3 # - include init.d+sysconfig files from ebtables.spec in -init?
4 # - update BR to real required llh version
5 # - check if kernel-headers are still required to properly build iptabels for dist kernel
6 # - fix makefile (-D_UNKNOWN_KERNEL_POINTER_SIZE issue)
7 # - owner needs rewrite to xt
10 %bcond_without doc # without documentation (HOWTOS) which needed TeX
11 %bcond_without dist_kernel # without distribution kernel
12 %bcond_without pcap # pcap-dependend utils (nfbpf_compile, nfsynproxy)
13 %bcond_with vserver # build xt_owner module for non-dist kernel with vserver support
14 %bcond_with batch # build iptables-batch
15 %bcond_with static # build static libraries, no dynamic modules (all linked into binaries)
16 %bcond_with ipt_IPV4OPTSSTRIP # enable ipt_IPV4OPTSSTRIP for non-dist kernel
17 %bcond_with ipt_rpc # enable ipt_rpc for non-dist kernel
18 %bcond_with xt_layer7 # enable xt_layer7 for non-dist kernel
19 %bcond_with usekernelsrc # include kernel headers from %{_kernelsrcdir}
21 %if %{with dist_kernel}
22 %define with_ipt_IPV4OPTSSTRIP 1
23 %define with_ipt_rpc 1
24 %define with_xt_layer7 1
25 %define with_vserver 1
28 %define name6 ip6tables
29 Summary: Extensible packet filtering system && extensible NAT system
30 Summary(pl.UTF-8): System filtrowania pakietów oraz system translacji adresów (NAT)
31 Summary(pt_BR.UTF-8): Ferramenta para controlar a filtragem de pacotes no kernel-2.6.x
32 Summary(ru.UTF-8): Утилиты для управления пакетными фильтрами ядра Linux
33 Summary(uk.UTF-8): Утиліти для керування пакетними фільтрами ядра Linux
34 Summary(zh_CN.UTF-8): Linux内核包过滤管理工具
37 Release: 0.1%{?with_vserver:.vserver}
39 Group: Networking/Admin
40 Source0: ftp://ftp.netfilter.org/pub/iptables/%{name}-%{version}.tar.bz2
41 # Source0-md5: 27ba3451cb622467fc9267a176f19a31
42 Source1: cvs://cvs.samba.org/netfilter/%{name}-howtos.tar.bz2
43 # Source1-md5: 2ed2b452daefe70ededd75dc0061fd07
45 Source3: %{name6}.init
46 Source6: %{name}-config
47 Source7: %{name6}-config
48 Source8: %{name}.service
49 Source9: %{name6}.service
50 # --- GENERAL CHANGES (patches<10):
51 Patch0: %{name}-man.patch
52 # additional utils; off by default
53 Patch1: %{name}-batch.patch
54 Patch2: no-libiptc.patch
55 Patch3: %{name}-aligned_u64.patch
56 # --- ADDITIONAL/CHANGED EXTENSIONS:
57 # just ipt_IPV4OPTSSTRIP now
58 Patch10: %{name}-20070806.patch
59 # xt_layer7; almost based on iptables-1.4-for-kernel-2.6.20forward-layer7-2.18.patch
60 # http://downloads.sourceforge.net/l7-filter/netfilter-layer7-v2.18.tar.gz
61 Patch11: %{name}-layer7.patch
63 Patch12: %{name}-old-1.3.7.patch
64 # xt_IMQ; http://linuximq.net/patchs/iptables-1.4.12-IMQ-test4.diff
65 Patch13: %{name}-imq.patch
66 # enhances ipt_owner/ip6t_owner; http://people.linux-vserver.org/~dhozac/p/m/iptables-1.3.5-owner-xid.patch (currently disabled, needs update for xt_owner)
67 Patch14: %{name}-1.3.5-owner-xid.patch
68 # adjusts xt_owner for vserver-enabled kernel
69 Patch15: %{name}-owner-struct-size-vs.patch
70 # ipt_stealth; currently disabled (broken, see below)
71 Patch16: %{name}-stealth.patch
72 URL: http://www.netfilter.org/
73 BuildRequires: autoconf >= 2.50
74 BuildRequires: automake
76 BuildRequires: libnetfilter_conntrack-devel >= 1.0.4
77 BuildRequires: libnfnetlink-devel >= 1.0
78 %{?with_pcap:BuildRequires: libpcap-devel}
79 BuildRequires: libtool
80 BuildRequires: pkgconfig >= 1:0.9.0
81 BuildRequires: rpmbuild(macros) >= 1.647
83 BuildRequires: sed >= 4.0
84 BuildRequires: sgml-tools
86 BuildRequires: tetex-dvips
87 BuildRequires: tetex-format-latex
88 BuildRequires: tetex-latex
89 BuildRequires: tetex-tex-babel
90 BuildRequires: texlive-fonts-cmsuper
91 BuildRequires: texlive-fonts-jknappen
93 %if %{with dist_kernel}
94 BuildRequires: kernel%{_alt_kernel}-headers(netfilter)
96 BuildRequires: linux-libc-headers >= 7:2.6.22.1
97 Requires: %{name}-libs = %{version}-%{release}
98 Requires: libnetfilter_conntrack >= 1.0.4
99 Requires: libnfnetlink >= 1.0
100 Provides: firewall-userspace-tool
104 Obsoletes: iptables24-compat
106 Conflicts: xtables-addons < 1.25
107 BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
110 An extensible NAT system, and an extensible packet filtering system.
111 Replacement of ipchains in 2.4 and higher kernels.
113 %description -l pl.UTF-8
114 Wydajny system translacji adresów (NAT) oraz system filtrowania
115 pakietów. Zamiennik ipchains w jądrach 2.4 i nowszych.
117 %description -l pt_BR.UTF-8
118 Esta é a ferramenta que controla o código de filtragem de pacotes do
119 kernel 2.4, obsoletando ipchains. Com esta ferramenta você pode
120 configurar filtros de pacotes, NAT, mascaramento (masquerading),
121 regras dinâmicas (stateful inspection), etc.
123 %description -l ru.UTF-8
124 iptables управляют кодом фильтрации сетевых пакетов в ядре Linux. Они
125 позволяют вам устанавливать межсетевые экраны (firewalls) и IP
128 %description -l uk.UTF-8
129 iptables управляють кодом фільтрації пакетів мережі в ядрі Linux. Вони
130 дозволяють вам встановлювати міжмережеві екрани (firewalls) та IP
134 Summary: iptables libraries
135 Summary(pl.UTF-8): Biblioteki iptables
137 Conflicts: iptables < 1.4.3-1
142 %description libs -l pl.UTF-8
146 Summary: Libraries and headers for developing iptables extensions
147 Summary(pl.UTF-8): Biblioteki i nagłówki do tworzenia rozszerzeń iptables
148 Group: Development/Libraries
149 Requires: %{name}-libs = %{epoch}:%{version}-%{release}
150 Obsoletes: iptables24-devel
153 Libraries and headers for developing iptables extensions.
155 %description devel -l pl.UTF-8
156 Biblioteki i pliki nagłówkowe niezbędne do tworzenia rozszerzeń dla
160 Summary: Static iptables libraries
161 Summary(pl.UTF-8): Biblioteki statyczne iptables
162 Group: Development/Libraries
163 Requires: %{name}-devel = %{epoch}:%{version}-%{release}
166 Static iptables libraries.
168 %description static -l pl.UTF-8
169 Biblioteki statyczne iptables.
172 Summary: Iptables init (RedHat style)
173 Summary(pl.UTF-8): Iptables init (w stylu RedHata)
174 Group: Networking/Admin
175 Requires(post,preun): /sbin/chkconfig
176 Requires(post,preun,postun): systemd-units >= 38
178 Requires: rc-scripts >= 0.4.3.0
179 Requires: systemd-units >= 38
180 Obsoletes: firewall-init
181 Obsoletes: firewall-init-ipchains
182 Obsoletes: iptables24-init
185 Iptables-init is meant to provide an alternate way than firewall-init
186 to start and stop packet filtering through iptables(8).
188 %description init -l pl.UTF-8
189 Iptables-init ma na celu udostępnienie alternatywnego w stosunku do
190 firewall-init sposobu włączania i wyłączania filtrów IP jądra poprzez
202 %{?with_ipt_IPV4OPTSSTRIP:%patch10 -p1}
203 %{?with_xt_layer7:%patch11 -p1}
204 %{?with_ipt_rpc:%patch12 -p1}
210 # builds but init() api is broken, see warnings
220 CFLAGS="%{rpmcflags} %{rpmcppflags} -D%{!?debug:N}DEBUG" \
221 %{?with_usekernelsrc:--with-kernel=%{_kernelsrcdir}} \
222 %{?with_pcap:--enable-bpf-compiler} \
224 %{?with_pcap:--enable-nfsynproxy} \
225 %{?with_static:--enable-static}
231 %{__make} -j1 -C iptables-howtos
232 sed -i 's:$(HTML_HOWTOS)::g; s:$(PSUS_HOWTOS)::g' iptables-howtos/Makefile
236 rm -rf $RPM_BUILD_ROOT
237 install -d $RPM_BUILD_ROOT/etc/{rc.d/init.d,sysconfig} \
238 $RPM_BUILD_ROOT{%{_includedir},%{_libdir},%{_mandir}/man3} \
239 $RPM_BUILD_ROOT%{systemdunitdir}
242 DESTDIR=$RPM_BUILD_ROOT \
247 # not installed; provide so we can obsolete arptables and ebtables packages
248 ln -sf xtables-compat-multi $RPM_BUILD_ROOT%{_sbindir}/arptables
249 ln -sf xtables-compat-multi $RPM_BUILD_ROOT%{_sbindir}/ebtables
251 # upstream solution with empty library with two DT_NEEDED entries doesn't work
252 # with PLD's default LDFLAGS (--as-needed --no-copy-dt-needed-entries);
253 # use ld script instead (see no-libiptc.patch for source)
254 cp -p libiptc/libiptc.ld $RPM_BUILD_ROOT%{_libdir}/libiptc.so
256 install -p %{SOURCE2} $RPM_BUILD_ROOT/etc/rc.d/init.d/%{name}
257 install -p %{SOURCE3} $RPM_BUILD_ROOT/etc/rc.d/init.d/%{name6}
259 install -p %{SOURCE6} $RPM_BUILD_ROOT/etc/sysconfig/%{name}-config
260 install -p %{SOURCE7} $RPM_BUILD_ROOT/etc/sysconfig/%{name6}-config
262 install -p %{SOURCE8} $RPM_BUILD_ROOT%{systemdunitdir}/%{name}.service
263 install -p %{SOURCE9} $RPM_BUILD_ROOT%{systemdunitdir}/%{name6}.service
266 rm -rf $RPM_BUILD_ROOT
268 %post libs -p /sbin/ldconfig
269 %postun libs -p /sbin/ldconfig
272 /sbin/chkconfig --add %{name}
273 /sbin/chkconfig --add %{name6}
274 %systemd_post %{name}.service %{name6}.service
277 if [ "$1" = "0" ]; then
278 /sbin/chkconfig --del %{name}
279 /sbin/chkconfig --del %{name6}
281 %systemd_preun %{name}.service %{name6}.service
286 %triggerpostun init -- %{name}-init < 1.4.13-2
287 %systemd_trigger %{name}.service %{name6}.service
290 %defattr(644,root,root,755)
291 %{?with_doc:%doc iptables-howtos/{NAT,networking-concepts,packet-filtering}-HOWTO*}
292 %attr(755,root,root) %{_bindir}/iptables-xml
293 %attr(755,root,root) %{_sbindir}/arptables
294 %attr(755,root,root) %{_sbindir}/arptables-compat
295 %attr(755,root,root) %{_sbindir}/ebtables
296 %attr(755,root,root) %{_sbindir}/ebtables-compat
297 %attr(755,root,root) %{_sbindir}/iptables
298 %attr(755,root,root) %{_sbindir}/iptables-restore
299 %attr(755,root,root) %{_sbindir}/iptables-save
300 %attr(755,root,root) %{_sbindir}/iptables-compat
301 %attr(755,root,root) %{_sbindir}/iptables-compat-restore
302 %attr(755,root,root) %{_sbindir}/iptables-compat-save
303 %attr(755,root,root) %{_sbindir}/ip6tables
304 %attr(755,root,root) %{_sbindir}/ip6tables-restore
305 %attr(755,root,root) %{_sbindir}/ip6tables-save
306 %attr(755,root,root) %{_sbindir}/ip6tables-compat
307 %attr(755,root,root) %{_sbindir}/ip6tables-compat-restore
308 %attr(755,root,root) %{_sbindir}/ip6tables-compat-save
310 %attr(755,root,root) %{_sbindir}/iptables-batch
311 %attr(755,root,root) %{_sbindir}/ip6tables-batch
313 %attr(755,root,root) %{_sbindir}/nfnl_osf
315 %attr(755,root,root) %{_sbindir}/nfbpf_compile
316 %attr(755,root,root) %{_sbindir}/nfsynproxy
318 %attr(755,root,root) %{_sbindir}/xtables-compat-multi
319 %attr(755,root,root) %{_sbindir}/xtables-multi
321 %dir %{_libdir}/xtables
322 %attr(755,root,root) %{_libdir}/xtables/libarpt_mangle.so
323 %attr(755,root,root) %{_libdir}/xtables/libebt_802_3.so
324 %attr(755,root,root) %{_libdir}/xtables/libebt_ip.so
325 %attr(755,root,root) %{_libdir}/xtables/libebt_limit.so
326 %attr(755,root,root) %{_libdir}/xtables/libebt_log.so
327 %attr(755,root,root) %{_libdir}/xtables/libebt_mark.so
328 %attr(755,root,root) %{_libdir}/xtables/libebt_mark_m.so
329 %attr(755,root,root) %{_libdir}/xtables/libebt_nflog.so
330 %attr(755,root,root) %{_libdir}/xtables/libip6t_HL.so
331 %attr(755,root,root) %{_libdir}/xtables/libip6t_LOG.so
332 %attr(755,root,root) %{_libdir}/xtables/libip6t_REJECT.so
333 %attr(755,root,root) %{_libdir}/xtables/libip6t_ah.so
334 %attr(755,root,root) %{_libdir}/xtables/libip6t_dst.so
335 %attr(755,root,root) %{_libdir}/xtables/libip6t_eui64.so
336 %attr(755,root,root) %{_libdir}/xtables/libip6t_frag.so
337 %attr(755,root,root) %{_libdir}/xtables/libip6t_hbh.so
338 %attr(755,root,root) %{_libdir}/xtables/libip6t_hl.so
339 %attr(755,root,root) %{_libdir}/xtables/libip6t_icmp6.so
340 %attr(755,root,root) %{_libdir}/xtables/libip6t_ipv6header.so
341 %attr(755,root,root) %{_libdir}/xtables/libip6t_mh.so
342 %attr(755,root,root) %{_libdir}/xtables/libip6t_rt.so
343 %attr(755,root,root) %{_libdir}/xtables/libipt_CLUSTERIP.so
344 %attr(755,root,root) %{_libdir}/xtables/libipt_DNAT.so
345 %attr(755,root,root) %{_libdir}/xtables/libipt_ECN.so
346 %attr(755,root,root) %{_libdir}/xtables/libipt_LOG.so
347 %attr(755,root,root) %{_libdir}/xtables/libipt_MASQUERADE.so
348 %attr(755,root,root) %{_libdir}/xtables/libipt_NETMAP.so
349 %attr(755,root,root) %{_libdir}/xtables/libipt_REDIRECT.so
350 %attr(755,root,root) %{_libdir}/xtables/libipt_REJECT.so
351 %attr(755,root,root) %{_libdir}/xtables/libipt_SNAT.so
352 %attr(755,root,root) %{_libdir}/xtables/libipt_TTL.so
353 %attr(755,root,root) %{_libdir}/xtables/libipt_ULOG.so
354 %attr(755,root,root) %{_libdir}/xtables/libipt_ah.so
355 %attr(755,root,root) %{_libdir}/xtables/libipt_icmp.so
356 %attr(755,root,root) %{_libdir}/xtables/libipt_realm.so
357 # disabled, see above
358 #%attr(755,root,root) %{_libdir}/xtables/libipt_stealth.so
359 %attr(755,root,root) %{_libdir}/xtables/libipt_ttl.so
360 %attr(755,root,root) %{_libdir}/xtables/libip6t_DNAT.so
361 %attr(755,root,root) %{_libdir}/xtables/libip6t_DNPT.so
362 %attr(755,root,root) %{_libdir}/xtables/libip6t_MASQUERADE.so
363 %attr(755,root,root) %{_libdir}/xtables/libip6t_NETMAP.so
364 %attr(755,root,root) %{_libdir}/xtables/libip6t_REDIRECT.so
365 %attr(755,root,root) %{_libdir}/xtables/libip6t_SNAT.so
366 %attr(755,root,root) %{_libdir}/xtables/libip6t_SNPT.so
367 %attr(755,root,root) %{_libdir}/xtables/libxt_AUDIT.so
368 %attr(755,root,root) %{_libdir}/xtables/libxt_CHECKSUM.so
369 %attr(755,root,root) %{_libdir}/xtables/libxt_CLASSIFY.so
370 %attr(755,root,root) %{_libdir}/xtables/libxt_CONNMARK.so
371 %attr(755,root,root) %{_libdir}/xtables/libxt_CONNSECMARK.so
372 %attr(755,root,root) %{_libdir}/xtables/libxt_CT.so
373 %attr(755,root,root) %{_libdir}/xtables/libxt_DSCP.so
374 %attr(755,root,root) %{_libdir}/xtables/libxt_HMARK.so
375 %attr(755,root,root) %{_libdir}/xtables/libxt_IDLETIMER.so
376 %attr(755,root,root) %{_libdir}/xtables/libxt_IMQ.so
377 %attr(755,root,root) %{_libdir}/xtables/libxt_LED.so
378 %attr(755,root,root) %{_libdir}/xtables/libxt_MARK.so
379 %attr(755,root,root) %{_libdir}/xtables/libxt_NFLOG.so
380 %attr(755,root,root) %{_libdir}/xtables/libxt_NFQUEUE.so
381 %attr(755,root,root) %{_libdir}/xtables/libxt_NOTRACK.so
382 %attr(755,root,root) %{_libdir}/xtables/libxt_RATEEST.so
383 %attr(755,root,root) %{_libdir}/xtables/libxt_SECMARK.so
384 %attr(755,root,root) %{_libdir}/xtables/libxt_SET.so
385 %attr(755,root,root) %{_libdir}/xtables/libxt_SYNPROXY.so
386 %attr(755,root,root) %{_libdir}/xtables/libxt_TCPMSS.so
387 %attr(755,root,root) %{_libdir}/xtables/libxt_TCPOPTSTRIP.so
388 %attr(755,root,root) %{_libdir}/xtables/libxt_TEE.so
389 %attr(755,root,root) %{_libdir}/xtables/libxt_TOS.so
390 %attr(755,root,root) %{_libdir}/xtables/libxt_TPROXY.so
391 %attr(755,root,root) %{_libdir}/xtables/libxt_TRACE.so
392 %attr(755,root,root) %{_libdir}/xtables/libxt_addrtype.so
393 %attr(755,root,root) %{_libdir}/xtables/libxt_bpf.so
394 %attr(755,root,root) %{_libdir}/xtables/libxt_cgroup.so
395 %attr(755,root,root) %{_libdir}/xtables/libxt_cluster.so
396 %attr(755,root,root) %{_libdir}/xtables/libxt_comment.so
397 %attr(755,root,root) %{_libdir}/xtables/libxt_connbytes.so
398 %attr(755,root,root) %{_libdir}/xtables/libxt_connlabel.so
399 %attr(755,root,root) %{_libdir}/xtables/libxt_connlimit.so
400 %attr(755,root,root) %{_libdir}/xtables/libxt_connmark.so
401 %attr(755,root,root) %{_libdir}/xtables/libxt_conntrack.so
402 %attr(755,root,root) %{_libdir}/xtables/libxt_cpu.so
403 %attr(755,root,root) %{_libdir}/xtables/libxt_dccp.so
404 %attr(755,root,root) %{_libdir}/xtables/libxt_devgroup.so
405 %attr(755,root,root) %{_libdir}/xtables/libxt_dscp.so
406 %attr(755,root,root) %{_libdir}/xtables/libxt_ecn.so
407 %attr(755,root,root) %{_libdir}/xtables/libxt_esp.so
408 %attr(755,root,root) %{_libdir}/xtables/libxt_hashlimit.so
409 %attr(755,root,root) %{_libdir}/xtables/libxt_helper.so
410 %attr(755,root,root) %{_libdir}/xtables/libxt_ipcomp.so
411 %attr(755,root,root) %{_libdir}/xtables/libxt_iprange.so
412 %attr(755,root,root) %{_libdir}/xtables/libxt_ipvs.so
413 %attr(755,root,root) %{_libdir}/xtables/libxt_length.so
414 %attr(755,root,root) %{_libdir}/xtables/libxt_limit.so
415 %attr(755,root,root) %{_libdir}/xtables/libxt_mac.so
416 %attr(755,root,root) %{_libdir}/xtables/libxt_mangle.so
417 %attr(755,root,root) %{_libdir}/xtables/libxt_mark.so
418 %attr(755,root,root) %{_libdir}/xtables/libxt_multiport.so
419 %attr(755,root,root) %{_libdir}/xtables/libxt_nfacct.so
420 %attr(755,root,root) %{_libdir}/xtables/libxt_osf.so
421 %attr(755,root,root) %{_libdir}/xtables/libxt_owner.so
422 %attr(755,root,root) %{_libdir}/xtables/libxt_physdev.so
423 %attr(755,root,root) %{_libdir}/xtables/libxt_pkttype.so
424 %attr(755,root,root) %{_libdir}/xtables/libxt_policy.so
425 %attr(755,root,root) %{_libdir}/xtables/libxt_quota.so
426 %attr(755,root,root) %{_libdir}/xtables/libxt_rateest.so
427 %attr(755,root,root) %{_libdir}/xtables/libxt_recent.so
428 %attr(755,root,root) %{_libdir}/xtables/libxt_rpfilter.so
429 %attr(755,root,root) %{_libdir}/xtables/libxt_sctp.so
430 %attr(755,root,root) %{_libdir}/xtables/libxt_set.so
431 %attr(755,root,root) %{_libdir}/xtables/libxt_socket.so
432 %attr(755,root,root) %{_libdir}/xtables/libxt_standard.so
433 %attr(755,root,root) %{_libdir}/xtables/libxt_state.so
434 %attr(755,root,root) %{_libdir}/xtables/libxt_statistic.so
435 %attr(755,root,root) %{_libdir}/xtables/libxt_string.so
436 %attr(755,root,root) %{_libdir}/xtables/libxt_tcp.so
437 %attr(755,root,root) %{_libdir}/xtables/libxt_tcpmss.so
438 %attr(755,root,root) %{_libdir}/xtables/libxt_time.so
439 %attr(755,root,root) %{_libdir}/xtables/libxt_tos.so
440 %attr(755,root,root) %{_libdir}/xtables/libxt_u32.so
441 %attr(755,root,root) %{_libdir}/xtables/libxt_udp.so
442 %{?with_ipt_IPV4OPTSSTRIP:%attr(755,root,root) %{_libdir}/xtables/libipt_IPV4OPTSSTRIP.so}
443 %{?with_ipt_rpc:%attr(755,root,root) %{_libdir}/xtables/libipt_rpc.so}
444 %{?with_xt_layer7:%attr(755,root,root) %{_libdir}/xtables/libxt_layer7.so}
445 %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/ethertypes
446 %{_mandir}/man1/iptables-xml.1*
447 %{_mandir}/man8/ip6tables.8*
448 %{_mandir}/man8/ip6tables-restore.8*
449 %{_mandir}/man8/ip6tables-save.8*
450 %{_mandir}/man8/iptables.8*
451 %{_mandir}/man8/iptables-extensions.8*
452 %{_mandir}/man8/iptables-restore.8*
453 %{_mandir}/man8/iptables-save.8*
456 %defattr(644,root,root,755)
457 %attr(755,root,root) %{_libdir}/libip4tc.so.*.*.*
458 %attr(755,root,root) %ghost %{_libdir}/libip4tc.so.0
459 %attr(755,root,root) %{_libdir}/libip6tc.so.*.*.*
460 %attr(755,root,root) %ghost %{_libdir}/libip6tc.so.0
461 %attr(755,root,root) %{_libdir}/libipq.so.*.*.*
462 %attr(755,root,root) %ghost %{_libdir}/libipq.so.0
463 %attr(755,root,root) %{_libdir}/libxtables.so.*.*.*
464 %attr(755,root,root) %ghost %{_libdir}/libxtables.so.11
467 %defattr(644,root,root,755)
468 %{?with_doc:%doc iptables-howtos/netfilter-hacking-HOWTO*}
469 %attr(755,root,root) %{_libdir}/libip4tc.so
470 %attr(755,root,root) %{_libdir}/libip6tc.so
471 %attr(755,root,root) %{_libdir}/libipq.so
472 %attr(755,root,root) %{_libdir}/libiptc.so
473 %attr(755,root,root) %{_libdir}/libxtables.so
474 %{_libdir}/libip4tc.la
475 %{_libdir}/libip6tc.la
477 %{_libdir}/libxtables.la
478 %{_includedir}/libipq.h
479 %{_includedir}/xtables.h
480 %{_includedir}/xtables-version.h
481 %{_includedir}/libiptc
482 %{_pkgconfigdir}/libip4tc.pc
483 %{_pkgconfigdir}/libip6tc.pc
484 %{_pkgconfigdir}/libipq.pc
485 %{_pkgconfigdir}/libiptc.pc
486 %{_pkgconfigdir}/xtables.pc
487 %{_mandir}/man3/ipq_*.3*
488 %{_mandir}/man3/libipq.3*
492 %defattr(644,root,root,755)
493 %{_libdir}/libip4tc.a
494 %{_libdir}/libip6tc.a
496 %{_libdir}/libxtables.a
500 %defattr(644,root,root,755)
501 %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/%{name}-config
502 %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/%{name6}-config
503 %attr(754,root,root) /etc/rc.d/init.d/iptables
504 %attr(754,root,root) /etc/rc.d/init.d/ip6tables
505 %{systemdunitdir}/%{name}.service
506 %{systemdunitdir}/%{name6}.service