3 # - update BR to real required llh version
4 # - check if kernel-headers are still required to properly build iptabels for dist kernel
5 # - fix makefile (-D_UNKNOWN_KERNEL_POINTER_SIZE issue)
6 # - owner needs rewrite to xt
9 %bcond_without doc # without documentation (HOWTOS) which needed TeX
10 %bcond_without dist_kernel # without distribution kernel
11 %bcond_without pcap # pcap-dependend utils (nfbpf_compile, nfsynproxy)
12 %bcond_with vserver # build xt_owner module for non-dist kernel with vserver support
13 %bcond_with batch # build iptables-batch
14 %bcond_with static # build static libraries, no dynamic modules (all linked into binaries)
15 %bcond_with ipt_IPV4OPTSSTRIP # enable ipt_IPV4OPTSSTRIP for non-dist kernel
16 %bcond_with ipt_rpc # enable ipt_rpc for non-dist kernel
17 %bcond_with xt_layer7 # enable xt_layer7 for non-dist kernel
18 %bcond_with usekernelsrc # include kernel headers from %{_kernelsrcdir}
20 %if %{with dist_kernel}
21 %define with_ipt_IPV4OPTSSTRIP 1
22 %define with_ipt_rpc 1
23 %define with_xt_layer7 1
24 %define with_vserver 1
27 %define name6 ip6tables
28 Summary: Extensible packet filtering system && extensible NAT system
29 Summary(pl.UTF-8): System filtrowania pakietów oraz system translacji adresów (NAT)
30 Summary(pt_BR.UTF-8): Ferramenta para controlar a filtragem de pacotes no kernel-2.6.x
31 Summary(ru.UTF-8): Утилиты для управления пакетными фильтрами ядра Linux
32 Summary(uk.UTF-8): Утиліти для керування пакетними фільтрами ядра Linux
33 Summary(zh_CN.UTF-8): Linux内核包过滤管理工具
38 Group: Networking/Admin
39 Source0: ftp://ftp.netfilter.org/pub/iptables/%{name}-%{version}.tar.bz2
40 # Source0-md5: 536d048c8e8eeebcd9757d0863ebb0c0
41 Source1: cvs://cvs.samba.org/netfilter/%{name}-howtos.tar.bz2
42 # Source1-md5: 2ed2b452daefe70ededd75dc0061fd07
44 Source3: %{name6}.init
45 Source4: %{name}.upstart
46 Source5: %{name6}.upstart
47 Source6: %{name}-config
48 Source7: %{name6}-config
49 Source8: %{name}.service
50 Source9: %{name6}.service
51 # --- GENERAL CHANGES (patches<10):
52 Patch0: %{name}-man.patch
53 # additional utils; off by default
54 Patch1: %{name}-batch.patch
55 Patch2: no-libiptc.patch
56 Patch3: %{name}-aligned_u64.patch
57 # --- ADDITIONAL/CHANGED EXTENSIONS:
58 # just ipt_IPV4OPTSSTRIP now
59 Patch10: %{name}-20070806.patch
60 # xt_layer7; almost based on iptables-1.4-for-kernel-2.6.20forward-layer7-2.18.patch
61 # http://downloads.sourceforge.net/l7-filter/netfilter-layer7-v2.18.tar.gz
62 Patch11: %{name}-layer7.patch
64 Patch12: %{name}-old-1.3.7.patch
65 # xt_IMQ; http://linuximq.net/patchs/iptables-1.4.12-IMQ-test4.diff
66 Patch13: %{name}-imq.patch
67 # enhances ipt_owner/ip6t_owner; http://people.linux-vserver.org/~dhozac/p/m/iptables-1.3.5-owner-xid.patch (currently disabled, needs update for xt_owner)
68 Patch14: %{name}-1.3.5-owner-xid.patch
69 # adjusts xt_owner for vserver-enabled kernel
70 Patch15: %{name}-owner-struct-size-vs.patch
71 # ipt_stealth; currently disabled (broken, see below)
72 Patch16: %{name}-stealth.patch
73 URL: http://www.netfilter.org/
74 BuildRequires: autoconf >= 2.50
75 BuildRequires: automake
77 BuildRequires: libnetfilter_conntrack-devel >= 1.0.4
78 BuildRequires: libnfnetlink-devel >= 1.0
79 %{?with_pcap:BuildRequires: libpcap-devel}
80 BuildRequires: libtool
81 BuildRequires: pkgconfig >= 1:0.9.0
82 BuildRequires: rpmbuild(macros) >= 1.647
84 BuildRequires: sed >= 4.0
85 BuildRequires: sgml-tools
87 BuildRequires: tetex-dvips
88 BuildRequires: tetex-format-latex
89 BuildRequires: tetex-latex
90 BuildRequires: tetex-tex-babel
91 BuildRequires: texlive-fonts-cmsuper
92 BuildRequires: texlive-fonts-jknappen
94 %if %{with dist_kernel}
95 BuildRequires: kernel%{_alt_kernel}-headers(netfilter)
97 BuildRequires: linux-libc-headers >= 7:2.6.22.1
98 Requires: %{name}-libs = %{version}-%{release}
99 Requires: libnetfilter_conntrack >= 1.0.4
100 Requires: libnfnetlink >= 1.0
101 Provides: firewall-userspace-tool
103 Obsoletes: iptables24-compat
105 Conflicts: xtables-addons < 1.25
106 BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
109 An extensible NAT system, and an extensible packet filtering system.
110 Replacement of ipchains in 2.4 and higher kernels.
112 %description -l pl.UTF-8
113 Wydajny system translacji adresów (NAT) oraz system filtrowania
114 pakietów. Zamiennik ipchains w jądrach 2.4 i nowszych.
116 %description -l pt_BR.UTF-8
117 Esta é a ferramenta que controla o código de filtragem de pacotes do
118 kernel 2.4, obsoletando ipchains. Com esta ferramenta você pode
119 configurar filtros de pacotes, NAT, mascaramento (masquerading),
120 regras dinâmicas (stateful inspection), etc.
122 %description -l ru.UTF-8
123 iptables управляют кодом фильтрации сетевых пакетов в ядре Linux. Они
124 позволяют вам устанавливать межсетевые экраны (firewalls) и IP
127 %description -l uk.UTF-8
128 iptables управляють кодом фільтрації пакетів мережі в ядрі Linux. Вони
129 дозволяють вам встановлювати міжмережеві екрани (firewalls) та IP
133 Summary: iptables libraries
134 Summary(pl.UTF-8): Biblioteki iptables
136 Conflicts: iptables < 1.4.3-1
141 %description libs -l pl.UTF-8
145 Summary: Libraries and headers for developing iptables extensions
146 Summary(pl.UTF-8): Biblioteki i nagłówki do tworzenia rozszerzeń iptables
147 Group: Development/Libraries
148 Requires: %{name}-libs = %{epoch}:%{version}-%{release}
149 Obsoletes: iptables24-devel
152 Libraries and headers for developing iptables extensions.
154 %description devel -l pl.UTF-8
155 Biblioteki i pliki nagłówkowe niezbędne do tworzenia rozszerzeń dla
159 Summary: Static iptables libraries
160 Summary(pl.UTF-8): Biblioteki statyczne iptables
161 Group: Development/Libraries
162 Requires: %{name}-devel = %{epoch}:%{version}-%{release}
165 Static iptables libraries.
167 %description static -l pl.UTF-8
168 Biblioteki statyczne iptables.
171 Summary: Iptables init (RedHat style)
172 Summary(pl.UTF-8): Iptables init (w stylu RedHata)
173 Group: Networking/Admin
174 Requires(post,preun): /sbin/chkconfig
175 Requires(post,preun,postun): systemd-units >= 38
177 Requires: rc-scripts >= 0.4.3.0
178 Requires: systemd-units >= 38
179 Obsoletes: firewall-init
180 Obsoletes: firewall-init-ipchains
181 Obsoletes: iptables24-init
184 Iptables-init is meant to provide an alternate way than firewall-init
185 to start and stop packet filtering through iptables(8).
187 %description init -l pl.UTF-8
188 Iptables-init ma na celu udostępnienie alternatywnego w stosunku do
189 firewall-init sposobu włączania i wyłączania filtrów IP jądra poprzez
201 %{?with_ipt_IPV4OPTSSTRIP:%patch10 -p1}
202 %{?with_xt_layer7:%patch11 -p1}
203 %{?with_ipt_rpc:%patch12 -p1}
209 # builds but init() api is broken, see warnings
219 CFLAGS="%{rpmcflags} %{rpmcppflags} -D%{!?debug:N}DEBUG" \
220 %{?with_usekernelsrc:--with-kernel=%{_kernelsrcdir}} \
221 %{?with_pcap:--enable-bpf-compiler} \
223 %{?with_pcap:--enable-nfsynproxy} \
224 %{?with_static:--enable-static}
230 %{__make} -j1 -C iptables-howtos
231 sed -i 's:$(HTML_HOWTOS)::g; s:$(PSUS_HOWTOS)::g' iptables-howtos/Makefile
235 rm -rf $RPM_BUILD_ROOT
236 install -d $RPM_BUILD_ROOT/etc/{rc.d/init.d,sysconfig} \
237 $RPM_BUILD_ROOT{%{_includedir},%{_libdir},%{_mandir}/man3} \
238 $RPM_BUILD_ROOT%{systemdunitdir}
241 DESTDIR=$RPM_BUILD_ROOT \
246 # upstream solution with empty library with two DT_NEEDED entries doesn't work
247 # with PLD's default LDFLAGS (--as-needed --no-copy-dt-needed-entries);
248 # use ld script instead (see no-libiptc.patch for source)
249 cp -p libiptc/libiptc.ld $RPM_BUILD_ROOT%{_libdir}/libiptc.so
251 install -p %{SOURCE2} $RPM_BUILD_ROOT/etc/rc.d/init.d/%{name}
252 install -p %{SOURCE3} $RPM_BUILD_ROOT/etc/rc.d/init.d/%{name6}
253 install -d $RPM_BUILD_ROOT/etc/init
254 cp -p %{SOURCE4} $RPM_BUILD_ROOT/etc/init/%{name}.conf
255 cp -p %{SOURCE5} $RPM_BUILD_ROOT/etc/init/%{name6}.conf
257 install -p %{SOURCE6} $RPM_BUILD_ROOT/etc/sysconfig/%{name}-config
258 install -p %{SOURCE7} $RPM_BUILD_ROOT/etc/sysconfig/%{name6}-config
260 install -p %{SOURCE8} $RPM_BUILD_ROOT%{systemdunitdir}/%{name}.service
261 install -p %{SOURCE9} $RPM_BUILD_ROOT%{systemdunitdir}/%{name6}.service
264 rm -rf $RPM_BUILD_ROOT
266 %post libs -p /sbin/ldconfig
267 %postun libs -p /sbin/ldconfig
270 /sbin/chkconfig --add %{name}
271 /sbin/chkconfig --add %{name6}
272 %systemd_post %{name}.service %{name6}.service
275 if [ "$1" = "0" ]; then
276 /sbin/chkconfig --del %{name}
277 /sbin/chkconfig --del %{name6}
279 %systemd_preun %{name}.service %{name6}.service
284 %triggerpostun init -- %{name}-init < 1.4.13-2
285 %systemd_trigger %{name}.service %{name6}.service
288 %defattr(644,root,root,755)
289 %{?with_doc:%doc iptables-howtos/{NAT,networking-concepts,packet-filtering}-HOWTO*}
290 %attr(755,root,root) %{_bindir}/iptables-xml
291 %attr(755,root,root) %{_sbindir}/iptables
292 %attr(755,root,root) %{_sbindir}/iptables-restore
293 %attr(755,root,root) %{_sbindir}/iptables-save
294 %attr(755,root,root) %{_sbindir}/ip6tables
295 %attr(755,root,root) %{_sbindir}/ip6tables-restore
296 %attr(755,root,root) %{_sbindir}/ip6tables-save
298 %attr(755,root,root) %{_sbindir}/iptables-batch
299 %attr(755,root,root) %{_sbindir}/ip6tables-batch
301 %attr(755,root,root) %{_sbindir}/nfnl_osf
303 %attr(755,root,root) %{_sbindir}/nfbpf_compile
304 %attr(755,root,root) %{_sbindir}/nfsynproxy
306 %attr(755,root,root) %{_sbindir}/xtables-multi
308 %dir %{_libdir}/xtables
309 %attr(755,root,root) %{_libdir}/xtables/libip6t_HL.so
310 %attr(755,root,root) %{_libdir}/xtables/libip6t_LOG.so
311 %attr(755,root,root) %{_libdir}/xtables/libip6t_REJECT.so
312 %attr(755,root,root) %{_libdir}/xtables/libip6t_ah.so
313 %attr(755,root,root) %{_libdir}/xtables/libip6t_dst.so
314 %attr(755,root,root) %{_libdir}/xtables/libip6t_eui64.so
315 %attr(755,root,root) %{_libdir}/xtables/libip6t_frag.so
316 %attr(755,root,root) %{_libdir}/xtables/libip6t_hbh.so
317 %attr(755,root,root) %{_libdir}/xtables/libip6t_hl.so
318 %attr(755,root,root) %{_libdir}/xtables/libip6t_icmp6.so
319 %attr(755,root,root) %{_libdir}/xtables/libip6t_ipv6header.so
320 %attr(755,root,root) %{_libdir}/xtables/libip6t_mh.so
321 %attr(755,root,root) %{_libdir}/xtables/libip6t_rt.so
322 %attr(755,root,root) %{_libdir}/xtables/libipt_CLUSTERIP.so
323 %attr(755,root,root) %{_libdir}/xtables/libipt_DNAT.so
324 %attr(755,root,root) %{_libdir}/xtables/libipt_ECN.so
325 %attr(755,root,root) %{_libdir}/xtables/libipt_LOG.so
326 %attr(755,root,root) %{_libdir}/xtables/libipt_MASQUERADE.so
327 %attr(755,root,root) %{_libdir}/xtables/libipt_MIRROR.so
328 %attr(755,root,root) %{_libdir}/xtables/libipt_NETMAP.so
329 %attr(755,root,root) %{_libdir}/xtables/libipt_REDIRECT.so
330 %attr(755,root,root) %{_libdir}/xtables/libipt_REJECT.so
331 %attr(755,root,root) %{_libdir}/xtables/libipt_SAME.so
332 %attr(755,root,root) %{_libdir}/xtables/libipt_SNAT.so
333 %attr(755,root,root) %{_libdir}/xtables/libipt_TTL.so
334 %attr(755,root,root) %{_libdir}/xtables/libipt_ULOG.so
335 %attr(755,root,root) %{_libdir}/xtables/libipt_ah.so
336 %attr(755,root,root) %{_libdir}/xtables/libipt_icmp.so
337 %attr(755,root,root) %{_libdir}/xtables/libipt_realm.so
338 # disabled, see above
339 #%attr(755,root,root) %{_libdir}/xtables/libipt_stealth.so
340 %attr(755,root,root) %{_libdir}/xtables/libipt_ttl.so
341 %attr(755,root,root) %{_libdir}/xtables/libipt_unclean.so
342 %attr(755,root,root) %{_libdir}/xtables/libip6t_DNAT.so
343 %attr(755,root,root) %{_libdir}/xtables/libip6t_DNPT.so
344 %attr(755,root,root) %{_libdir}/xtables/libip6t_MASQUERADE.so
345 %attr(755,root,root) %{_libdir}/xtables/libip6t_NETMAP.so
346 %attr(755,root,root) %{_libdir}/xtables/libip6t_REDIRECT.so
347 %attr(755,root,root) %{_libdir}/xtables/libip6t_SNAT.so
348 %attr(755,root,root) %{_libdir}/xtables/libip6t_SNPT.so
349 %attr(755,root,root) %{_libdir}/xtables/libxt_AUDIT.so
350 %attr(755,root,root) %{_libdir}/xtables/libxt_CHECKSUM.so
351 %attr(755,root,root) %{_libdir}/xtables/libxt_CLASSIFY.so
352 %attr(755,root,root) %{_libdir}/xtables/libxt_CONNMARK.so
353 %attr(755,root,root) %{_libdir}/xtables/libxt_CONNSECMARK.so
354 %attr(755,root,root) %{_libdir}/xtables/libxt_CT.so
355 %attr(755,root,root) %{_libdir}/xtables/libxt_DSCP.so
356 %attr(755,root,root) %{_libdir}/xtables/libxt_HMARK.so
357 %attr(755,root,root) %{_libdir}/xtables/libxt_IDLETIMER.so
358 %attr(755,root,root) %{_libdir}/xtables/libxt_IMQ.so
359 %attr(755,root,root) %{_libdir}/xtables/libxt_LED.so
360 %attr(755,root,root) %{_libdir}/xtables/libxt_MARK.so
361 %attr(755,root,root) %{_libdir}/xtables/libxt_NFLOG.so
362 %attr(755,root,root) %{_libdir}/xtables/libxt_NFQUEUE.so
363 %attr(755,root,root) %{_libdir}/xtables/libxt_NOTRACK.so
364 %attr(755,root,root) %{_libdir}/xtables/libxt_RATEEST.so
365 %attr(755,root,root) %{_libdir}/xtables/libxt_SECMARK.so
366 %attr(755,root,root) %{_libdir}/xtables/libxt_SET.so
367 %attr(755,root,root) %{_libdir}/xtables/libxt_SYNPROXY.so
368 %attr(755,root,root) %{_libdir}/xtables/libxt_TCPMSS.so
369 %attr(755,root,root) %{_libdir}/xtables/libxt_TCPOPTSTRIP.so
370 %attr(755,root,root) %{_libdir}/xtables/libxt_TEE.so
371 %attr(755,root,root) %{_libdir}/xtables/libxt_TOS.so
372 %attr(755,root,root) %{_libdir}/xtables/libxt_TPROXY.so
373 %attr(755,root,root) %{_libdir}/xtables/libxt_TRACE.so
374 %attr(755,root,root) %{_libdir}/xtables/libxt_addrtype.so
375 %attr(755,root,root) %{_libdir}/xtables/libxt_bpf.so
376 %attr(755,root,root) %{_libdir}/xtables/libxt_cluster.so
377 %attr(755,root,root) %{_libdir}/xtables/libxt_comment.so
378 %attr(755,root,root) %{_libdir}/xtables/libxt_connbytes.so
379 %attr(755,root,root) %{_libdir}/xtables/libxt_connlabel.so
380 %attr(755,root,root) %{_libdir}/xtables/libxt_connlimit.so
381 %attr(755,root,root) %{_libdir}/xtables/libxt_connmark.so
382 %attr(755,root,root) %{_libdir}/xtables/libxt_conntrack.so
383 %attr(755,root,root) %{_libdir}/xtables/libxt_cpu.so
384 %attr(755,root,root) %{_libdir}/xtables/libxt_dccp.so
385 %attr(755,root,root) %{_libdir}/xtables/libxt_devgroup.so
386 %attr(755,root,root) %{_libdir}/xtables/libxt_dscp.so
387 %attr(755,root,root) %{_libdir}/xtables/libxt_ecn.so
388 %attr(755,root,root) %{_libdir}/xtables/libxt_esp.so
389 %attr(755,root,root) %{_libdir}/xtables/libxt_hashlimit.so
390 %attr(755,root,root) %{_libdir}/xtables/libxt_helper.so
391 %attr(755,root,root) %{_libdir}/xtables/libxt_iprange.so
392 %attr(755,root,root) %{_libdir}/xtables/libxt_ipvs.so
393 %attr(755,root,root) %{_libdir}/xtables/libxt_length.so
394 %attr(755,root,root) %{_libdir}/xtables/libxt_limit.so
395 %attr(755,root,root) %{_libdir}/xtables/libxt_mac.so
396 %attr(755,root,root) %{_libdir}/xtables/libxt_mark.so
397 %attr(755,root,root) %{_libdir}/xtables/libxt_multiport.so
398 %attr(755,root,root) %{_libdir}/xtables/libxt_nfacct.so
399 %attr(755,root,root) %{_libdir}/xtables/libxt_osf.so
400 %attr(755,root,root) %{_libdir}/xtables/libxt_owner.so
401 %attr(755,root,root) %{_libdir}/xtables/libxt_physdev.so
402 %attr(755,root,root) %{_libdir}/xtables/libxt_pkttype.so
403 %attr(755,root,root) %{_libdir}/xtables/libxt_policy.so
404 %attr(755,root,root) %{_libdir}/xtables/libxt_quota.so
405 %attr(755,root,root) %{_libdir}/xtables/libxt_rateest.so
406 %attr(755,root,root) %{_libdir}/xtables/libxt_recent.so
407 %attr(755,root,root) %{_libdir}/xtables/libxt_rpfilter.so
408 %attr(755,root,root) %{_libdir}/xtables/libxt_sctp.so
409 %attr(755,root,root) %{_libdir}/xtables/libxt_set.so
410 %attr(755,root,root) %{_libdir}/xtables/libxt_socket.so
411 %attr(755,root,root) %{_libdir}/xtables/libxt_standard.so
412 %attr(755,root,root) %{_libdir}/xtables/libxt_state.so
413 %attr(755,root,root) %{_libdir}/xtables/libxt_statistic.so
414 %attr(755,root,root) %{_libdir}/xtables/libxt_string.so
415 %attr(755,root,root) %{_libdir}/xtables/libxt_tcp.so
416 %attr(755,root,root) %{_libdir}/xtables/libxt_tcpmss.so
417 %attr(755,root,root) %{_libdir}/xtables/libxt_time.so
418 %attr(755,root,root) %{_libdir}/xtables/libxt_tos.so
419 %attr(755,root,root) %{_libdir}/xtables/libxt_u32.so
420 %attr(755,root,root) %{_libdir}/xtables/libxt_udp.so
421 %{?with_ipt_IPV4OPTSSTRIP:%attr(755,root,root) %{_libdir}/xtables/libipt_IPV4OPTSSTRIP.so}
422 %{?with_ipt_rpc:%attr(755,root,root) %{_libdir}/xtables/libipt_rpc.so}
423 %{?with_xt_layer7:%attr(755,root,root) %{_libdir}/xtables/libxt_layer7.so}
424 %{_mandir}/man1/iptables-xml.1*
425 %{_mandir}/man8/ip6tables.8*
426 %{_mandir}/man8/ip6tables-restore.8*
427 %{_mandir}/man8/ip6tables-save.8*
428 %{_mandir}/man8/iptables.8*
429 %{_mandir}/man8/iptables-extensions.8*
430 %{_mandir}/man8/iptables-restore.8*
431 %{_mandir}/man8/iptables-save.8*
434 %defattr(644,root,root,755)
435 %attr(755,root,root) %{_libdir}/libip4tc.so.*.*.*
436 %attr(755,root,root) %ghost %{_libdir}/libip4tc.so.0
437 %attr(755,root,root) %{_libdir}/libip6tc.so.*.*.*
438 %attr(755,root,root) %ghost %{_libdir}/libip6tc.so.0
439 %attr(755,root,root) %{_libdir}/libipq.so.*.*.*
440 %attr(755,root,root) %ghost %{_libdir}/libipq.so.0
441 %attr(755,root,root) %{_libdir}/libxtables.so.*.*.*
442 %attr(755,root,root) %ghost %{_libdir}/libxtables.so.10
445 %defattr(644,root,root,755)
446 %{?with_doc:%doc iptables-howtos/netfilter-hacking-HOWTO*}
447 %attr(755,root,root) %{_libdir}/libip4tc.so
448 %attr(755,root,root) %{_libdir}/libip6tc.so
449 %attr(755,root,root) %{_libdir}/libipq.so
450 %attr(755,root,root) %{_libdir}/libiptc.so
451 %attr(755,root,root) %{_libdir}/libxtables.so
452 %{_libdir}/libip4tc.la
453 %{_libdir}/libip6tc.la
455 %{_libdir}/libxtables.la
456 %{_includedir}/libipq.h
457 %{_includedir}/xtables.h
458 %{_includedir}/xtables-version.h
459 %{_includedir}/libiptc
460 %{_pkgconfigdir}/libip4tc.pc
461 %{_pkgconfigdir}/libip6tc.pc
462 %{_pkgconfigdir}/libipq.pc
463 %{_pkgconfigdir}/libiptc.pc
464 %{_pkgconfigdir}/xtables.pc
465 %{_mandir}/man3/ipq_*.3*
466 %{_mandir}/man3/libipq.3*
470 %defattr(644,root,root,755)
471 %{_libdir}/libip4tc.a
472 %{_libdir}/libip6tc.a
474 %{_libdir}/libxtables.a
478 %defattr(644,root,root,755)
479 %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/%{name}-config
480 %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/%{name6}-config
481 %attr(754,root,root) /etc/rc.d/init.d/iptables
482 %attr(754,root,root) /etc/rc.d/init.d/ip6tables
483 %config(noreplace) %verify(not md5 mtime size) /etc/init/%{name}.conf
484 %config(noreplace) %verify(not md5 mtime size) /etc/init/%{name6}.conf
485 %{systemdunitdir}/%{name}.service
486 %{systemdunitdir}/%{name6}.service