3 # - fix makefile (-D_UNKNOWN_KERNEL_POINTER_SIZE issue)
4 # - owner needs rewrite to xt
5 # - batch needs update/rewrite
6 # - add manual sections from xtable-addons
7 # - ACCOUNT has been removed from iptables-20070806.patch, now should be taken
8 # from http://www.intra2net.com/de/produkte/opensource/ipt_account/libipt_ACCOUNT-1.3.tar.gz
11 %bcond_without doc # without documentation (HOWTOS) which needed TeX
12 %bcond_without dist_kernel # without distribution kernel
13 %bcond_without vserver # kernel build without vserver
15 %define netfilter_snap 20070806
16 %define llh_version 7:2.6.22.1
17 %define name6 ip6tables
20 Summary: Extensible packet filtering system && extensible NAT system
21 Summary(pl.UTF-8): System filtrowania pakietów oraz system translacji adresów (NAT)
22 Summary(pt_BR.UTF-8): Ferramenta para controlar a filtragem de pacotes no kernel-2.6.x
23 Summary(ru.UTF-8): Утилиты для управления пакетными фильтрами ядра Linux
24 Summary(uk.UTF-8): Утиліти для керування пакетними фільтрами ядра Linux
25 Summary(zh_CN.UTF-8): Linux内核包过滤管理工具
30 Group: Networking/Daemons
31 Source0: ftp://ftp.netfilter.org/pub/iptables/%{name}-%{version}.tar.bz2
32 # Source0-md5: 723fa88d8a0915e184f99e03e9bf06cb
33 Source1: cvs://cvs.samba.org/netfilter/%{name}-howtos.tar.bz2
34 # Source1-md5: 2ed2b452daefe70ededd75dc0061fd07
36 Source3: %{name6}.init
37 Patch0: %{name}-%{netfilter_snap}.patch
38 Patch1: %{name}-man.patch
39 # based on http://www.linuximq.net/patchs/iptables-1.4.0-imq.diff
40 Patch2: %{name}-imq.patch
41 # http://www.balabit.com/downloads/files/tproxy/tproxy-iptables-20080204-1915.patch
42 Patch3: %{name}-tproxy.patch
43 Patch4: %{name}-stealth.patch
44 # almost based on iptables-1.4-for-kernel-2.6.20forward-layer7-2.18.patch
45 # http://switch.dl.sourceforge.net/sourceforge/l7-filter/netfilter-layer7-v2.18.tar.gz
46 Patch5: %{name}-layer7.patch
47 Patch6: %{name}-old-1.3.7.patch
48 # based on http://www.svn.barbara.eu.org/ipt_account/attachment/wiki/Software/ipt_account-0.1.21-20070804164729.tar.gz?format=raw
49 Patch7: %{name}-account.patch
50 # http://people.linux-vserver.org/~dhozac/p/m/iptables-1.3.5-owner-xid.patch
51 Patch8: %{name}-1.3.5-owner-xid.patch
52 Patch9: %{name}-batch.patch
53 Patch10: %{name}-headers.patch
54 Patch999: %{name}-llh-dirty-hack.patch
55 URL: http://www.netfilter.org/
56 BuildRequires: autoconf
57 BuildRequires: automake
58 BuildRequires: libtool
60 BuildRequires: sed >= 4.0
61 BuildRequires: sgml-tools
63 BuildRequires: tetex-dvips
64 BuildRequires: tetex-format-latex
65 BuildRequires: tetex-latex
66 BuildRequires: tetex-tex-babel
68 %if %{with dist_kernel} && %{netfilter_snap} != 0
69 BuildRequires: kernel%{_alt_kernel}-headers(netfilter) >= %{netfilter_snap}
70 BuildRequires: kernel%{_alt_kernel}-source
72 #BuildRequires: linux-libc-headers >= %{llh_version}
73 BuildConflicts: kernel-headers < 2.3.0
74 Provides: firewall-userspace-tool
76 Obsoletes: iptables-ipp2p
77 Obsoletes: iptables24-compat
79 BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
82 An extensible NAT system, and an extensible packet filtering system.
83 Replacement of ipchains in 2.4 and higher kernels.
85 %description -l pl.UTF-8
86 Wydajny system translacji adresów (NAT) oraz system filtrowania
87 pakietów. Zamiennik ipchains w jądrach 2.4 i nowszych.
89 %description -l pt_BR.UTF-8
90 Esta é a ferramenta que controla o código de filtragem de pacotes do
91 kernel 2.4, obsoletando ipchains. Com esta ferramenta você pode
92 configurar filtros de pacotes, NAT, mascaramento (masquerading),
93 regras dinâmicas (stateful inspection), etc.
95 %description -l ru.UTF-8
96 iptables управляют кодом фильтрации сетевых пакетов в ядре Linux. Они
97 позволяют вам устанавливать межсетевые экраны (firewalls) и IP
100 %description -l uk.UTF-8
101 iptables управляють кодом фільтрації пакетів мережі в ядрі Linux. Вони
102 дозволяють вам встановлювати міжмережеві екрани (firewalls) та IP
106 Summary: Libraries and headers for developing iptables extensions
107 Summary(pl.UTF-8): Biblioteki i nagłówki do tworzenia rozszerzeń iptables
108 Group: Development/Libraries
109 Obsoletes: iptables24-devel
112 Libraries and headers for developing iptables extensions.
114 %description devel -l pl.UTF-8
115 Biblioteki i pliki nagłówkowe niezbędne do tworzenia rozszerzeń dla
119 Summary: Iptables init (RedHat style)
120 Summary(pl.UTF-8): Iptables init (w stylu RedHata)
122 Group: Networking/Admin
123 Requires(post,preun): /sbin/chkconfig
126 Obsoletes: firewall-init
127 Obsoletes: firewall-init-ipchains
128 Obsoletes: iptables24-init
131 Iptables-init is meant to provide an alternate way than firewall-init
132 to start and stop packet filtering through iptables(8).
134 %description init -l pl.UTF-8
135 Iptables-init ma na celu udostępnienie alternatywnego w stosunku do
136 firewall-init sposobu włączania i wyłączania filtrów IP jądra poprzez
157 chmod 755 extensions/.*-test*
164 --with-kbuild=%{_kernelsrcdir} \
165 --with-ksource=%{_kernelsrcdir} \
172 CFLAGS="%{rpmcflags} -D%{!?debug:N}DEBUG" \
173 KERNEL_DIR="%{_kernelsrcdir}" \
174 LIBDIR="%{_libdir}" \
179 %{__make} -j1 -C iptables-howtos
180 sed -i 's:$(HTML_HOWTOS)::g; s:$(PSUS_HOWTOS)::g' iptables-howtos/Makefile
183 # Make a library, needed for OpenVCP
184 ar rcs libiptables.a iptables.o
185 ar rcs libip6tables.a ip6tables.o
188 rm -rf $RPM_BUILD_ROOT
189 install -d $RPM_BUILD_ROOT{/etc/rc.d/init.d,%{_includedir},%{_libdir},%{_mandir}/man3}
192 DESTDIR=$RPM_BUILD_ROOT \
197 #install iptables-batch $RPM_BUILD_ROOT%{_sbindir}
198 #install ip6tables-batch $RPM_BUILD_ROOT%{_sbindir}
200 install %{SOURCE2} $RPM_BUILD_ROOT/etc/rc.d/init.d/%{name}
201 install %{SOURCE3} $RPM_BUILD_ROOT/etc/rc.d/init.d/%{name6}
204 rm -rf $RPM_BUILD_ROOT
207 /sbin/chkconfig --add %{name}
208 /sbin/chkconfig --add %{name6}
211 if [ "$1" = "0" ]; then
212 /sbin/chkconfig --del %{name}
213 /sbin/chkconfig --del %{name6}
217 %defattr(644,root,root,755)
218 %{?with_doc:%doc iptables-howtos/{NAT,networking-concepts,packet-filtering}-HOWTO*}
219 %attr(755,root,root) %{_bindir}/iptables-xml
220 %attr(755,root,root) %{_sbindir}/iptables
221 #attr(755,root,root) %{_sbindir}/iptables-batch
222 %attr(755,root,root) %{_sbindir}/iptables-multi
223 %attr(755,root,root) %{_sbindir}/iptables-restore
224 %attr(755,root,root) %{_sbindir}/iptables-save
225 %attr(755,root,root) %{_sbindir}/ip6tables
226 #attr(755,root,root) %{_sbindir}/ip6tables-batch
227 %attr(755,root,root) %{_sbindir}/ip6tables-multi
228 %attr(755,root,root) %{_sbindir}/ip6tables-restore
229 %attr(755,root,root) %{_sbindir}/ip6tables-save
230 %dir %{_libdir}/xtables
231 %if %{with dist_kernel}
232 %attr(755,root,root) %{_libdir}/xtables/libip6t_ah.so
233 %attr(755,root,root) %{_libdir}/xtables/libip6t_dst.so
234 %attr(755,root,root) %{_libdir}/xtables/libip6t_eui64.so
235 %attr(755,root,root) %{_libdir}/xtables/libip6t_frag.so
236 %attr(755,root,root) %{_libdir}/xtables/libip6t_hbh.so
237 %attr(755,root,root) %{_libdir}/xtables/libip6t_hl.so
238 %attr(755,root,root) %{_libdir}/xtables/libip6t_HL.so
239 %attr(755,root,root) %{_libdir}/xtables/libip6t_icmp6.so
240 %attr(755,root,root) %{_libdir}/xtables/libip6t_IMQ.so
241 %attr(755,root,root) %{_libdir}/xtables/libip6t_ipv6header.so
242 %attr(755,root,root) %{_libdir}/xtables/libip6t_LOG.so
243 %attr(755,root,root) %{_libdir}/xtables/libip6t_mh.so
244 %attr(755,root,root) %{_libdir}/xtables/libip6t_policy.so
245 %attr(755,root,root) %{_libdir}/xtables/libip6t_REJECT.so
246 %attr(755,root,root) %{_libdir}/xtables/libip6t_ROUTE.so
247 %attr(755,root,root) %{_libdir}/xtables/libip6t_rt.so
248 %attr(755,root,root) %{_libdir}/xtables/libipt_account.so
249 #attr(755,root,root) %{_libdir}/xtables/libipt_ACCOUNT.so
250 %attr(755,root,root) %{_libdir}/xtables/libipt_addrtype.so
251 %attr(755,root,root) %{_libdir}/xtables/libipt_ah.so
252 %attr(755,root,root) %{_libdir}/xtables/libipt_CLUSTERIP.so
253 %attr(755,root,root) %{_libdir}/xtables/libipt_DNAT.so
254 %attr(755,root,root) %{_libdir}/xtables/libipt_ecn.so
255 %attr(755,root,root) %{_libdir}/xtables/libipt_ECN.so
256 %attr(755,root,root) %{_libdir}/xtables/libipt_icmp.so
257 %attr(755,root,root) %{_libdir}/xtables/libipt_IMQ.so
258 %attr(755,root,root) %{_libdir}/xtables/libipt_ipv4options.so
259 %attr(755,root,root) %{_libdir}/xtables/libipt_IPV4OPTSSTRIP.so
260 %attr(755,root,root) %{_libdir}/xtables/libipt_layer7.so
261 %attr(755,root,root) %{_libdir}/xtables/libipt_LOG.so
262 %attr(755,root,root) %{_libdir}/xtables/libipt_MASQUERADE.so
263 %attr(755,root,root) %{_libdir}/xtables/libipt_MIRROR.so
264 %attr(755,root,root) %{_libdir}/xtables/libipt_NETMAP.so
265 %attr(755,root,root) %{_libdir}/xtables/libipt_policy.so
266 %attr(755,root,root) %{_libdir}/xtables/libipt_realm.so
267 %attr(755,root,root) %{_libdir}/xtables/libipt_recent.so
268 %attr(755,root,root) %{_libdir}/xtables/libipt_REDIRECT.so
269 %attr(755,root,root) %{_libdir}/xtables/libipt_REJECT.so
270 %attr(755,root,root) %{_libdir}/xtables/libipt_ROUTE.so
271 %attr(755,root,root) %{_libdir}/xtables/libipt_rpc.so
272 %attr(755,root,root) %{_libdir}/xtables/libipt_SAME.so
273 %attr(755,root,root) %{_libdir}/xtables/libipt_set.so
274 %attr(755,root,root) %{_libdir}/xtables/libipt_SET.so
275 %attr(755,root,root) %{_libdir}/xtables/libipt_SNAT.so
276 %attr(755,root,root) %{_libdir}/xtables/libipt_stealth.so
277 %attr(755,root,root) %{_libdir}/xtables/libipt_ttl.so
278 %attr(755,root,root) %{_libdir}/xtables/libipt_TTL.so
279 %attr(755,root,root) %{_libdir}/xtables/libipt_ULOG.so
280 %attr(755,root,root) %{_libdir}/xtables/libipt_unclean.so
281 %attr(755,root,root) %{_libdir}/xtables/libxt_CLASSIFY.so
282 %attr(755,root,root) %{_libdir}/xtables/libxt_comment.so
283 %attr(755,root,root) %{_libdir}/xtables/libxt_connbytes.so
284 %attr(755,root,root) %{_libdir}/xtables/libxt_connlimit.so
285 %attr(755,root,root) %{_libdir}/xtables/libxt_connmark.so
286 %attr(755,root,root) %{_libdir}/xtables/libxt_CONNMARK.so
287 %attr(755,root,root) %{_libdir}/xtables/libxt_CONNSECMARK.so
288 %attr(755,root,root) %{_libdir}/xtables/libxt_conntrack.so
289 %attr(755,root,root) %{_libdir}/xtables/libxt_dccp.so
290 %attr(755,root,root) %{_libdir}/xtables/libxt_dscp.so
291 %attr(755,root,root) %{_libdir}/xtables/libxt_DSCP.so
292 %attr(755,root,root) %{_libdir}/xtables/libxt_esp.so
293 %attr(755,root,root) %{_libdir}/xtables/libxt_hashlimit.so
294 %attr(755,root,root) %{_libdir}/xtables/libxt_helper.so
295 %attr(755,root,root) %{_libdir}/xtables/libxt_iprange.so
296 %attr(755,root,root) %{_libdir}/xtables/libxt_length.so
297 %attr(755,root,root) %{_libdir}/xtables/libxt_limit.so
298 %attr(755,root,root) %{_libdir}/xtables/libxt_mac.so
299 %attr(755,root,root) %{_libdir}/xtables/libxt_mark.so
300 %attr(755,root,root) %{_libdir}/xtables/libxt_MARK.so
301 %attr(755,root,root) %{_libdir}/xtables/libxt_multiport.so
302 %attr(755,root,root) %{_libdir}/xtables/libxt_NFLOG.so
303 %attr(755,root,root) %{_libdir}/xtables/libxt_NFQUEUE.so
304 %attr(755,root,root) %{_libdir}/xtables/libxt_NOTRACK.so
305 %attr(755,root,root) %{_libdir}/xtables/libxt_owner.so
306 %attr(755,root,root) %{_libdir}/xtables/libxt_physdev.so
307 %attr(755,root,root) %{_libdir}/xtables/libxt_pkttype.so
308 %attr(755,root,root) %{_libdir}/xtables/libxt_quota.so
309 %attr(755,root,root) %{_libdir}/xtables/libxt_RATEEST.so
310 %attr(755,root,root) %{_libdir}/xtables/libxt_rateest.so
311 %attr(755,root,root) %{_libdir}/xtables/libxt_sctp.so
312 %attr(755,root,root) %{_libdir}/xtables/libxt_SECMARK.so
313 %attr(755,root,root) %{_libdir}/xtables/libxt_socket.so
314 %attr(755,root,root) %{_libdir}/xtables/libxt_standard.so
315 %attr(755,root,root) %{_libdir}/xtables/libxt_state.so
316 %attr(755,root,root) %{_libdir}/xtables/libxt_statistic.so
317 %attr(755,root,root) %{_libdir}/xtables/libxt_string.so
318 %attr(755,root,root) %{_libdir}/xtables/libxt_tcpmss.so
319 %attr(755,root,root) %{_libdir}/xtables/libxt_TCPMSS.so
320 %attr(755,root,root) %{_libdir}/xtables/libxt_TCPOPTSTRIP.so
321 %attr(755,root,root) %{_libdir}/xtables/libxt_tcp.so
322 %attr(755,root,root) %{_libdir}/xtables/libxt_time.so
323 %attr(755,root,root) %{_libdir}/xtables/libxt_tos.so
324 %attr(755,root,root) %{_libdir}/xtables/libxt_TOS.so
325 %attr(755,root,root) %{_libdir}/xtables/libxt_TPROXY.so
326 %attr(755,root,root) %{_libdir}/xtables/libxt_TRACE.so
327 %attr(755,root,root) %{_libdir}/xtables/libxt_u32.so
328 %attr(755,root,root) %{_libdir}/xtables/libxt_udp.so
330 %attr(755,root,root) %{_libdir}/xtables/*.so
335 %defattr(644,root,root,755)
336 %{?with_doc:%doc iptables-howtos/netfilter-hacking-HOWTO*}
339 %dir %{_includedir}/libiptc
340 %{_includedir}/libiptc/*.h
344 %defattr(644,root,root,755)
345 %attr(754,root,root) /etc/rc.d/init.d/iptables
346 %attr(754,root,root) /etc/rc.d/init.d/ip6tables