sbindir}/arptables-compat
332 %attr(755,root,root) %{_sbindir}/ebtables-compat
333 %attr(755,root,root) %{_sbindir}/iptables-compat
334 %attr(755,root,root) %{_sbindir}/iptables-compat-restore
335 %attr(755,root,root) %{_sbindir}/iptables-compat-save
336 %attr(755,root,root) %{_sbindir}/iptables-restore-translate
337 %attr(755,root,root) %{_sbindir}/iptables-translate
338 %attr(755,root,root) %{_sbindir}/ip6tables-compat
339 %attr(755,root,root) %{_sbindir}/ip6tables-compat-restore
340 %attr(755,root,root) %{_sbindir}/ip6tables-compat-save
341 %attr(755,root,root) %{_sbindir}/ip6tables-restore-translate
342 %attr(755,root,root) %{_sbindir}/ip6tables-translate
343 %attr(755,root,root) %{_sbindir}/xtables-compat-multi
346 %dir %{_libdir}/xtables
347 %attr(755,root,root) %{_libdir}/xtables/libarpt_mangle.so
348 %attr(755,root,root) %{_libdir}/xtables/libebt_802_3.so
349 %attr(755,root,root) %{_libdir}/xtables/libebt_ip.so
350 %attr(755,root,root) %{_libdir}/xtables/libebt_limit.so
351 %attr(755,root,root) %{_libdir}/xtables/libebt_log.so
352 %attr(755,root,root) %{_libdir}/xtables/libebt_mark.so
353 %attr(755,root,root) %{_libdir}/xtables/libebt_mark_m.so
354 %attr(755,root,root) %{_libdir}/xtables/libebt_nflog.so
355 %attr(755,root,root) %{_libdir}/xtables/libip6t_HL.so
356 %attr(755,root,root) %{_libdir}/xtables/libip6t_LOG.so
357 %attr(755,root,root) %{_libdir}/xtables/libip6t_REJECT.so
358 %attr(755,root,root) %{_libdir}/xtables/libip6t_ah.so
359 %attr(755,root,root) %{_libdir}/xtables/libip6t_dst.so
360 %attr(755,root,root) %{_libdir}/xtables/libip6t_eui64.so
361 %attr(755,root,root) %{_libdir}/xtables/libip6t_frag.so
362 %attr(755,root,root) %{_libdir}/xtables/libip6t_hbh.so
363 %attr(755,root,root) %{_libdir}/xtables/libip6t_hl.so
364 %attr(755,root,root) %{_libdir}/xtables/libip6t_icmp6.so
365 %attr(755,root,root) %{_libdir}/xtables/libip6t_ipv6header.so
366 %attr(755,root,root) %{_libdir}/xtables/libip6t_mh.so
367 %attr(755,root,root) %{_libdir}/xtables/libip6t_rt.so
368 %attr(755,root,root) %{_libdir}/xtables/libipt_CLUSTERIP.so
369 %attr(755,root,root) %{_libdir}/xtables/libipt_DNAT.so
370 %attr(755,root,root) %{_libdir}/xtables/libipt_ECN.so
371 %attr(755,root,root) %{_libdir}/xtables/libipt_LOG.so
372 %attr(755,root,root) %{_libdir}/xtables/libipt_MASQUERADE.so
373 %attr(755,root,root) %{_libdir}/xtables/libipt_NETMAP.so
374 %attr(755,root,root) %{_libdir}/xtables/libipt_REDIRECT.so
375 %attr(755,root,root) %{_libdir}/xtables/libipt_REJECT.so
376 %attr(755,root,root) %{_libdir}/xtables/libipt_SNAT.so
377 %attr(755,root,root) %{_libdir}/xtables/libipt_TTL.so
378 %attr(755,root,root) %{_libdir}/xtables/libipt_ULOG.so
379 %attr(755,root,root) %{_libdir}/xtables/libipt_ah.so
380 %attr(755,root,root) %{_libdir}/xtables/libipt_icmp.so
381 %attr(755,root,root) %{_libdir}/xtables/libipt_realm.so
382 %attr(755,root,root) %{_libdir}/xtables/libipt_ttl.so
383 %attr(755,root,root) %{_libdir}/xtables/libip6t_DNAT.so
384 %attr(755,root,root) %{_libdir}/xtables/libip6t_DNPT.so
385 %attr(755,root,root) %{_libdir}/xtables/libip6t_MASQUERADE.so
386 %attr(755,root,root) %{_libdir}/xtables/libip6t_NETMAP.so
387 %attr(755,root,root) %{_libdir}/xtables/libip6t_REDIRECT.so
388 %attr(755,root,root) %{_libdir}/xtables/libip6t_SNAT.so
389 %attr(755,root,root) %{_libdir}/xtables/libip6t_SNPT.so
390 %attr(755,root,root) %{_libdir}/xtables/libxt_AUDIT.so
391 %attr(755,root,root) %{_libdir}/xtables/libxt_CHECKSUM.so
392 %attr(755,root,root) %{_libdir}/xtables/libxt_CLASSIFY.so
393 %attr(755,root,root) %{_libdir}/xtables/libxt_CONNMARK.so
394 %attr(755,root,root) %{_libdir}/xtables/libxt_CONNSECMARK.so
395 %attr(755,root,root) %{_libdir}/xtables/libxt_CT.so
396 %attr(755,root,root) %{_libdir}/xtables/libxt_DSCP.so
397 %attr(755,root,root) %{_libdir}/xtables/libxt_HMARK.so
398 %attr(755,root,root) %{_libdir}/xtables/libxt_IDLETIMER.so
399 %attr(755,root,root) %{_libdir}/xtables/libxt_IMQ.so
400 %attr(755,root,root) %{_libdir}/xtables/libxt_LED.so
401 %attr(755,root,root) %{_libdir}/xtables/libxt_MARK.so
402 %attr(755,root,root) %{_libdir}/xtables/libxt_NFLOG.so
403 %attr(755,root,root) %{_libdir}/xtables/libxt_NFQUEUE.so
404 %attr(755,root,root) %{_libdir}/xtables/libxt_NOTRACK.so
405 %attr(755,root,root) %{_libdir}/xtables/libxt_RATEEST.so
406 %attr(755,root,root) %{_libdir}/xtables/libxt_SECMARK.so
407 %attr(755,root,root) %{_libdir}/xtables/libxt_SET.so
408 %attr(755,root,root) %{_libdir}/xtables/libxt_SYNPROXY.so
409 %attr(755,root,root) %{_libdir}/xtables/libxt_TCPMSS.so
410 %attr(755,root,root) %{_libdir}/xtables/libxt_TCPOPTSTRIP.so
411 %attr(755,root,root) %{_libdir}/xtables/libxt_TEE.so
412 %attr(755,root,root) %{_libdir}/xtables/libxt_TOS.so
413 %attr(755,root,root) %{_libdir}/xtables/libxt_TPROXY.so
414 %attr(755,root,root) %{_libdir}/xtables/libxt_TRACE.so
415 %attr(755,root,root) %{_libdir}/xtables/libxt_addrtype.so
416 %attr(755,root,root) %{_libdir}/xtables/libxt_bpf.so
417 %attr(755,root,root) %{_libdir}/xtables/libxt_cgroup.so
418 %attr(755,root,root) %{_libdir}/xtables/libxt_cluster.so
419 %attr(755,root,root) %{_libdir}/xtables/libxt_comment.so
420 %attr(755,root,root) %{_libdir}/xtables/libxt_connbytes.so
421 %attr(755,root,root) %{_libdir}/xtables/libxt_connlabel.so
422 %attr(755,root,root) %{_libdir}/xtables/libxt_connlimit.so
423 %attr(755,root,root) %{_libdir}/xtables/libxt_connmark.so
424 %attr(755,root,root) %{_libdir}/xtables/libxt_conntrack.so
425 %attr(755,root,root) %{_libdir}/xtables/libxt_cpu.so
426 %attr(755,root,root) %{_libdir}/xtables/libxt_dccp.so
427 %attr(755,root,root) %{_libdir}/xtables/libxt_devgroup.so
428 %attr(755,root,root) %{_libdir}/xtables/libxt_dscp.so
429 %attr(755,root,root) %{_libdir}/xtables/libxt_ecn.so
430 %attr(755,root,root) %{_libdir}/xtables/libxt_esp.so
431 %attr(755,root,root) %{_libdir}/xtables/libxt_hashlimit.so
432 %attr(755,root,root) %{_libdir}/xtables/libxt_helper.so
433 %attr(755,root,root) %{_libdir}/xtables/libxt_ipcomp.so
434 %attr(755,root,root) %{_libdir}/xtables/libxt_iprange.so
435 %attr(755,root,root) %{_libdir}/xtables/libxt_ipvs.so
436 %attr(755,root,root) %{_libdir}/xtables/libxt_length.so
437 %attr(755,root,root) %{_libdir}/xtables/libxt_limit.so
438 %attr(755,root,root) %{_libdir}/xtables/libxt_mac.so
439 %attr(755,root,root) %{_libdir}/xtables/libxt_mangle.so
440 %attr(755,root,root) %{_libdir}/xtables/libxt_mark.so
441 %attr(755,root,root) %{_libdir}/xtables/libxt_multiport.so
442 %attr(755,root,root) %{_libdir}/xtables/libxt_nfacct.so
443 %attr(755,root,root) %{_libdir}/xtables/libxt_osf.so
444 %attr(755,root,root) %{_libdir}/xtables/libxt_owner.so
445 %attr(755,root,root) %{_libdir}/xtables/libxt_physdev.so
446 %attr(755,root,root) %{_libdir}/xtables/libxt_pkttype.so
447 %attr(755,root,root) %{_libdir}/xtables/libxt_policy.so
448 %attr(755,root,root) %{_libdir}/xtables/libxt_quota.so
449 %attr(755,root,root) %{_libdir}/xtables/libxt_rateest.so
450 %attr(755,root,root) %{_libdir}/xtables/libxt_recent.so
451 %attr(755,root,root) %{_libdir}/xtables/libxt_rpfilter.so
452 %attr(755,root,root) %{_libdir}/xtables/libxt_sctp.so
453 %attr(755,root,root) %{_libdir}/xtables/libxt_set.so
454 %attr(755,root,root) %{_libdir}/xtables/libxt_socket.so
455 %attr(755,root,root) %{_libdir}/xtables/libxt_standard.so
456 %attr(755,root,root) %{_libdir}/xtables/libxt_state.so
457 %attr(755,root,root) %{_libdir}/xtables/libxt_statistic.so
458 %attr(755,root,root) %{_libdir}/xtables/libxt_string.so
459 %attr(755,root,root) %{_libdir}/xtables/libxt_tcp.so
460 %attr(755,root,root) %{_libdir}/xtables/libxt_tcpmss.so
461 %attr(755,root,root) %{_libdir}/xtables/libxt_time.so
462 %attr(755,root,root) %{_libdir}/xtables/libxt_tos.so
463 %attr(755,root,root) %{_libdir}/xtables/libxt_u32.so
464 %attr(755,root,root) %{_libdir}/xtables/libxt_udp.so
465 %{?with_ipt_IPV4OPTSSTRIP:%attr(755,root,root) %{_libdir}/xtables/libipt_IPV4OPTSSTRIP.so}
466 %{?with_ipt_rpc:%attr(755,root,root) %{_libdir}/xtables/libipt_rpc.so}
467 %{?with_xt_layer7:%attr(755,root,root) %{_libdir}/xtables/libxt_layer7.so}
468 %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/ethertypes
469 %{_mandir}/man1/iptables-xml.1*
470 %{_mandir}/man8/ip6tables.8*
471 %{_mandir}/man8/ip6tables-restore.8*
472 %{_mandir}/man8/ip6tables-save.8*
473 %{_mandir}/man8/iptables.8*
474 %{_mandir}/man8/iptables-extensions.8*
475 %{_mandir}/man8/iptables-restore.8*
476 %{_mandir}/man8/iptables-save.8*
479 %defattr(644,root,root,755)
480 %attr(755,root,root) %{_libdir}/libip4tc.so.*.*.*
481 %attr(755,root,root) %ghost %{_libdir}/libip4tc.so.0
482 %attr(755,root,root) %{_libdir}/libip6tc.so.*.*.*
483 %attr(755,root,root) %ghost %{_libdir}/libip6tc.so.0
484 %attr(755,root,root) %{_libdir}/libipq.so.*.*.*
485 %attr(755,root,root) %ghost %{_libdir}/libipq.so.0
486 %attr(755,root,root) %{_libdir}/libxtables.so.*.*.*
487 %attr(755,root,root) %ghost %{_libdir}/libxtables.so.12
490 %defattr(644,root,root,755)
491 %{?with_doc:%doc iptables-howtos/netfilter-hacking-HOWTO*}
492 %attr(755,root,root) %{_libdir}/libip4tc.so
493 %attr(755,root,root) %{_libdir}/libip6tc.so
494 %attr(755,root,root) %{_libdir}/libipq.so
495 %attr(755,root,root) %{_libdir}/libiptc.so
496 %attr(755,root,root) %{_libdir}/libxtables.so
497 %{_libdir}/libip4tc.la
498 %{_libdir}/libip6tc.la
500 %{_libdir}/libxtables.la
501 %{_includedir}/libipq.h
502 %{_includedir}/xtables.h
503 %{_includedir}/xtables-version.h
504 %{_includedir}/libiptc
505 %{_pkgconfigdir}/libip4tc.pc
506 %{_pkgconfigdir}/libip6tc.pc
507 %{_pkgconfigdir}/libipq.pc
508 %{_pkgconfigdir}/libiptc.pc
509 %{_pkgconfigdir}/xtables.pc
510 %{_mandir}/man3/ipq_*.3*
511 %{_mandir}/man3/libipq.3*
515 %defattr(644,root,root,755)
516 %{_libdir}/libip4tc.a
517 %{_libdir}/libip6tc.a
519 %{_libdir}/libxtables.a
523 %defattr(644,root,root,755)
524 %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/ebtables-config
525 %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/%{orgname}-config
526 %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/%{name6}-config
527 %attr(754,root,root) /etc/rc.d/init.d/ebtables
528 %attr(754,root,root) /etc/rc.d/init.d/iptables
529 %attr(754,root,root) /etc/rc.d/init.d/ip6tables
530 %{systemdunitdir}/ebtables.service
531 %{systemdunitdir}/%{orgname}.service
532 %{systemdunitdir}/%{name6}.service