Author: bdubbs Date: 2011-12-06 16:38:54 -0700 (Tue, 06 Dec 2011) New Revision: 9071
Modified: trunk/BOOK/general.ent trunk/BOOK/introduction/welcome/changelog.xml trunk/BOOK/postlfs/security/iptables.xml trunk/bootscripts/blfs/init.d/iptables Log: Updated to iptables-1.4.12 Modified: trunk/BOOK/general.ent =================================================================== --- trunk/BOOK/general.ent 2011-12-06 19:16:56 UTC (rev 9070) +++ trunk/BOOK/general.ent 2011-12-06 23:38:54 UTC (rev 9071) @@ -56,7 +56,7 @@ <!ENTITY lfs-vim-version "7.3"> <!-- End LFS versions --> -<!ENTITY blfs-bootscripts-version "20111205"> +<!ENTITY blfs-bootscripts-version "20111206"> <!ENTITY blfs-bootscripts-download "&downloads-root;/blfs-bootscripts-&blfs-bootscripts-version;.tar.bz2"> <!ENTITY blfs-wiki "http://wiki.&lfs-domainname;/blfs/wiki";> @@ -108,7 +108,7 @@ <!ENTITY openssh-version "5.9p1"> <!ENTITY linux-pam-version "1.1.3"> <!ENTITY shadow-version "4.1.4.3"> -<!ENTITY iptables-version "1.4.7"> +<!ENTITY iptables-version "1.4.12"> <!ENTITY gnupg-version "1.4.11"> <!ENTITY gnupg2-version "2.0.15"> <!ENTITY gpgme-version "1.3.0"> Modified: trunk/BOOK/introduction/welcome/changelog.xml =================================================================== --- trunk/BOOK/introduction/welcome/changelog.xml 2011-12-06 19:16:56 UTC (rev 9070) +++ trunk/BOOK/introduction/welcome/changelog.xml 2011-12-06 23:38:54 UTC (rev 9071) @@ -45,6 +45,9 @@ <para>December 6th, 2011</para> <itemizedlist> <listitem> + <para>[bdubbs] - Updated to iptables-1.4.12.</para> + </listitem> + <listitem> <para>[dj] - Updated to Xorg-7.6-2.</para> </listitem> <listitem> Modified: trunk/BOOK/postlfs/security/iptables.xml =================================================================== --- trunk/BOOK/postlfs/security/iptables.xml 2011-12-06 19:16:56 UTC (rev 9070) +++ trunk/BOOK/postlfs/security/iptables.xml 2011-12-06 23:38:54 UTC (rev 9071) @@ -6,9 +6,9 @@ <!ENTITY iptables-download-http "http://www.netfilter.org/projects/iptables/files/iptables-&iptables-version;.tar.bz2";> <!ENTITY iptables-download-ftp "ftp://ftp.netfilter.org/pub/iptables/iptables-&iptables-version;.tar.bz2";> - <!ENTITY iptables-md5sum "645941dd1f9e0ec1f74c61918d70d52f"> - <!ENTITY iptables-size "456 KB"> - <!ENTITY iptables-buildsize "10.5 MB"> + <!ENTITY iptables-md5sum "d3f145c2c91daecbb4251bc79390b46c"> + <!ENTITY iptables-size "480 KB"> + <!ENTITY iptables-buildsize "15 MB"> <!ENTITY iptables-time "0.2 SBU"> ]> @@ -34,6 +34,8 @@ need to install <application>iptables</application> if you intend on using any form of a firewall.</para> + &lfs70_checked; + <bridgehead renderas="sect3">Package Information</bridgehead> <itemizedlist spacing="compact"> <listitem> @@ -91,14 +93,6 @@ <application>iptables</application> and that the BLFS team has not tested using the raw kernel headers.</para> - <!-- <para>Installation of <application>iptables</application> will fail - if raw kernel headers are found in <filename - class='directory'>/usr/src/linux</filename> either as actual files - or a symlink. As of the Linux 2.6 kernel series, this directory - should no longer exist because appropriate headers were installed - from the <application>Linux-Libc-Headers</application> package during - the base LFS installation.</para> --> - <para>For some non-x86 architectures, the raw kernel headers may be required. In that case, modify the <parameter>KERNEL_DIR=</parameter> parameter to point at the <application>Linux</application> source @@ -108,8 +102,7 @@ <para>Install <application>iptables</application> by running the following commands:</para> -<screen><userinput> -./configure --prefix=/usr \ +<screen><userinput>./configure --prefix=/usr \ --bindir=/sbin \ --sbindir=/sbin \ --libdir=/lib \ @@ -121,7 +114,8 @@ <para>Now, as the <systemitem class="username">root</systemitem> user:</para> -<screen role="root"><userinput>make install</userinput></screen> +<screen role="root"><userinput>make install && +ln -sfv xtables-multi /sbin/iptables-xml</userinput></screen> </sect2> @@ -139,6 +133,9 @@ <para><parameter>--with-pkgconfigdir=/usr/lib/pkgconfig</parameter>: Ensure all the pkgconfig files are in the standard location.</para> + <para><command>ln -sfv xtables-multi /sbin/iptables-xml</command>: Ensure + the symbolic link for <command>iptables-xml</command> is relative.</para> + </sect2> <sect2 role="configuration"> Modified: trunk/bootscripts/blfs/init.d/iptables =================================================================== --- trunk/bootscripts/blfs/init.d/iptables 2011-12-06 19:16:56 UTC (rev 9070) +++ trunk/bootscripts/blfs/init.d/iptables 2011-12-06 23:38:54 UTC (rev 9071) @@ -1,22 +1,45 @@ #!/bin/sh -# Begin $rc_base/init.d/iptables +######################################################################## +# Begin nfs-client +# +# Description : Start statd +# +# Authors : Ken Moffat - [email protected] +# Bruce Dubbs - [email protected] +# +# Version : LFS 7.0 +# +######################################################################## +### BEGIN INIT INFO +# Provides: iptables +# Required-Start: +# Should-Start: +# Required-Stop: $local_fs +# Should-Stop: +# Default-Start: 3 4 5 +# Default-Stop: +# Short-Description: Starts statd +# Description: rpc.statd provides file locking on nfs. +# X-LFS-Provided-By: BLFS / LFS 7.0 +### END INIT INFO + +. /lib/lsb/init-functions + #$LastChangedBy$ #$Date$ -. /etc/sysconfig/rc -. $rc_functions - case "$1" in start) if [ -x /etc/rc.d/rc.iptables ]; then - boot_mesg "Starting iptables..." - loadproc /etc/rc.d/rc.iptables + log_info_msg "Starting iptables..." + /etc/rc.d/rc.iptables + evaluate_retval fi ;; lock) - boot_mesg "Locking system iptables firewall..." + log_info_msg "Locking system iptables firewall..." /sbin/iptables --policy INPUT DROP /sbin/iptables --policy OUTPUT DROP /sbin/iptables --policy FORWARD DROP @@ -28,11 +51,11 @@ /sbin/iptables -t mangle --delete-chain /sbin/iptables -A INPUT -i lo -j ACCEPT /sbin/iptables -A OUTPUT -o lo -j ACCEPT - boot_mesg_flush + evaluate_retval ;; clear) - boot_mesg "Clearing system iptables iptables..." + log_info_msg "Clearing system iptables iptables..." /sbin/iptables --policy INPUT ACCEPT /sbin/iptables --policy OUTPUT ACCEPT /sbin/iptables --policy FORWARD ACCEPT @@ -42,7 +65,7 @@ /sbin/iptables --delete-chain /sbin/iptables -t nat --delete-chain /sbin/iptables -t mangle --delete-chain - boot_mesg_flush + evaluate_retval ;; status) @@ -57,4 +80,4 @@ ;; esac -# End $rc_base/init.d/iptables +# End /etc/init.d/iptables -- http://linuxfromscratch.org/mailman/listinfo/blfs-book FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page
