Bug#1031943: [pkg-netfilter-team] Bug#1031943: Should we do something?

I agree with Arturo, the proposed change should be harmless, but we were not able to reproduce the issue in any of the test performed so I was thinking to lower the severity and apply the patch but don't ask to be included in bookworm.

Bug#1031943: [pkg-netfilter-team] Bug#1031943: ebtables: symlink removal removal code in the postinst does not seem to be working

Hi Adrian and Jeremy, I was trying to reproduce the bug when I've read the reply from Jeremy, but like Jeremy I've not been able to reproduce it in sid (with or without merged usr). The change you propose is perfect (I agree it should be "-h" instead of "-e" for the test to check if the symlink

Bug#1007829: [pkg-netfilter-team] Bug#1007829: arptables - Fails to install: Too many levels of symbolic links

Hi Thomas and thanks for resolving the bug. A few days ago I tried to upload a new version fixing the bug, but it was silently ignored. At the moment I'm very busy and I don't have time to debug the problem by uploading packages to the archive, so your help to solve the bug with a NMU is welcome

Bug#1007829: [pkg-netfilter-team] Bug#1007829: arptables - Fails to install: Too many levels of symbolic links

Thanks for reporting Bastian, I've reproduced the issue, but it seems not related to dpkg, arptables fails to install when iptables isn't installed. I must review and update arptables postinst script where alternatives are used. Alberto

Bug#984817: [pkg-netfilter-team] Bug#984817: Hardcoded program names in arptables-legacy-save and arptables-legacy-restore scripts

Hi Arkadiusz, Thanks for report this issue. The expected behaviour is to use the corresponding arptables-save and arptables-restore binaries to the arptables binary selected with the Debian alternatives system. This package provides arptables-legacy-* while arptables-nft-* are provided by the

Bug#969207: Iptables/netbase dependency in backports makes ebtables uninstallable

On Sat, Aug 29, 2020 at 11:02:38AM +0100, r...@synca.io wrote: > Package: iptables > Version: 1.8.5-3~bpo10+1 > > Installing iptables (1.8.5-3~bpo10+1) pulls in netbase > 6. This version of > netbase has a dependency on ebtables that is not present in backports, and > this therefore makes

Bug#950535: [pkg-netfilter-team] Bug#950535: iptables-restore segfaults on nat table

This bug has been fixed upstream and it will go in 1.8.5 release. Thanks for reporting. Alberto

Bug#876201: ITA: dnsproxy -- proxy for DNS queries

Package: wnpp Severity: normal I intend to adopt the dnsproxy package. The tentative repository for this package in salsa is: https://salsa.debian.org/alberto/pkg-dnsproxy

Bug#960683: ITA: dnsproxy -- proxy for DNS queries

Package: wnpp Severity: normal I intend to adopt the dnsproxy package. The tentative repository fot this package in salsa is: https://salsa.debian.org/alberto/pkg-dnsproxy

Bug#950535: [pkg-netfilter-team] Bug#950535: iptables-restore segfaults on nat table

Control: forwarded -1 https://bugzilla.netfilter.org/show_bug.cgi?id=1407 Control: severity -1 normal Hi Christoph, I'm quoting a email from Jamie Strandboge, who is both the maintainer in Debian and the creator of ufw, and has kindly replied my question about this bug: [quote] ... These rules

Bug#950535: [pkg-netfilter-team] Bug#950535: iptables-restore segfaults on nat table

On Thu, Feb 13, 2020 at 11:05:13AM +0100, Christoph Martin wrote: > > I choose the grave severity because the bug makes a reload of ufw fail > and then the firewall is off ! > Yes, I agree with you that it's a serious situation, but we have to determine if it's a general case of iptables (which

Bug#950535: [pkg-netfilter-team] Bug#950535: iptables-restore segfaults on nat table

Control: tag -1 moreinfo Hi Christoph, Is this ruleset a real one obtained from ufw? I ask because the next one doesn't result in segfault: *nat -F PREROUTING -F POSTROUTING -A PREROUTING -i eth0 -p tcp --dport 22 -j REDIRECT --to-ports 1194 COMMIT I don't understand the rule "-F PREROUTING"

Bug#949518: [pkg-netfilter-team] Bug#949518: (no subject)

El mar., 11 feb. 2020 a las 14:03, Vasanth Srivatsa () escribió: > Is this bug fixed or still open? When can users expect a fix (approximate > time)? I have servers which are non-functional due to this bug. I just > updated them yesterday and they are blocking all incoming connections. > Hi

Bug#949172: iptables: -A INPUT -i lo -j ACCEPT opens all ports

Hi Anzulo, I can't reproduce the output you show using this basic rule. iptables -A INPUT -i lo -j ACCEPT iptables -L -nv Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- lo

Bug#949576: libiptc-dev: Breaks/Replaces missing between libiptc-dev and libip4tc-dev

On Wed, Jan 22, 2020 at 07:15:19PM +0100, Arturo Borrero Gonzalez wrote: > On 1/22/20 7:04 PM, Sven-Haegar Koch wrote: > > On Wed, 22 Jan 2020, Alberto Molina Coballes wrote: > > > >> A new commit which hopefully solves this bug has been uploaded [1], > >> but t

Bug#949576: libiptc-dev: Breaks/Replaces missing between libiptc-dev and libip4tc-dev

Hi Haegar, A new commit which hopefully solves this bug has been uploaded [1], but this bug is affecting only 1.8.4-1 and a new release will not be uploaded inmediatly, but ASAP. Thanks for reporting! Alberto [1]

Bug#947176: [pkg-netfilter-team] Bug#947176: libiptc.pc non-functional

On Mon, Jan 13, 2020 at 10:56:58AM +0100, Arturo Borrero Gonzalez wrote: > On 1/11/20 12:04 PM, Michael Biebl wrote: > > Hi Arturo > > > > On Sun, 22 Dec 2019 15:06:02 +0100 Michael Biebl wrote: > >> > >> 1/ Have a single libiptc-dev package which contains all development files > >> 2/ Have a

Bug#946932: /usr/sbin/ebtables-nft-restore requires /etc/ethertypes

Hi, ebtables 2.0.11-3 has been uploaded to unstable including a Depends on netbase (>= 6.0). The same Depends on has been included in iptables [1] that closes this bug, but it's not yet released. Thanks Michael for reporting this bug and Marco for your willingness to solve it including

Bug#946932: /usr/sbin/ebtables-nft-restore requires /etc/ethertypes

On Thu, Dec 26, 2019 at 03:41:32PM +0100, Marco d'Itri wrote: > OK. One more thing: can I make the names lower case like in the other > numbers files or are they case sensitiv? > AFAIK they're not case sensitive, i.e. these two commands (one lowercase and the other uppercase) work as expected:

Bug#946932: /usr/sbin/ebtables-nft-restore requires /etc/ethertypes

Hi Marco, /etc/ethertypes is obtained directly from upstream (ebtables), no changes are made to its packaging in Debian and I suposse that the same file has not been modified for years, because ebtables is not under active development. It's fine to remove historical entries, especially including

Bug#946932: /usr/sbin/ebtables-nft-restore requires /etc/ethertypes

Hi, /etc/ethertypes has been removed from ebtables and 2.0.11-2 has been uploaded to unstable, please Marco include /etc/ethertypes in netbase with Replaces/Breaks ebtables (<< 2.0.11-2) and comment us when a new release is available in order to include Depends in both ebtables and iptables.

Bug#946932: /usr/sbin/ebtables-nft-restore requires /etc/ethertypes

On Wed, Dec 18, 2019 at 06:27:42PM +0100, Michael Biebl wrote: > > Alberto, Arturo, if you agree with moving /etc/ethertypes to netbase (I > assume this file is rather static and doesn't need constant updates), I > would propose the following: > > - ebtables drops the file in version X. You poke

Bug#946932: /usr/sbin/ebtables-nft-restore requires /etc/ethertypes

On Wed, Dec 18, 2019 at 12:17:48PM +0100, Arturo Borrero Gonzalez wrote: > > @Alberto, > > What do you think about this issue? Could you please handle it? > > regards. Hi, I think that Michael is right, /etc/ethertypes must be moved into another package, but the question is what's the right

Bug#929976: /usr/sbin/xtables-nft-multi: ebtables-nft-restore errors with -o option on chains which ebtables-legacy-restore accepts

Control: fixed 929976 1.8.4-1 The bug was fixed upstream [1] and included in the 1.8.4 release, so it's solved in debian since iptables 1.8.4-1 Thanks for reporting! Alberto [1] https://git.netfilter.org/iptables/commit/iptables/xtables-eb.c?id=e1ccd979e6849748578fad76475c688bdd16df0d

Bug#874375: ebtables: 32 bit binary cannot communicate with 64 bit kernel on arm platform

Hi Wang and Tomáš, When I adopted ebtables in 2018 and I was initially focused on putting the package in shape, but this bug has remained unattended for too many time. Now, installing i386 ebtables userspace tool on an amd64 kernel I can't reproduce this bug. I've tested both ebtables-legacy

Bug#927299: unblock: arptables/0.0.4+snapshot20181021-4

ot20181021/debian/changelog 2019-01-11 17:02:26.0 + +++ arptables-0.0.4+snapshot20181021/debian/changelog 2019-04-17 15:24:53.0 + @@ -1,3 +1,14 @@ +arptables (0.0.4+snapshot20181021-4) unstable; urgency=medium + + [ Arturo Borrero Gonzalez ] + * [88703e1] src:arpta

Bug#927298: unblock: ebtables/2.0.10.4+snapshot20181205-3

] src:ebtables: add salsa CI integration + + [ Alberto Molina Coballes ] + * [5dbd22d] Remove /sbin symlinks on not usr-merged systems (Closes: #926728) + + -- Alberto Molina Coballes Mon, 15 Apr 2019 18:23:43 + + ebtables (2.0.10.4+snapshot20181205-2) unstable; urgency=medium [ Alberto

Bug#919583: [pkg-netfilter-team] Bug#919583: ebtables: broken symlinks: /sbin/ebtables{, -restore, -save} -> /usr/sbin/ebtables{, -restore, -save}

El dom., 27 ene. 2019 a las 10:03, Laurent Bigonville () escribió: > > An other solution is to remove this version check and just remove > unconditionally these symlinks in /sbin as they are not created by any other > packages (including iptables) > Hi Laurent, I can also confirm this bug and

Bug#919013: RFS: arptables/0.0.4+snapshot20181021-3 - ARP table administration

r required * [85e682e] d/patches: rename arptables-save and arptables-restore (Closes: #918900) * [a419984] d/arptables.manpages: rename arptables-* man pages * [b8fc52f] d/patch: Add CPPFLAGS Regards, Alberto Molina Coballes

Bug#918497: RFS: arptables/0.0.4+snapshot20181021-1 - ARP table administration

Thank you Adam and Arturo for reviewing the package and for your advices. A new packet has been uploaded to mentors [1] with this bug corrected (piuparts tests are OK) and #918715 marked to be closed in the corresponding commit. Is it necessary to open a new RFS bug? Thanks, Alberto [1]

Bug#848948: [pkg-netfilter-team] Bug#848948: ebtables FTCBFS: uses build architecture compiler

El dom., 6 ene. 2019 a las 22:18, Niels Thykier () escribió: > > I see you recently uploaded a version of ebtables. Could I convince you > to do another upload with this cross-building patch for buster (from > #848948)? > Hi Niels, Sure! This patch has not been previously applied because one of

Bug#918497: RFS: arptables/0.0.4+snapshot20181021-1 - ARP table administration

d/patches: Adapt the default patch to the latest upstream version * [3076713] arptables: introduce /sbin compatibility symlinks * [4108b0d] arptables: introduce alternatives for /usr/sbin/arptables (Closes: #916106) * [f7b48be] d/control: bump std-version to 4.3.0 Regards, Albe

Bug#918046: RFS: ebtables/2.0.10.4+snapshot20181205-1 - Ethernet bridge frame table administration

directory Regards, Alberto Molina Coballes

Bug#898278: RFS: arptables/0.0.4-2 - ARP table administration

with dget using this command: dget -x https://mentors.debian.net/debian/pool/main/a/arptables/arptables_0.0.4-2.dsc Changes since the last upload: * [1a26c32] d/patch: Add dpkg-buildflags * [5869fd6] d/patches: cleanup sysvinit script (Closes: #897976) Regards, Alberto Molina Coballes

Bug#898275: RFS: ebtables/2.0.10.4-5 - Ethernet bridge frame table administration

* [2663aba] d/patches: Modify makefile allowing parallel build (Closes: #897592) * [e30fe91] manpages: Add ebtables-save.8 and ebtables-restore.8 Regards, Alberto Molina Coballes

Bug#897976: arptables bash script installed in /

Hi Cesare, Thanks for report this bug! I've recently adopted this package and some important modifications have been made and it seems some mistakes also :) The bug reported is related to the init script, indeed it has been recently deleted in upstream [1], so that commit will be cherry picked

Bug#897592: ebtables: randomly FTBFS - makefile is not parallel safe

Thanks James, these kinds of errors are often difficult to deal with. Do you think that it should be enough disabling parallel build in dh? Tested on amd64 seems to work properly. Alberto

Bug#897038: RFS: ebtables/2.0.10.4-4 [ITA] - Ethernet bridge frame table administration

[6d94fde] d/control: Updating debhelper to 11 * [ea71db8] d/compat: Updating to 11 * [a80dc56] d/copyright: Updating according to DEP-5 [ Arturo Borrero Gonzalez ] * [1b1ac15] d/rules: use debhelper rather than cdbs * [dd20bc3] d/patches: add compilation_warning.patch [ Alberto Mol

Bug#894839: RFS: arptables/0.0.4-1 [ITA]

so any comment will be appreciated. * Package name: arptables Version : 0.0.4-1 Upstream Author : Alberto Molina Coballes <alb.mol...@gmail.com> * URL : http://www.netfilter.org * License : GPL-2 Section : net It builds those binary packages:

Bug#891758: ITA: arptables -- ARP table administration

I'm adopting arptables. I have spoken to Arturo Borrero González , arptables will be integrated into the pkg-netfilter packaging team [0] and he's going to sponsor it. Regards, Alberto [0] https://wiki.debian.org/Teams/pkg-netfilter

Bug#858565: [PKG-Openstack-devel] Bug#858565: neutron-l3-agent: IPv6 Stateless Address Auto Configuration (SLAAC) mode fails when radvd is not installed on the host

2017-03-24 1:26 GMT+01:00 Thomas Goirand : > > Hi, > > Unfortunately, not everyone wants to use IPv6. For those who don't, > imposing radvd as a hard dependency is a bad idea. IMO, it's best to let > every user choose what it wants to do to match its use case, and > manually

Bug#858565: neutron-l3-agent: IPv6 Stateless Address Auto Configuration (SLAAC) mode fails when radvd is not installed on the host

Package: neutron-l3-agent Version: 2:9.1.1-1 Severity: normal Dear Maintainer, When a IPv6 subnet is created in SLAAC mode, neutron-l3-agent fails if radvd is not installed: 2017-03-23 16:50:19.157 8667 ERROR neutron.agent.linux.utils [-] Exit code: 99; Stdin: ; Stdout: ; Stderr:

Bug#809575: [PKG-Openstack-devel] Bug#809575: horizon: FTBFS: ImportError: cannot import name importlib

django.utils.importlib has been removed in django 1.9 [1] and this is indeed the django release available in both stretch or sid: python-django: Installed: 1.9-2 Candidate: 1.9-2 Version table: *** 1.9-2 500 500 http://http.debian.net/debian sid/main amd64 Packages 100

Bug#801579: nova-compute: Consider include rsync as a depency

Package: nova-compute Version: 2014.1.3-11 Severity: normal Dear Maintainer, When compute nodes are not using shared storage in OpenStack Icehouse, nova resize fails with the message "OSError: [Errno 2] No such file or directory": Traceback (most recent call last): File

Bug#774816: [PKG-Openstack-devel] Bug#774816: (no subject)

Does this mean that special characters are not allowed in RabbitMQ passwords? This sounds really strange to me and it doesn't correspond with my experience because I'm using them since OpenStack Essex without problems. Whatever the case, the bug was reported because openstack-pkg-tools is

Bug#775133: neutron-l3-agent: conntrack package needed

Package: neutron-l3-agent Version: 2014.1.3-8 Severity: normal Dear Maintainer, After the last upgrade, nova-l3-agent shows these log messages when a floating IP is disassociated: ERROR neutron.agent.linux.interface [-] Failed deleting ingress connection state of floatingip 172.22.201.29

Bug#774816: nova-common: inappropriate rabbit_password modification during upgrade

Package: nova-common Version: 2014.1.3-7.1 Severity: important Dear Maintainer, After a non-interactive upgrade with the commands: export DEBIAN_FRONTEND=noninteractive yes '' | apt-get -y -o Dpkg::Options::=--force-confdef -o Dpkg::Options::=--force-confold dist-upgrade rabbitmq server

Bug#769223: python-cinder: delete volume failed due to unicode problems

Package: python-cinder Version: 2014.1.3-5 Severity: normal Dear Maintainer, An issue was found trying to delete a volume and it remains in Error Deleting state. The relevant part of cinder-volume log file is: Traceback (most recent call last): File

Bug#751714: neutron-plugin-openvswitch-agent: neutron openvswitch agent fails to start (it fails to create OVS patch port)

Package: neutron-plugin-openvswitch-agent Version: 2014.1.1-1 Severity: important Dear Maintainer, After installing OpenStack Icehouse on a fresh and updated jessie box, OVS agent fails to start with the log message (/var/log/neutron/ovs-agent.log): 2014-06-15 19:10:16.742 27348 ERROR

Bug#703242: Same issue found in 2012.1.1-14 on wheezy

Hi, We are facing the same issue since upgrade to 2012.1.1-14 on wheezy: root@jupiter:/var/log/nova# apt-cache policy nova-console nova-console: Instalados: 2012.1.1-14 Candidato: 2012.1.1-14 Tabla de versión: *** 2012.1.1-14 0 500 http://papion/debian/ wheezy/main amd64 Packages

Bug#695791: Patch

Please apply this patch: --- compute.py.orig 2012-12-13 11:04:31.399052893 +0100 +++ compute.py 2012-12-13 11:04:23.627269612 +0100 @@ -113,7 +113,7 @@ filters.CommandFilter(/bin/dd, root), # nova/virt/xenapi/volume_utils.py: 'iscsiadm', '-m', ... -

Bug#695791: nova-compute: wrong path to iscsiadm in a rootwrap filter

Package: nova-compute Version: 2012.1.1-10 Severity: important Dear Maintainer, Current path to iscsiadm in /usr/share/pyshared/nova/rootwrap/compute.py is wrong at line 116: filters.CommandFilter(/sbin/iscsiadm, root), While correct path must be filters.CommandFilter(/usr/bin/iscsiadm,

Bug#689181: Related to https://bugs.launchpad.net/keystone/+bug/997700

Related to https://bugs.launchpad.net/keystone/+bug/997700 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#689181: python-keystone: LDAP attributes modifications ignored

Package: python-keystone Version: 2012.1.1-6 Severity: normal Dear Maintainer, In a keystone configuration with a LDAP backend, it is possible to change default attributes types for users, tenants or roles at /etc/keystone/keystone.conf, but at this moment it doesn't have any effect because