commit iptables for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2020-11-06 23:43:29

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new.11331 (New)


Package is "iptables"

Fri Nov  6 23:43:29 2020 rev:73 rq:845267 version:1.8.6

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2020-06-07 
21:34:02.592636981 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new.11331/iptables.changes 
2020-11-06 23:43:35.907436719 +0100
@@ -1,0 +2,11 @@
+Sun Nov  1 12:31:34 UTC 2020 - Jan Engelhardt 
+
+- Update to release 1.8.6
+  * iptables-nft had pointlessly added "bitwise" expressions to
+each IP address match, needlessly slowing down run-time
+performance (by 50% in worst cases).
+  * iptables-nft-restore: Support basechain policy value of "-"
+(indicating to not change the chain's policy).
+  * nft-translte: Fix translation of ICMP type "any" match.
+
+---

Old:

  iptables-1.8.5.tar.bz2
  iptables-1.8.5.tar.bz2.sig

New:

  iptables-1.8.6.tar.bz2
  iptables-1.8.6.tar.bz2.sig



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.ikbyZW/_old  2020-11-06 23:43:37.107434413 +0100
+++ /var/tmp/diff_new_pack.ikbyZW/_new  2020-11-06 23:43:37.111434405 +0100
@@ -17,7 +17,7 @@
 
 
 Name:   iptables
-Version:1.8.5
+Version:1.8.6
 Release:0
 Summary:IP packet filter administration utilities
 License:GPL-2.0-only AND Artistic-2.0

++ iptables-1.8.5.tar.bz2 -> iptables-1.8.6.tar.bz2 ++
 2922 lines of diff (skipped)

++ iptables-batch-lock.patch ++
--- /var/tmp/diff_new_pack.ikbyZW/_old  2020-11-06 23:43:37.66747 +0100
+++ /var/tmp/diff_new_pack.ikbyZW/_new  2020-11-06 23:43:37.66747 +0100
@@ -10,10 +10,10 @@
  iptables/xshared.c|8 +++-
  2 files changed, 28 insertions(+), 1 deletion(-)
 
-Index: iptables-1.6.2/iptables/iptables-batch.c
+Index: iptables-1.8.6/iptables/iptables-batch.c
 ===
 iptables-1.6.2.orig/iptables/iptables-batch.c
-+++ iptables-1.6.2/iptables/iptables-batch.c
+--- iptables-1.8.6.orig/iptables/iptables-batch.c
 iptables-1.8.6/iptables/iptables-batch.c
 @@ -403,6 +403,27 @@ main(int argc, char *argv[])
tables[3].name = "raw";
tables[3].handle = NULL;
@@ -42,16 +42,17 @@
  
while((r = getline(, , fp)) != -1)
{
-Index: iptables-1.6.2/iptables/xshared.c
+Index: iptables-1.8.6/iptables/xshared.c
 ===
 iptables-1.6.2.orig/iptables/xshared.c
-+++ iptables-1.6.2/iptables/xshared.c
-@@ -248,9 +248,13 @@ void xs_init_match(struct xtables_match
+--- iptables-1.8.6.orig/iptables/xshared.c
 iptables-1.8.6/iptables/xshared.c
+@@ -248,10 +248,14 @@ void xs_init_match(struct xtables_match
  
  static int xtables_lock(int wait, struct timeval *wait_interval)
  {
 +  static bool already_locked = false;
struct timeval time_left, wait_time;
+   const char *lock_file;
int fd, i = 0;
  
 +  if (already_locked)
@@ -60,7 +61,7 @@
time_left.tv_sec = wait;
time_left.tv_usec = 0;
  
-@@ -262,8 +266,10 @@ static int xtables_lock(int wait, struct
+@@ -267,8 +271,10 @@ static int xtables_lock(int wait, struct
}
  
if (wait == -1) {
@@ -70,5 +71,5 @@
return fd;
 +  }
  
-   fprintf(stderr, "Can't lock %s: %s\n", XT_LOCK_NAME,
+   fprintf(stderr, "Can't lock %s: %s\n", lock_file,
strerror(errno));

++ iptables-batch.patch ++
--- /var/tmp/diff_new_pack.ikbyZW/_old  2020-11-06 23:43:37.679433314 +0100
+++ /var/tmp/diff_new_pack.ikbyZW/_new  2020-11-06 23:43:37.679433314 +0100
@@ -3,14 +3,14 @@
  iptables/iptables-batch.c |  468 
++
  2 files changed, 477 insertions(+)
 
-Index: iptables-1.8.5/iptables/Makefile.am
+Index: iptables-1.8.6/iptables/Makefile.am
 ===
 iptables-1.8.5.orig/iptables/Makefile.am
-+++ iptables-1.8.5/iptables/Makefile.am
-@@ -111,3 +111,12 @@ install-exec-hook:
-   for i in ${v6_sbin_links}; do ${LN_S} -f xtables-legacy-multi 
"${DESTDIR}${sbindir}/$$i"; done;
-   for i in ${x_sbin_links}; do ${LN_S} -f xtables-nft-multi 
"${DESTDIR}${sbindir}/$$i"; done;
-   ${LN_S} -f iptables-apply "${DESTDIR}${sbindir}/ip6tables-apply"
+--- iptables-1.8.6.orig/iptables/Makefile.am
 iptables-1.8.6/iptables/Makefile.am
+@@ -138,3 

commit iptables for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2020-06-07 21:33:55

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new.3606 (New)


Package is "iptables"

Sun Jun  7 21:33:55 2020 rev:72 rq:811552 version:1.8.5

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2019-12-23 
22:35:49.401778131 +0100
+++ /work/SRC/openSUSE:Factory/.iptables.new.3606/iptables.changes  
2020-06-07 21:34:02.592636981 +0200
@@ -1,0 +2,8 @@
+Wed Jun  3 13:21:57 UTC 2020 - Jan Engelhardt 
+
+- Update to release 1.8.5
+  * IDLETIMER: Add alarm timer option
+  * nft: CT: add translation for NOTRACK   
  
+- Drop iptables-apply-mktemp-fix.patch (seemingly applied)
+
+---

Old:

  iptables-1.8.4.tar.bz2
  iptables-1.8.4.tar.bz2.sig
  iptables-apply-mktemp-fix.patch

New:

  iptables-1.8.5.tar.bz2
  iptables-1.8.5.tar.bz2.sig



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.fv5vLo/_old  2020-06-07 21:34:03.436639657 +0200
+++ /var/tmp/diff_new_pack.fv5vLo/_new  2020-06-07 21:34:03.440639670 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package iptables
 #
-# Copyright (c) 2019 SUSE LLC
+# Copyright (c) 2020 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:   iptables
-Version:1.8.4
+Version:1.8.5
 Release:0
 Summary:IP packet filter administration utilities
 License:GPL-2.0-only AND Artistic-2.0
@@ -27,12 +27,10 @@
 Source: 
https://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
 Source2:
https://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
 Source3:%name.keyring
-Patch3: iptables-batch.patch
-Patch4: iptables-apply-mktemp-fix.patch
-Patch5: iptables-batch-lock.patch
-Patch6: iptables-1.8.2-dont_read_garbage.patch
+Patch1: iptables-batch.patch
+Patch2: iptables-batch-lock.patch
+Patch3: iptables-1.8.2-dont_read_garbage.patch
 
-BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  bison
 BuildRequires:  fdupes
 BuildRequires:  flex >= 2.5.33
@@ -42,7 +40,7 @@
 BuildRequires:  pkgconfig(libmnl) >= 1.0
 BuildRequires:  pkgconfig(libnetfilter_conntrack) >= 1.0.4
 BuildRequires:  pkgconfig(libnfnetlink) >= 1.0.0
-BuildRequires:  pkgconfig(libnftnl) >= 1.1.5
+BuildRequires:  pkgconfig(libnftnl) >= 1.1.6
 Requires:   netcfg >= 11.6
 Requires:   xtables-plugins = %version-%release
 Requires(post): update-alternatives
@@ -177,7 +175,6 @@
 rm -f "$b/%_libdir/"libiptc.so*
 # iptables-apply is not installed by upstream Makefile
 install -m0755 iptables/iptables-apply "$b/%_sbindir/"
-install -m0644 iptables/iptables-apply.8 "$b/%_mandir/man8/"
 rm -f "$b/%_libdir"/*.la
 rm -f "$b/%_sysconfdir/ethertypes" # -> netcfg
 
@@ -242,6 +239,7 @@
 %_sbindir/iptables-legacy*
 %_sbindir/iptables-nft*
 %_sbindir/iptables-*translate*
+%_sbindir/ip6tables-apply
 %_sbindir/ip6tables-legacy*
 %_sbindir/ip6tables-nft*
 %_sbindir/ip6tables-*translate*

++ iptables-1.8.4.tar.bz2 -> iptables-1.8.5.tar.bz2 ++
 10401 lines of diff (skipped)

++ iptables-batch.patch ++
--- /var/tmp/diff_new_pack.fv5vLo/_old  2020-06-07 21:34:04.136641876 +0200
+++ /var/tmp/diff_new_pack.fv5vLo/_new  2020-06-07 21:34:04.136641876 +0200
@@ -3,14 +3,14 @@
  iptables/iptables-batch.c |  468 
++
  2 files changed, 477 insertions(+)
 
-Index: iptables-1.8.0/iptables/Makefile.am
+Index: iptables-1.8.5/iptables/Makefile.am
 ===
 iptables-1.8.0.orig/iptables/Makefile.am
-+++ iptables-1.8.0/iptables/Makefile.am
-@@ -98,3 +98,12 @@ install-exec-hook:
-   for i in ${v4_sbin_links}; do ${LN_S} -f xtables-legacy-multi 
"${DESTDIR}${sbindir}/$$i"; done;
+--- iptables-1.8.5.orig/iptables/Makefile.am
 iptables-1.8.5/iptables/Makefile.am
+@@ -111,3 +111,12 @@ install-exec-hook:
for i in ${v6_sbin_links}; do ${LN_S} -f xtables-legacy-multi 
"${DESTDIR}${sbindir}/$$i"; done;
for i in ${x_sbin_links}; do ${LN_S} -f xtables-nft-multi 
"${DESTDIR}${sbindir}/$$i"; done;
+   ${LN_S} -f iptables-apply "${DESTDIR}${sbindir}/ip6tables-apply"
 +
 +iptables_legacy_batch_SOURCES  = iptables-batch.c iptables.c xshared.c
 +iptables_legacy_batch_LDFLAGS  = ${xtables_legacy_multi_LDFLAGS}
@@ -20,10 +20,10 @@
 

commit iptables for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2019-12-23 22:34:36

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new.6675 (New)


Package is "iptables"

Mon Dec 23 22:34:36 2019 rev:71 rq:755370 version:1.8.4

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2019-10-07 
13:40:58.568350975 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new.6675/iptables.changes  
2019-12-23 22:35:49.401778131 +0100
@@ -1,0 +2,11 @@
+Mon Dec  2 20:01:25 UTC 2019 - Jan Engelhardt 
+
+- Update to release 1.8.4
+  * Fix for wrong counter format in `ebtables-nft-save -c` output.
+  * Print typical iptables-save comments in arptables- and
+ebtables-save, too.
+  * xt_owner: add --suppl-groups option
+  * Remove support for /etc/xtables.conf
+  * Restore support for "-4" and "-6" options in rule lines.
+
+---

Old:

  iptables-1.8.3.tar.bz2
  iptables-1.8.3.tar.bz2.sig

New:

  iptables-1.8.4.tar.bz2
  iptables-1.8.4.tar.bz2.sig



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.7MeK5t/_old  2019-12-23 22:35:52.773779594 +0100
+++ /var/tmp/diff_new_pack.7MeK5t/_new  2019-12-23 22:35:52.801779605 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package iptables
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:   iptables
-Version:1.8.3
+Version:1.8.4
 Release:0
 Summary:IP packet filter administration utilities
 License:GPL-2.0-only AND Artistic-2.0
@@ -33,7 +33,6 @@
 Patch6: iptables-1.8.2-dont_read_garbage.patch
 
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
-#git#BuildRequires:  autoconf, automake >= 1.10
 BuildRequires:  bison
 BuildRequires:  fdupes
 BuildRequires:  flex >= 2.5.33
@@ -43,7 +42,7 @@
 BuildRequires:  pkgconfig(libmnl) >= 1.0
 BuildRequires:  pkgconfig(libnetfilter_conntrack) >= 1.0.4
 BuildRequires:  pkgconfig(libnfnetlink) >= 1.0.0
-BuildRequires:  pkgconfig(libnftnl) >= 1.1.3
+BuildRequires:  pkgconfig(libnftnl) >= 1.1.5
 Requires:   netcfg >= 11.6
 Requires:   xtables-plugins = %version-%release
 Requires(post): update-alternatives

++ iptables-1.8.3.tar.bz2 -> iptables-1.8.4.tar.bz2 ++
 11702 lines of diff (skipped)

commit iptables for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2019-10-07 13:40:53

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new.2352 (New)


Package is "iptables"

Mon Oct  7 13:40:53 2019 rev:70 rq:734142 version:1.8.3

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2019-09-20 
14:47:18.986952837 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new.2352/iptables.changes  
2019-10-07 13:40:58.568350975 +0200
@@ -1,0 +2,10 @@
+Mon Sep 30 13:21:38 UTC 2019 - Kristyna Streitova 
+
+- Add Conflicts with iptables-nft = 1.6.2 as during the update to
+  iptables 1.8 ip6tables-restore-translate, ip6tables-translate,
+  iptables-restore-translate and iptables-translate were moved from
+  iptables-nft subpackage (now iptables-backend-nft) to the main
+  package. So we need to add a conflict here otherwise we hit file
+  conflicts error during the update.
+
+---



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.joSJuq/_old  2019-10-07 13:40:59.448348542 +0200
+++ /var/tmp/diff_new_pack.joSJuq/_new  2019-10-07 13:40:59.452348531 +0200
@@ -48,6 +48,11 @@
 Requires:   xtables-plugins = %version-%release
 Requires(post): update-alternatives
 Requires(postun): update-alternatives
+# During the update to iptables 1.8, ip6tables-restore-translate, 
ip6tables-translate,
+# iptables-restore-translate and iptables-translate were moved from 
iptables-nft subpackage
+# (now iptables-backend-nft) to the main package so we need to add a conflict 
here otherwise
+# we hit file conflicts error during the update
+Conflicts:  iptables-nft = 1.6.2
 
 %description
 iptables is used to set up, maintain, and inspect the rule tables of

commit iptables for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2019-09-20 14:47:09

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new.7948 (New)


Package is "iptables"

Fri Sep 20 14:47:09 2019 rev:69 rq:729482 version:1.8.3

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2019-06-12 
12:58:33.589337259 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new.7948/iptables.changes  
2019-09-20 14:47:18.986952837 +0200
@@ -1,0 +2,6 @@
+Fri Sep  6 10:19:25 UTC 2019 - Kristyna Streitova 
+
+- add missing Provides/Obsoletes for the renamed package
+  iptables-backend-nft (was iptables-nft)
+
+---



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.KngnFW/_old  2019-09-20 14:47:21.474952342 +0200
+++ /var/tmp/diff_new_pack.KngnFW/_new  2019-09-20 14:47:21.478952341 +0200
@@ -59,6 +59,8 @@
 Requires:   iptables >= 1.8.0
 Requires(post): update-alternatives
 Requires(postun): update-alternatives
+Provides:   iptables-nft = %{version}-%{release}
+Obsoletes:  iptables-nft < %{version}-%{release}
 
 %description backend-nft
 Installation of this package adds higher priority alternatives (cf.

commit iptables for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2019-06-12 12:58:31

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new.4811 (New)


Package is "iptables"

Wed Jun 12 12:58:31 2019 rev:68 rq:705874 version:1.8.3

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2019-04-08 
10:33:03.123222724 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new.4811/iptables.changes  
2019-06-12 12:58:33.589337259 +0200
@@ -1,0 +2,17 @@
+Tue May 28 08:37:39 UTC 2019 - Jan Engelhardt 
+
+- Update to new upstream release 1.8.3
+  * ebtables: Fix rule listing with counters
+  * ebtables-nft: Support user-defined chain policies
+- Remove 0001-include-extend-the-headers-conflict-workaround-to-in.patch
+  0001-include-fix-build-with-kernel-headers-before-4.2.patch
+  (upstreamed)
+
+---
+Wed May 22 16:15:28 UTC 2019 - Jan Engelhardt 
+
+- Add 0001-include-fix-build-with-kernel-headers-before-4.2.patch,
+  0001-include-extend-the-headers-conflict-workaround-to-in.patch
+  to fix build with older linux-glibc-devel. [boo#1132821]
+
+---

Old:

  iptables-1.8.2.tar.bz2
  iptables-1.8.2.tar.bz2.sig

New:

  iptables-1.8.3.tar.bz2
  iptables-1.8.3.tar.bz2.sig



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.pP3SgW/_old  2019-06-12 12:58:34.113337143 +0200
+++ /var/tmp/diff_new_pack.pP3SgW/_new  2019-06-12 12:58:34.121337141 +0200
@@ -17,7 +17,7 @@
 
 
 Name:   iptables
-Version:1.8.2
+Version:1.8.3
 Release:0
 Summary:IP packet filter administration utilities
 License:GPL-2.0-only AND Artistic-2.0
@@ -43,7 +43,7 @@
 BuildRequires:  pkgconfig(libmnl) >= 1.0
 BuildRequires:  pkgconfig(libnetfilter_conntrack) >= 1.0.4
 BuildRequires:  pkgconfig(libnfnetlink) >= 1.0.0
-BuildRequires:  pkgconfig(libnftnl) >= 1.1.1
+BuildRequires:  pkgconfig(libnftnl) >= 1.1.3
 Requires:   netcfg >= 11.6
 Requires:   xtables-plugins = %version-%release
 Requires(post): update-alternatives
@@ -101,18 +101,29 @@
 
 ip_queue/libipq is obsoleted by nf_queue/libnetfilter_queue!
 
-%package -n libiptc0
-Summary:Library for the ip_tables low-level ruleset generation and 
parsing
+%package -n libip4tc2
+Summary:Library for the ip_tables low-level ruleset generation and 
parsing (IPv4)
 Group:  System/Libraries
 
-%description -n libiptc0
+%description -n libip4tc2
 libiptc ("iptables cache") is used to retrieve from the kernel, parse,
 construct, and load rulesets into the kernel.
+This package contains the iptc IPv4 API.
+
+%package -n libip6tc2
+Summary:Library for the ip_tables low-level ruleset generation and 
parsing (IPv6)
+Group:  System/Libraries
+
+%description -n libip6tc2
+libiptc ("iptables cache") is used to retrieve from the kernel, parse,
+construct, and load rulesets into the kernel.
+This package contains the iptc IPv6 API.
 
 %package -n libiptc-devel
 Summary:Development files for libiptc, a packet filter ruleset library
 Group:  Development/Libraries/C and C++
-Requires:   libiptc0 = %version
+Requires:   libip4tc2 = %version
+Requires:   libip6tc2 = %version
 
 %description -n libiptc-devel
 libiptc ("iptables cache") is used to retrieve from the kernel, parse,
@@ -156,6 +167,8 @@
 %install
 %make_install
 b="%buildroot"
+# no contents and is unused; proposed for removal upstream
+rm -f "$b/%_libdir/"libiptc.so*
 # iptables-apply is not installed by upstream Makefile
 install -m0755 iptables/iptables-apply "$b/%_sbindir/"
 install -m0644 iptables/iptables-apply.8 "$b/%_mandir/man8/"
@@ -209,8 +222,10 @@
 
 %post   -n libipq0 -p /sbin/ldconfig
 %postun -n libipq0 -p /sbin/ldconfig
-%post   -n libiptc0 -p /sbin/ldconfig
-%postun -n libiptc0 -p /sbin/ldconfig
+%post   -n libip4tc2 -p /sbin/ldconfig
+%postun -n libip4tc2 -p /sbin/ldconfig
+%post   -n libip6tc2 -p /sbin/ldconfig
+%postun -n libip6tc2 -p /sbin/ldconfig
 %post   -n libxtables12 -p /sbin/ldconfig
 %postun -n libxtables12 -p /sbin/ldconfig
 
@@ -286,10 +301,11 @@
 %_libdir/libipq.so
 %_libdir/pkgconfig/libipq.pc
 
-%files -n libiptc0
-%_libdir/libiptc.so.0*
-%_libdir/libip4tc.so.0*
-%_libdir/libip6tc.so.0*
+%files -n libip4tc2
+%_libdir/libip4tc.so.2*
+
+%files -n libip6tc2
+%_libdir/libip6tc.so.2*
 
 %files -n libiptc-devel
 %dir %_includedir/%name/

++ iptables-1.8.2.tar.bz2 -> iptables-1.8.3.tar.bz2 ++
 12123 lines of diff (skipped)

commit iptables for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2019-04-08 10:33:00

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new.3908 (New)


Package is "iptables"

Mon Apr  8 10:33:00 2019 rev:67 rq:691534 version:1.8.2

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2018-11-18 
23:21:57.490225944 +0100
+++ /work/SRC/openSUSE:Factory/.iptables.new.3908/iptables.changes  
2019-04-08 10:33:03.123222724 +0200
@@ -1,0 +2,8 @@
+Thu Apr  4 11:44:31 UTC 2019 - Kristýna Streitová 
+
+- Add iptables-1.8.2-dont_read_garbage.patch that fixes a situation
+  where 'iptables -L' reads garbage from the struct as the kernel
+  never filled it in the bugged case. This can lead to issues like
+  mapping a few TiB of memory [bsc#1106751].
+
+---

New:

  iptables-1.8.2-dont_read_garbage.patch



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.ww4iGI/_old  2019-04-08 10:33:04.135221437 +0200
+++ /var/tmp/diff_new_pack.ww4iGI/_new  2019-04-08 10:33:04.139221432 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package iptables
 #
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -22,14 +22,15 @@
 Summary:IP packet filter administration utilities
 License:GPL-2.0-only AND Artistic-2.0
 Group:  Productivity/Networking/Security
-Url:http://netfilter.org/projects/iptables/
+URL:https://netfilter.org/projects/iptables/
 #Git-Clone: git://git.netfilter.org/iptables
-Source: 
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
-Source2:
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
+Source: 
https://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
+Source2:
https://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
 Source3:%name.keyring
 Patch3: iptables-batch.patch
 Patch4: iptables-apply-mktemp-fix.patch
 Patch5: iptables-batch-lock.patch
+Patch6: iptables-1.8.2-dont_read_garbage.patch
 
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 #git#BuildRequires:  autoconf, automake >= 1.10
@@ -140,8 +141,7 @@
 xtables --variable=xtlibdir).
 
 %prep
-%setup -q
-%patch -P 3 -P 4 -P 5 -p1
+%autosetup -p1
 
 %build
 # We have the iptables-batch patch, so always regenerate.

++ iptables-1.8.2-dont_read_garbage.patch ++
From: Fabian Vogt 
Date: 2019-04-04 13:41:59 +0200
Subject: 'iptables -L' reads garbage
References: [bsc#1106751]
Upstream: reported (https://bugzilla.netfilter.org/show_bug.cgi?id=1331)

This patch fixes a situation where 'iptables -L' reads garbage
from the struct as the kernel never filled it in the bugged case.
This can lead to issues like mapping a few TiB of memory

---

Index: iptables-1.8.2/libiptc/libiptc.c
===
--- iptables-1.8.2.orig/libiptc/libiptc.c
+++ iptables-1.8.2/libiptc/libiptc.c
@@ -1305,6 +1305,7 @@ TC_INIT(const char *tablename)
 {
struct xtc_handle *h;
STRUCT_GETINFO info;
+   memset(, 0, sizeof(info));
unsigned int tmp;
socklen_t s;
int sockfd;

commit iptables for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2018-11-18 23:21:53

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is "iptables"

Sun Nov 18 23:21:53 2018 rev:66 rq:648729 version:1.8.2

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2018-11-06 
15:12:35.553634700 +0100
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2018-11-18 
23:21:57.490225944 +0100
@@ -1,0 +2,7 @@
+Tue Nov 13 12:09:24 UTC 2018 - Jan Engelhardt 
+
+- Update to new upstream release 1.8.2
+  * Fix incorrect handling of various targets and options in
+iptables-nft,ebtables-nft,arptables-nft.
+
+---

Old:

  iptables-1.8.1.tar.bz2
  iptables-1.8.1.tar.bz2.sig

New:

  iptables-1.8.2.tar.bz2
  iptables-1.8.2.tar.bz2.sig



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.Bq6yvC/_old  2018-11-18 23:21:57.934225401 +0100
+++ /var/tmp/diff_new_pack.Bq6yvC/_new  2018-11-18 23:21:57.938225396 +0100
@@ -17,7 +17,7 @@
 
 
 Name:   iptables
-Version:1.8.1
+Version:1.8.2
 Release:0
 Summary:IP packet filter administration utilities
 License:GPL-2.0-only AND Artistic-2.0

++ iptables-1.8.1.tar.bz2 -> iptables-1.8.2.tar.bz2 ++
 2339 lines of diff (skipped)

commit iptables for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2018-11-06 15:12:03

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is "iptables"

Tue Nov  6 15:12:03 2018 rev:65 rq:645457 version:1.8.1

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2018-10-04 
18:57:39.235464019 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2018-11-06 
15:12:35.553634700 +0100
@@ -1,0 +2,6 @@
+Tue Oct 23 14:25:53 UTC 2018 - Jan Engelhardt 
+
+- Update to new upstream release 1.8.1
+  * New cgroup match revision with reduced memory footprint
+
+---

Old:

  _service
  iptables-1.8.0.g85.tar.xz

New:

  iptables-1.8.1.tar.bz2
  iptables-1.8.1.tar.bz2.sig



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.wkMqDh/_old  2018-11-06 15:12:41.685625868 +0100
+++ /var/tmp/diff_new_pack.wkMqDh/_new  2018-11-06 15:12:41.685625868 +0100
@@ -12,21 +12,20 @@
 # license that conforms to the Open Source Definition (Version 1.9)
 # published by the Open Source Initiative.
 
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
 #
 
 
 Name:   iptables
-Version:1.8.0.g85
+Version:1.8.1
 Release:0
 Summary:IP packet filter administration utilities
 License:GPL-2.0-only AND Artistic-2.0
 Group:  Productivity/Networking/Security
 Url:http://netfilter.org/projects/iptables/
 #Git-Clone: git://git.netfilter.org/iptables
-#Source: 
http://netfilter.org/projects/iptables/files/%%name-%%version.tar.bz2
-#Source2:
http://netfilter.org/projects/iptables/files/%%name-%%version.tar.bz2.sig
-Source: %name-%version.tar.xz
+Source: 
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
+Source2:
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
 Source3:%name.keyring
 Patch3: iptables-batch.patch
 Patch4: iptables-apply-mktemp-fix.patch
@@ -152,7 +151,7 @@
 # includedir is overriden on purpose to detect projects that
 # fail to include libxtables_CFLAGS
 %configure --includedir="%_includedir/%name" --enable-libipq
-%make_build V=1
+make %{?_smp_mflags} V=1
 
 %install
 %make_install

++ iptables-1.8.0.g85.tar.xz -> iptables-1.8.1.tar.bz2 ++
 55138 lines of diff (skipped)

++ iptables-apply-mktemp-fix.patch ++
--- /var/tmp/diff_new_pack.wkMqDh/_old  2018-11-06 15:12:42.065625321 +0100
+++ /var/tmp/diff_new_pack.wkMqDh/_new  2018-11-06 15:12:42.069625316 +0100
@@ -1,7 +1,11 @@
-Index: iptables-1.4.12.1+16/iptables/iptables-apply
+---
+ iptables/iptables-apply |4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+Index: iptables-1.8.1/iptables/iptables-apply
 ===
 iptables-1.4.12.1+16.orig/iptables/iptables-apply
-+++ iptables-1.4.12.1+16/iptables/iptables-apply
+--- iptables-1.8.1.orig/iptables/iptables-apply
 iptables-1.8.1/iptables/iptables-apply
 @@ -111,7 +111,7 @@ if [[ ! -r "$FILE" ]]; then
exit 2
  fi
@@ -17,6 +21,6 @@
  
 -TMPFILE=$(tempfile -p iptap)
 +TMPFILE=$(mktemp)
- trap "rm -f $TMPFILE" EXIT 1 2 3 4 5 6 7 8 10 11 12 13 14 15
+ trap "rm -f $TMPFILE" EXIT HUP INT QUIT ILL TRAP ABRT BUS \
+ FPE USR1 SEGV USR2 PIPE ALRM TERM
  
- if ! "$SAVE" >"$TMPFILE"; then

commit iptables for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2018-10-04 18:57:29

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is "iptables"

Thu Oct  4 18:57:29 2018 rev:64 rq:639348 version:1.8.0.g85

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2018-10-01 
08:15:06.502056759 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2018-10-04 
18:57:39.235464019 +0200
@@ -1,0 +2,5 @@
+Mon Sep 24 08:14:16 UTC 2018 - astie...@suse.com
+
+- note build-time dependency on libnftnl >= 1.1.1
+
+---



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.SCUKIT/_old  2018-10-04 18:57:43.263458945 +0200
+++ /var/tmp/diff_new_pack.SCUKIT/_new  2018-10-04 18:57:43.263458945 +0200
@@ -43,7 +43,7 @@
 BuildRequires:  pkgconfig(libmnl) >= 1.0
 BuildRequires:  pkgconfig(libnetfilter_conntrack) >= 1.0.4
 BuildRequires:  pkgconfig(libnfnetlink) >= 1.0.0
-BuildRequires:  pkgconfig(libnftnl) >= 1.0.5
+BuildRequires:  pkgconfig(libnftnl) >= 1.1.1
 Requires:   netcfg >= 11.6
 Requires:   xtables-plugins = %version-%release
 Requires(post): update-alternatives

commit iptables for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2018-10-01 08:15:04

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is "iptables"

Mon Oct  1 08:15:04 2018 rev:63 rq:637189 version:1.8.0.g85

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2018-05-29 
16:46:06.373438099 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2018-10-01 
08:15:06.502056759 +0200
@@ -1,0 +2,17 @@
+Tue Sep  4 08:08:22 UTC 2018 - Markos Chandras 
+
+- Add missing update-alternatives dependency to Requires(post)
+  section. If this is missing the package fails to install properly
+  when it is used as build dependency.
+
+---
+Mon Jul  9 09:38:13 UTC 2018 - jeng...@inai.de
+
+- Update to new upstream release 1.8.0 and snapshot 1.8.0.g75
+  * The ipv6 "srh" match can now match previous/next/last sid
+  * CONNMARK target now supports bit-shifting for restore,set
+and save-mark.
+  * DNAT now supports shifted portmap ranges.
+  * iptables now comes in two backends: legacy and nft.
+
+---

Old:

  iptables-1.6.2.tar.bz2
  iptables-1.6.2.tar.bz2.sig

New:

  _service
  iptables-1.8.0.g85.tar.xz



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.t6kea2/_old  2018-10-01 08:15:07.030056420 +0200
+++ /var/tmp/diff_new_pack.t6kea2/_new  2018-10-01 08:15:07.030056420 +0200
@@ -17,29 +17,25 @@
 
 
 Name:   iptables
-Version:1.6.2
+Version:1.8.0.g85
 Release:0
 Summary:IP packet filter administration utilities
 License:GPL-2.0-only AND Artistic-2.0
 Group:  Productivity/Networking/Security
 Url:http://netfilter.org/projects/iptables/
 #Git-Clone: git://git.netfilter.org/iptables
-Source: 
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
-Source2:
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
+#Source: 
http://netfilter.org/projects/iptables/files/%%name-%%version.tar.bz2
+#Source2:
http://netfilter.org/projects/iptables/files/%%name-%%version.tar.bz2.sig
+Source: %name-%version.tar.xz
 Source3:%name.keyring
 Patch3: iptables-batch.patch
 Patch4: iptables-apply-mktemp-fix.patch
 Patch5: iptables-batch-lock.patch
 
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
-%if 0%{?fedora_version} || 0%{?centos_version}
-BuildRequires:  sgml-common
-%endif
-%if 0%{?suse_version}
-BuildRequires:  fdupes
-%endif
 #git#BuildRequires:  autoconf, automake >= 1.10
 BuildRequires:  bison
+BuildRequires:  fdupes
 BuildRequires:  flex >= 2.5.33
 BuildRequires:  libtool
 BuildRequires:  pkg-config >= 0.21
@@ -48,24 +44,27 @@
 BuildRequires:  pkgconfig(libnetfilter_conntrack) >= 1.0.4
 BuildRequires:  pkgconfig(libnfnetlink) >= 1.0.0
 BuildRequires:  pkgconfig(libnftnl) >= 1.0.5
+Requires:   netcfg >= 11.6
 Requires:   xtables-plugins = %version-%release
+Requires(post): update-alternatives
+Requires(postun): update-alternatives
 
 %description
 iptables is used to set up, maintain, and inspect the rule tables of
-the classic "ip6_tables" and "ip_tables" packet filters in the Linux
-kernel.
+the various Netfilter packet filter engines inside the Linux kernel.
 
-%package nft
-Summary:nft packet filter administration utilties in the style of 
Xtables
+%package backend-nft
+Summary:Metapackage to make nft the default backend for 
iptables/arptables/ebtables
 Group:  Productivity/Networking/Security
-Requires:   netcfg >= 11.6
-Requires:   xtables-plugins = %version-%release
-
-%description nft
-The programs shipped in this subpackage behave like iptables on the
-command line, but instead edits the rules of the nft packet filter in
-the Linux kernel. Linux kernel 4.2 or newer is recommended to exploit
-the features.
+Requires:   iptables >= 1.8.0
+Requires(post): update-alternatives
+Requires(postun): update-alternatives
+
+%description backend-nft
+Installation of this package adds higher priority alternatives (cf.
+update-alternatives) that makes the iptables, ip6tables, arptables
+and ebtables commands point to a program variant that uses the
+nftables kernel interface.
 
 %package -n xtables-plugins
 Summary:Match and target extension plugins for iptables
@@ -103,12 +102,12 @@
 ip_queue/libipq is obsoleted by nf_queue/libnetfilter_queue!
 
 %package -n libiptc0
-Summary:Library for low-level ruleset generation and parsing
+Summary:

commit iptables for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2018-05-29 16:46:05

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is "iptables"

Tue May 29 16:46:05 2018 rev:62 rq:612202 version:1.6.2

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2018-03-20 
21:55:11.828835671 +0100
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2018-05-29 
16:46:06.373438099 +0200
@@ -1,0 +2,5 @@
+Thu May 24 16:38:53 CEST 2018 - ku...@suse.de
+
+- Use %license instead of %doc [bsc#1082318]
+
+---



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.kmuhV3/_old  2018-05-29 16:46:07.045413368 +0200
+++ /var/tmp/diff_new_pack.kmuhV3/_new  2018-05-29 16:46:07.049413221 +0200
@@ -20,7 +20,7 @@
 Version:1.6.2
 Release:0
 Summary:IP packet filter administration utilities
-License:GPL-2.0 and Artistic-2.0
+License:GPL-2.0-only AND Artistic-2.0
 Group:  Productivity/Networking/Security
 Url:http://netfilter.org/projects/iptables/
 #Git-Clone: git://git.netfilter.org/iptables
@@ -176,7 +176,7 @@
 
 %files
 %defattr(-,root,root)
-%doc COPYING
+%license COPYING
 %doc %_mandir/man1/ip*
 %doc %_mandir/man8/ip*
 %_bindir/iptables-xml

commit iptables for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2018-03-20 21:55:09

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is "iptables"

Tue Mar 20 21:55:09 2018 rev:61 rq:586249 version:1.6.2

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2018-02-10 
17:55:10.934615547 +0100
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2018-03-20 
21:55:11.828835671 +0100
@@ -1,0 +2,11 @@
+Mon Mar 12 10:08:53 UTC 2018 - matthias.gerst...@suse.com
+
+- Fix ethertypes ownership, should be %exclude, not %ghost.
+
+---
+Thu Feb 22 16:21:38 UTC 2018 - matthias.gerst...@suse.com
+
+- Resolve conflict with ebtables and obtain ethertypes from new netcfg minor
+  version. FATE#320520
+
+---



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.XHvEQz/_old  2018-03-20 21:55:12.776801537 +0100
+++ /var/tmp/diff_new_pack.XHvEQz/_new  2018-03-20 21:55:12.780801393 +0100
@@ -58,8 +58,8 @@
 %package nft
 Summary:nft packet filter administration utilties in the style of 
Xtables
 Group:  Productivity/Networking/Security
+Requires:   netcfg >= 11.6
 Requires:   xtables-plugins = %version-%release
-Conflicts:  ebtables
 
 %description nft
 The programs shipped in this subpackage behave like iptables on the
@@ -193,7 +193,8 @@
 
 %files nft
 %defattr(-,root,root)
-%_sysconfdir/ethertypes
+# is provided by netcfg
+%exclude %_sysconfdir/ethertypes
 %_sbindir/*-compat*
 %_sbindir/*-translate*
 

commit iptables for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2018-02-10 17:55:06

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is "iptables"

Sat Feb 10 17:55:06 2018 rev:60 rq:573925 version:1.6.2

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2017-02-08 
11:01:09.822048279 +0100
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2018-02-10 
17:55:10.934615547 +0100
@@ -1,0 +2,16 @@
+Sat Feb  3 14:02:59 UTC 2018 - jeng...@inai.de
+
+- Update to new upstream release 1.6.2
+  * add support for the "srh" match
+  * add randomize-full for the "MASQUERADE" target
+  * add rate match mode to the "hashlimit" match
+
+---
+Thu Jun 22 15:34:40 UTC 2017 - matthias.gerst...@suse.com
+
+- Add iptables-batch-lock.patch: Fix a locking issue of
+  iptables-batch which can cause it to spuriously fail when other
+  programs modify the iptables rules in parallel (bnc#1045130).
+  This can especially affect SuSEfirewall2 during startup.
+
+---

Old:

  iptables-1.6.1.tar.bz2
  iptables-1.6.1.tar.bz2.sig

New:

  iptables-1.6.2.tar.bz2
  iptables-1.6.2.tar.bz2.sig
  iptables-batch-lock.patch



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.bNL7Fe/_old  2018-02-10 17:55:11.750586008 +0100
+++ /var/tmp/diff_new_pack.bNL7Fe/_new  2018-02-10 17:55:11.754585864 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package iptables
 #
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,17 +17,19 @@
 
 
 Name:   iptables
-Version:1.6.1
+Version:1.6.2
 Release:0
-Summary:IP Packet Filter Administration utilities
+Summary:IP packet filter administration utilities
 License:GPL-2.0 and Artistic-2.0
 Group:  Productivity/Networking/Security
 Url:http://netfilter.org/projects/iptables/
+#Git-Clone: git://git.netfilter.org/iptables
 Source: 
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
 Source2:
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
 Source3:%name.keyring
 Patch3: iptables-batch.patch
 Patch4: iptables-apply-mktemp-fix.patch
+Patch5: iptables-batch-lock.patch
 
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 %if 0%{?fedora_version} || 0%{?centos_version}
@@ -54,19 +56,19 @@
 kernel.
 
 %package nft
-Summary:NFT Packet Filter Administration utilties in the style of 
Xtables
+Summary:nft packet filter administration utilties in the style of 
Xtables
 Group:  Productivity/Networking/Security
 Requires:   xtables-plugins = %version-%release
 Conflicts:  ebtables
 
 %description nft
 The programs shipped in this subpackage behave like iptables on the
-command line, but instead edit the rules of the NFT packet filter in
+command line, but instead edits the rules of the nft packet filter in
 the Linux kernel. Linux kernel 4.2 or newer is recommended to exploit
-all features.
+the features.
 
 %package -n xtables-plugins
-Summary:Match and Target Extension plugins for iptables
+Summary:Match and target extension plugins for iptables
 Group:  Productivity/Networking/Security
 Conflicts:  iptables < 1.4.18
 
@@ -127,7 +129,7 @@
 iproute2's m_xt.
 
 %package -n libxtables-devel
-Summary:Libraries, Headers and Development Man Pages for iptables
+Summary:Headers and manpages for iptables
 Group:  Development/Libraries/C and C++
 Requires:   libxtables12 = %version
 
@@ -141,12 +143,12 @@
 
 %prep
 %setup -q
-%patch -P 3 -P 4 -p1
+%patch -P 3 -P 4 -P 5 -p1
 
 %build
 # We have the iptables-batch patch, so always regenerate.
 if true || [ ! -e configure ]; then
-   ./autogen.sh;
+   ./autogen.sh
 fi
 # bnc#561793 - do not include unclean module in iptables manpage
 rm -f extensions/libipt_unclean.man
@@ -160,7 +162,7 @@
 # iptables-apply is not installed by upstream Makefile
 install -m0755 iptables/iptables-apply %buildroot%_sbindir/
 install -m0644 iptables/iptables-apply.8 %buildroot%_mandir/man8/
-rm -f "%buildroot/%_libdir"/*.la;
+rm -f "%buildroot/%_libdir"/*.la
 %if 0%{?suse_version}
 %fdupes %buildroot/%_prefix
 %endif
@@ -199,6 +201,7 @@
 %defattr(-,root,root)
 %_libdir/xtables/
 

commit iptables for openSUSE:Factory

[root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2017-02-08 11:01:08

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is "iptables"

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2016-01-04 
09:20:10.0 +0100
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2017-02-08 
11:01:09.822048279 +0100
@@ -1,0 +2,8 @@
+Fri Jan 27 22:53:14 UTC 2017 - jeng...@inai.de
+
+- Update to new upstream release 1.6.1
+* add support for hashlimit rev 2 for higher pps rates
+* add support for cgroup2 path matching
+* translation program for nft
+
+---

Old:

  iptables-1.6.0.tar.bz2
  iptables-1.6.0.tar.bz2.sig

New:

  iptables-1.6.1.tar.bz2
  iptables-1.6.1.tar.bz2.sig



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.P7vV2t/_old  2017-02-08 11:01:10.521950709 +0100
+++ /var/tmp/diff_new_pack.P7vV2t/_new  2017-02-08 11:01:10.529949593 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package iptables
 #
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,16 +17,12 @@
 
 
 Name:   iptables
-Version:1.6.0
+Version:1.6.1
 Release:0
 Summary:IP Packet Filter Administration utilities
 License:GPL-2.0 and Artistic-2.0
 Group:  Productivity/Networking/Security
 Url:http://netfilter.org/projects/iptables/
-
-#Git-Web:  http://git.netfilter.org/
-#Git-Clone:git://git.netfilter.org/iptables
-#DL-URL:   http://netfilter.org/projects/iptables/files/
 Source: 
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
 Source2:
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
 Source3:%name.keyring
@@ -121,11 +117,11 @@
 libiptc ("iptables cache") is used to retrieve from the kernel, parse,
 construct, and load new rulesets into the kernel.
 
-%package -n libxtables11
+%package -n libxtables12
 Summary:iptables extension interface
 Group:  System/Libraries
 
-%description -n libxtables11
+%description -n libxtables12
 This library contains all the iptables code shared between iptables,
 ip6tables, their extensions, and for external integration for e.g.
 iproute2's m_xt.
@@ -133,7 +129,7 @@
 %package -n libxtables-devel
 Summary:Libraries, Headers and Development Man Pages for iptables
 Group:  Development/Libraries/C and C++
-Requires:   libxtables11 = %version
+Requires:   libxtables12 = %version
 
 %description -n libxtables-devel
 This library contains all the iptables code shared between iptables,
@@ -173,8 +169,8 @@
 %postun -n libipq0 -p /sbin/ldconfig
 %post   -n libiptc0 -p /sbin/ldconfig
 %postun -n libiptc0 -p /sbin/ldconfig
-%post   -n libxtables11 -p /sbin/ldconfig
-%postun -n libxtables11 -p /sbin/ldconfig
+%post   -n libxtables12 -p /sbin/ldconfig
+%postun -n libxtables12 -p /sbin/ldconfig
 
 %files
 %defattr(-,root,root)
@@ -197,6 +193,7 @@
 %defattr(-,root,root)
 %_sysconfdir/ethertypes
 %_sbindir/*-compat*
+%_sbindir/*-translate*
 
 %files -n xtables-plugins
 %defattr(-,root,root)
@@ -230,9 +227,9 @@
 %_libdir/libip*tc.so
 %_libdir/pkgconfig/libip*tc.pc
 
-%files -n libxtables11
+%files -n libxtables12
 %defattr(-,root,root)
-%_libdir/libxtables.so.11*
+%_libdir/libxtables.so.12*
 
 %files -n libxtables-devel
 %defattr(-,root,root)

++ iptables-1.6.0.tar.bz2 -> iptables-1.6.1.tar.bz2 ++
 10716 lines of diff (skipped)

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2016-01-04 09:19:49

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is "iptables"

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2015-12-06 
07:26:48.0 +0100
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2016-01-04 
09:20:10.0 +0100
@@ -1,0 +2,6 @@
+Fri Dec 18 20:06:41 UTC 2015 - jeng...@inai.de
+
+- Update to final release 1.6.0
+* Only a build fix, no new significant changes.
+
+---

Old:

  iptables-1.4.21.g367.9763347.tar.xz

New:

  iptables-1.6.0.tar.bz2
  iptables-1.6.0.tar.bz2.sig



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.2Wly4L/_old  2016-01-04 09:20:11.0 +0100
+++ /var/tmp/diff_new_pack.2Wly4L/_new  2016-01-04 09:20:11.0 +0100
@@ -17,7 +17,7 @@
 
 
 Name:   iptables
-Version:1.6.0~
+Version:1.6.0
 Release:0
 Summary:IP Packet Filter Administration utilities
 License:GPL-2.0 and Artistic-2.0
@@ -27,9 +27,8 @@
 #Git-Web:  http://git.netfilter.org/
 #Git-Clone:git://git.netfilter.org/iptables
 #DL-URL:   http://netfilter.org/projects/iptables/files/
-#Source: 
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
-#Source2:
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
-Source: iptables-1.4.21.g367.9763347.tar.xz
+Source: 
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
+Source2:
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
 Source3:%name.keyring
 Patch3: iptables-batch.patch
 Patch4: iptables-apply-mktemp-fix.patch
@@ -145,7 +144,7 @@
 xtables --variable=xtlibdir).
 
 %prep
-%setup -qn iptables
+%setup -q
 %patch -P 3 -P 4 -p1
 
 %build

++ iptables-1.4.21.g367.9763347.tar.xz -> iptables-1.6.0.tar.bz2 ++
 48638 lines of diff (skipped)

++ iptables.keyring ++
--- /var/tmp/diff_new_pack.2Wly4L/_old  2016-01-04 09:20:12.0 +0100
+++ /var/tmp/diff_new_pack.2Wly4L/_new  2016-01-04 09:20:12.0 +0100
@@ -1,9 +1,14 @@
-pub   4096R/BB5F58CC 2010-10-21 [expires: 2015-10-20]
-uid  Netfilter Core Team 
-sub   4096R/04B92F5C 2010-10-21 [expires: 2015-10-20]
+pub   4096R/0xA4111F89BB5F58CC 2010-10-21 [expires: 2015-10-20]
+  Key fingerprint = 57FF 5E9C 9AA6 7A86 0B55  7AF7 A411 1F89 BB5F 58CC
+uid [ expired] Netfilter Core Team 
+sub   4096R/0x0FD3A13A04B92F5C 2010-10-21 [expires: 2015-10-20]
+
+pub   4096R/0xAB4655A126D292E4 2015-10-19 [expires: 2020-10-17]
+  Key fingerprint = C09D B206 3F1D 7034 BA61  52AD AB46 55A1 26D2 92E4
+uid [ unknown] Netfilter Core Team 
+sub   4096R/0xE3B0B6BAE3AAA39E 2015-10-19 [expires: 2020-10-17]
 
 -BEGIN PGP PUBLIC KEY BLOCK-
-Version: GnuPG v2.0.19 (GNU/Linux)
 
 mQINBEzAS5EBEADVlGm+KwODJcVmP33HTCbn/eP8obZbgu+3Z1CYRklF8V43vC6D
 8Jfk7fjD4/gWbAKZxriOESXVAN7mp0Fho4+Ga+pxWeLIET9tVM5xbNFK1p9R3XCK
@@ -51,6 +56,52 @@
 kMm3eGmDSqoMxsPmarb80nkoFQMOPhJWlyaUCt6HHRYuSkIcxY4H4Ni3Oq1s1R9/
 EqUuIfxNv7Kp0mcsE2KvANc3JfB9wXwLWqDYRCifLkCD6pbpt9L/+xQ49VzcFxNO
 9DqTyk4N7cz7OZrAi+ouVrdFuiwnZyn5YSQoof6Pos58b3bkFn14m9gofwTqGzPh
-R4Vot9rRu5zrWdoCM4cRThpJyrjqBMs=
-=mRxL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commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2015-12-06 07:26:46

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is "iptables"

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2014-04-26 
19:34:01.0 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2015-12-06 
07:26:48.0 +0100
@@ -1,0 +2,15 @@
+Mon Nov 23 11:07:15 UTC 2015 - jeng...@inai.de
+
+- Update to new snapshot v1.4.21-367-g9763347 [1.6.0~]
+* -m ah/esp/rt: restore matching "any SPI id" by default
+  (they unexpectedly defaulted to --spi 0 rather than --spi ALL)
+* -m cgroup: new module
+* -m dst: make ! --dst-len work
+* -m ipcomp: new module
+* -m socket: add --restore-skmark option
+* -j CT: add support for new zone options
+* -j REJECT: add missing ICMPv6 codes
+* -j TEE: make it possible to delete rules with -D ... -j
+* -j SNAT/DNAT: add randomize-full support
+
+---

Old:

  iptables-1.4.21.tar.bz2
  iptables-1.4.21.tar.bz2.sig

New:

  iptables-1.4.21.g367.9763347.tar.xz



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.Jx2mpF/_old  2015-12-06 07:26:49.0 +0100
+++ /var/tmp/diff_new_pack.Jx2mpF/_new  2015-12-06 07:26:49.0 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package iptables
 #
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,22 +17,19 @@
 
 
 Name:   iptables
-%define lname_ipq  libipq0
-%define lname_iptc libiptc0
-%define lname_xt   libxtables10
-Version:1.4.21
+Version:1.6.0~
 Release:0
 Summary:IP Packet Filter Administration utilities
 License:GPL-2.0 and Artistic-2.0
 Group:  Productivity/Networking/Security
 Url:http://netfilter.org/projects/iptables/
 
-#Freecode-URL: http://freecode.com/projects/iptables/
 #Git-Web:  http://git.netfilter.org/
 #Git-Clone:git://git.netfilter.org/iptables
 #DL-URL:   http://netfilter.org/projects/iptables/files/
-Source: 
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
-Source2:
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
+#Source: 
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
+#Source2:
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
+Source: iptables-1.4.21.g367.9763347.tar.xz
 Source3:%name.keyring
 Patch3: iptables-batch.patch
 Patch4: iptables-apply-mktemp-fix.patch
@@ -41,26 +38,37 @@
 %if 0%{?fedora_version} || 0%{?centos_version}
 BuildRequires:  sgml-common
 %endif
-#git#BuildRequires:  autoconf, automake >= 1.10
-BuildRequires:  libtool
-BuildRequires:  pkgconfig >= 0.21
 %if 0%{?suse_version}
 BuildRequires:  fdupes
 %endif
-%if 0%{?suse_version} >= 1140 || 0%{?fedora_version}
+#git#BuildRequires:  autoconf, automake >= 1.10
+BuildRequires:  bison
+BuildRequires:  flex >= 2.5.33
+BuildRequires:  libtool
+BuildRequires:  pkg-config >= 0.21
+BuildRequires:  xz
+BuildRequires:  pkgconfig(libmnl) >= 1.0
 BuildRequires:  pkgconfig(libnetfilter_conntrack) >= 1.0.4
 BuildRequires:  pkgconfig(libnfnetlink) >= 1.0.0
-%endif
-%if (0%{?suse_version} && 0%{?suse_version} <= 1110) || 0%{?centos_version} || 
0%{?redhat_version}
-BuildRequires:  libnetfilter_conntrack-devel >= 1.0.4
-BuildRequires:  libnfnetlink-devel >= 1.0.0
-%endif
-Requires:   xtables-plugins = %version
+BuildRequires:  pkgconfig(libnftnl) >= 1.0.5
+Requires:   xtables-plugins = %version-%release
 
 %description
-iptables is used to set up, maintain, and inspect the tables of IP
-packet filter rules in the Linux kernel. This version requires kernel
-3.0 or newer.
+iptables is used to set up, maintain, and inspect the rule tables of
+the classic "ip6_tables" and "ip_tables" packet filters in the Linux
+kernel.
+
+%package nft
+Summary:NFT Packet Filter Administration utilties in the style of 
Xtables
+Group:  Productivity/Networking/Security
+Requires:   xtables-plugins = %version-%release
+Conflicts:  ebtables
+
+%description nft
+The programs shipped in this subpackage behave like iptables on the
+command line, but instead edit the rules of the NFT packet filter in
+the Linux kernel. Linux kernel 4.2 or newer is recommended to exploit
+all features.
 
 %package -n 

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2014-04-26 19:33:59

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is iptables

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2013-11-25 
16:02:27.0 +0100
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2014-04-26 
19:34:01.0 +0200
@@ -1,0 +2,12 @@
+Thu Apr 24 09:54:12 UTC 2014 - dmuel...@suse.com
+
+- remove dependency on gpg-offline (blocks rebuilds and
+  tarball integrity is checked by source-validator anyway)
+
+---
+Wed Apr 23 16:20:02 UTC 2014 - dmuel...@suse.com
+
+- remove dependency on sgmltool: doesn't seem to be used
+  and reduces rebuild time on aarch64 by 8 hours
+
+---



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.OBXmrF/_old  2014-04-26 19:34:02.0 +0200
+++ /var/tmp/diff_new_pack.OBXmrF/_new  2014-04-26 19:34:02.0 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package iptables
 #
-# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -38,9 +38,6 @@
 Patch4: iptables-apply-mktemp-fix.patch
 
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
-%if 0%{?suse_version}
-BuildRequires:  sgmltool
-%endif
 %if 0%{?fedora_version} || 0%{?centos_version}
 BuildRequires:  sgml-common
 %endif
@@ -50,15 +47,12 @@
 %if 0%{?suse_version}
 BuildRequires:  fdupes
 %endif
-%if 0%{?suse_version} = 1230
-BuildRequires:  gpg-offline
-%endif
-%if 0%{?suse_version} = 1140
+%if 0%{?suse_version} = 1140 || 0%{?fedora_version}
 BuildRequires:  pkgconfig(libnetfilter_conntrack) = 1.0.4
 BuildRequires:  pkgconfig(libnfnetlink) = 1.0.0
 %endif
-%if (0%{?suse_version}  0%{?suse_version} = 1110) || 0%{?fedora_version} || 
0%{?centos_version} || 0%{?redhat_version}
-BuildRequires:  libnetfilter_conntrack = 1.0.4
+%if (0%{?suse_version}  0%{?suse_version} = 1110) || 0%{?centos_version} || 
0%{?redhat_version}
+BuildRequires:  libnetfilter_conntrack-devel = 1.0.4
 BuildRequires:  libnfnetlink-devel = 1.0.0
 %endif
 Requires:   xtables-plugins = %version
@@ -143,7 +137,6 @@
 xtables --variable=xtlibdir).
 
 %prep
-%{?gpg_verify: %gpg_verify %{S:2}}
 %setup -q
 %patch -P 3 -P 4 -p1
 


-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2013-11-25 16:02:27

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is iptables

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2013-10-08 
10:52:02.0 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2013-11-25 
16:02:27.0 +0100
@@ -1,0 +2,7 @@
+Sat Nov 23 04:39:31 UTC 2013 - jeng...@inai.de
+
+- Update to new upstream release 1.4.21
+* --nowildcard option for xt_socket, available since Linux kernel 3.11
+* SYNPROXY support, available since Linux kernel 3.12
+
+---

Old:

  iptables-1.4.20.tar.bz2
  iptables-1.4.20.tar.bz2.sig

New:

  iptables-1.4.21.tar.bz2
  iptables-1.4.21.tar.bz2.sig



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.i4i101/_old  2013-11-25 16:02:28.0 +0100
+++ /var/tmp/diff_new_pack.i4i101/_new  2013-11-25 16:02:28.0 +0100
@@ -20,7 +20,7 @@
 %define lname_ipq  libipq0
 %define lname_iptc libiptc0
 %define lname_xt   libxtables10
-Version:1.4.20
+Version:1.4.21
 Release:0
 Summary:IP Packet Filter Administration utilities
 License:GPL-2.0 and Artistic-2.0

++ iptables-1.4.20.tar.bz2 - iptables-1.4.21.tar.bz2 ++
 2774 lines of diff (skipped)

-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2013-10-08 10:52:00

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is iptables

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2013-06-05 
17:43:26.0 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2013-10-08 
10:52:02.0 +0200
@@ -1,0 +2,7 @@
+Wed Aug  7 13:19:02 UTC 2013 - jeng...@inai.de
+
+- Update to new upstream release 1.4.20
+* Introduce a new revision for the set match with the counters support
+* Add locking to prevent concurrent instances
+
+---

Old:

  iptables-1.4.19.1.tar.bz2
  iptables-1.4.19.1.tar.bz2.sig

New:

  iptables-1.4.20.tar.bz2
  iptables-1.4.20.tar.bz2.sig



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.1ekr7h/_old  2013-10-08 10:52:03.0 +0200
+++ /var/tmp/diff_new_pack.1ekr7h/_new  2013-10-08 10:52:03.0 +0200
@@ -20,7 +20,7 @@
 %define lname_ipq  libipq0
 %define lname_iptc libiptc0
 %define lname_xt   libxtables10
-Version:1.4.19.1
+Version:1.4.20
 Release:0
 Summary:IP Packet Filter Administration utilities
 License:GPL-2.0 and Artistic-2.0
@@ -54,12 +54,11 @@
 BuildRequires:  gpg-offline
 %endif
 %if 0%{?suse_version} = 1140
+BuildRequires:  pkgconfig(libnetfilter_conntrack) = 1.0.4
 BuildRequires:  pkgconfig(libnfnetlink) = 1.0.0
 %endif
-%if 0%{?suse_version}  0%{?suse_version} = 1110
-BuildRequires:  libnfnetlink-devel = 1.0.0
-%endif
-%if 0%{?fedora_version} || 0%{?centos_version} || 0%{?rhel_version}
+%if (0%{?suse_version}  0%{?suse_version} = 1110) || 0%{?fedora_version} || 
0%{?centos_version} || 0%{?redhat_version}
+BuildRequires:  libnetfilter_conntrack = 1.0.4
 BuildRequires:  libnfnetlink-devel = 1.0.0
 %endif
 Requires:   xtables-plugins = %version
@@ -170,9 +169,6 @@
 %fdupes %buildroot/%_prefix
 %endif
 
-%clean
-:
-
 %post   -n %lname_ipq -p /sbin/ldconfig
 %postun -n %lname_ipq -p /sbin/ldconfig
 %post   -n %lname_iptc -p /sbin/ldconfig
@@ -199,8 +195,6 @@
 
 %files -n xtables-plugins
 %defattr(-,root,root)
-%dir %_sysconfdir/xtables/
-%config %_sysconfdir/xtables/*.conf
 %_libdir/xtables/
 %_sbindir/nfnl_osf
 %_datadir/xtables/

++ iptables-1.4.19.1.tar.bz2 - iptables-1.4.20.tar.bz2 ++
 3121 lines of diff (skipped)

++ iptables-batch.patch ++
--- /var/tmp/diff_new_pack.1ekr7h/_old  2013-10-08 10:52:03.0 +0200
+++ /var/tmp/diff_new_pack.1ekr7h/_new  2013-10-08 10:52:03.0 +0200
@@ -3,10 +3,10 @@
  iptables/iptables-batch.c |  468 
++
  2 files changed, 477 insertions(+), 1 deletion(-)
 
-Index: iptables-1.4.16.2/iptables/Makefile.am
+Index: iptables-1.4.20/iptables/Makefile.am
 ===
 iptables-1.4.16.2.orig/iptables/Makefile.am
-+++ iptables-1.4.16.2/iptables/Makefile.am
+--- iptables-1.4.20.orig/iptables/Makefile.am
 iptables-1.4.20/iptables/Makefile.am
 @@ -24,7 +24,15 @@ endif
  xtables_multi_SOURCES += xshared.c
  xtables_multi_LDADD   += ../libxtables/libxtables.la -lm
@@ -24,10 +24,10 @@
  man_MANS = iptables.8 iptables-restore.8 iptables-save.8 \
 iptables-xml.1 ip6tables.8 ip6tables-restore.8 \
 ip6tables-save.8 iptables-extensions.8
-Index: iptables-1.4.16.2/iptables/iptables-batch.c
+Index: iptables-1.4.20/iptables/iptables-batch.c
 ===
 --- /dev/null
-+++ iptables-1.4.16.2/iptables/iptables-batch.c
 iptables-1.4.20/iptables/iptables-batch.c
 @@ -0,0 +1,468 @@
 +/*
 + * Author: Ludwig Nussel ludwig.nus...@suse.de
@@ -296,7 +296,7 @@
 +  return 0;
 +
 +#ifdef IP6T
-+  ret = do_command6(argc, argv, table, current_table-handle);
++  ret = do_command6(argc, argv, table, current_table-handle, true);
 +
 +  if (!ret)
 +  {
@@ -312,7 +312,7 @@
 +  }
 +  }
 +#else
-+  ret = do_command4(argc, argv, table, current_table-handle);
++  ret = do_command4(argc, argv, table, current_table-handle, true);
 +
 +  if (!ret)
 +  {

-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2013-06-05 17:43:24

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is iptables

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2013-04-17 
18:22:48.0 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2013-06-05 
17:43:26.0 +0200
@@ -1,0 +2,9 @@
+Fri May 31 20:00:39 UTC 2013 - jeng...@inai.de
+
+- Update to new upstream release 1.4.19.1
+* New connlabel and bpf matches
+- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
+  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
+  (are upstream)
+
+---

Old:

  0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  iptables-1.4.18.tar.bz2
  iptables-1.4.18.tar.bz2.sig

New:

  iptables-1.4.19.1.tar.bz2
  iptables-1.4.19.1.tar.bz2.sig



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.H6kBkV/_old  2013-06-05 17:43:27.0 +0200
+++ /var/tmp/diff_new_pack.H6kBkV/_new  2013-06-05 17:43:27.0 +0200
@@ -20,7 +20,7 @@
 %define lname_ipq  libipq0
 %define lname_iptc libiptc0
 %define lname_xt   libxtables10
-Version:1.4.18
+Version:1.4.19.1
 Release:0
 Summary:IP Packet Filter Administration utilities
 License:GPL-2.0 and Artistic-2.0
@@ -34,8 +34,6 @@
 Source: 
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
 Source2:
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
 Source3:%name.keyring
-Patch1: 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
-Patch2: 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch
 Patch3: iptables-batch.patch
 Patch4: iptables-apply-mktemp-fix.patch
 
@@ -148,7 +146,7 @@
 %prep
 %{?gpg_verify: %gpg_verify %{S:2}}
 %setup -q
-%patch -P 1 -P 2 -P 3 -P 4 -p1
+%patch -P 3 -P 4 -p1
 
 %build
 # We have the iptables-batch patch, so always regenerate.
@@ -159,7 +157,7 @@
 rm -f extensions/libipt_unclean.man
 # includedir is overriden on purpose to detect projects that
 # fail to include libxtables_CFLAGS
-%configure --includedir=%_includedir/%name-%version --enable-libipq
+%configure --includedir=%_includedir/pkg/%name --enable-libipq
 make %{?_smp_mflags}
 
 %install
@@ -201,9 +199,11 @@
 
 %files -n xtables-plugins
 %defattr(-,root,root)
-%_libdir/xtables
+%dir %_sysconfdir/xtables/
+%config %_sysconfdir/xtables/*.conf
+%_libdir/xtables/
 %_sbindir/nfnl_osf
-%_datadir/xtables
+%_datadir/xtables/
 
 %files -n %lname_ipq
 %defattr(-,root,root)
@@ -213,8 +213,8 @@
 %defattr(-,root,root)
 %doc %_mandir/man3/libipq*
 %doc %_mandir/man3/ipq*
-%dir %_includedir/%name-%version
-%_includedir/%name-%version/libipq*
+%dir %_includedir/pkg/%name/
+%_includedir/pkg/%name/libipq*
 %_libdir/libipq.so
 %_libdir/pkgconfig/libipq.pc
 
@@ -226,8 +226,9 @@
 
 %files -n libiptc-devel
 %defattr(-,root,root)
-%dir %_includedir/%name-%version
-%_includedir/%name-%version/libiptc*
+%dir %_includedir/pkg/
+%dir %_includedir/pkg/%name/
+%_includedir/pkg/%name/libiptc*
 %_libdir/libip*tc.so
 %_libdir/pkgconfig/libip*tc.pc
 
@@ -237,9 +238,10 @@
 
 %files -n libxtables-devel
 %defattr(-,root,root)
-%dir %_includedir/%name-%version
-%_includedir/%name-%version/xtables.h
-%_includedir/%name-%version/xtables-version.h
+%dir %_includedir/pkg/
+%dir %_includedir/pkg/%name/
+%_includedir/pkg/%name/xtables.h
+%_includedir/pkg/%name/xtables-version.h
 %_libdir/libxtables.so
 %_libdir/pkgconfig/xtables.pc
 

++ iptables-1.4.18.tar.bz2 - iptables-1.4.19.1.tar.bz2 ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/iptables-1.4.18/Makefile.am 
new/iptables-1.4.19.1/Makefile.am
--- old/iptables-1.4.18/Makefile.am 2013-03-03 22:40:11.0 +0100
+++ new/iptables-1.4.19.1/Makefile.am   2013-05-29 15:48:30.0 +0200
@@ -10,9 +10,7 @@
 if ENABLE_LIBIPQ
 SUBDIRS += libipq
 endif
-if HAVE_LIBNFNETLINK
 SUBDIRS += utils
-endif
 # Depends on libxtables:
 SUBDIRS += extensions
 # Depends on extensions/libext.a:
@@ -26,5 +24,9 @@
tar -C /tmp -cjf ${PACKAGE_TARNAME}-${PACKAGE_VERSION}.tar.bz2 
--owner=root --group=root ${PACKAGE_TARNAME}-${PACKAGE_VERSION}/;
rm -Rf /tmp/${PACKAGE_TARNAME}-${PACKAGE_VERSION};
 
+install-data-hook:
+   @mkdir -p -m 755 $(DESTDIR)/etc/xtables/ || :
+   @test -f /etc/xtables/connlabel.conf || 

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2013-04-17 17:54:49

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is iptables, Maintainer is vci...@suse.com

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2013-03-22 
11:19:27.0 +0100
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2013-04-17 
17:54:53.0 +0200
@@ -1,0 +2,9 @@
+Mon Apr 15 06:19:21 UTC 2013 - jeng...@inai.de
+
+- libxt_state.so symlink was not installed (bnc#815182); fix by
+  removing 0001-build-also-use-libtool-for-install-stage.patch,
+  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
+  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
+  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch
+
+---

Old:

  0001-build-also-use-libtool-for-install-stage.patch
  0001-build-do-not-dereference-symlinks-on-installation.patch

New:

  0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.ahww2m/_old  2013-04-17 17:55:08.0 +0200
+++ /var/tmp/diff_new_pack.ahww2m/_new  2013-04-17 17:55:08.0 +0200
@@ -34,8 +34,8 @@
 Source: 
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
 Source2:
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
 Source3:%name.keyring
-Patch1: 0001-build-do-not-dereference-symlinks-on-installation.patch
-Patch2: 0001-build-also-use-libtool-for-install-stage.patch
+Patch1: 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
+Patch2: 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch
 Patch3: iptables-batch.patch
 Patch4: iptables-apply-mktemp-fix.patch
 
@@ -172,6 +172,9 @@
 %fdupes %buildroot/%_prefix
 %endif
 
+%clean
+:
+
 %post   -n %lname_ipq -p /sbin/ldconfig
 %postun -n %lname_ipq -p /sbin/ldconfig
 %post   -n %lname_iptc -p /sbin/ldconfig

++ 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch ++
From 37b19d08f3cbc83a653386d76261490e173a874b Mon Sep 17 00:00:00 2001
From: Pablo Neira Ayuso pa...@netfilter.org
Date: Sat, 16 Mar 2013 12:15:30 +0100
Subject: [PATCH] Revert build: resolve link failure for ip6t_NETMAP

This reverts commit 68e77a26111ee6b8f10c735a76891a7de6d57ee6.

The use of libtool was introduced to resolve linking problems
in NETMAP (IPv6 version), but that resulted in RPATH problems
reported from distributors and warnings spotted by libtool at
linking stage.

Since (0ca548b libip6t_NETMAP: Use xtables_ip6mask_to_cidr and
get rid of libip6tc dependency) fixed the NETMAP issue, let's
roll back to our previous stage.

A small conflicts in extensions/GNUmakefile.in has been resolved
in this revert.

Signed-off-by: Pablo Neira Ayuso pa...@netfilter.org
---
 extensions/GNUmakefile.in | 18 +++---
 1 file changed, 7 insertions(+), 11 deletions(-)

diff --git a/extensions/GNUmakefile.in b/extensions/GNUmakefile.in
index 3db6985..1ae7f74 100644
--- a/extensions/GNUmakefile.in
+++ b/extensions/GNUmakefile.in
@@ -33,7 +33,6 @@ AM_VERBOSE_CXX= @echo   CXX  $@;
 AM_VERBOSE_CXXLD  = @echo   CXXLD$@;
 AM_VERBOSE_AR = @echo   AR   $@;
 AM_VERBOSE_GEN= @echo   GEN  $@;
-AM_VERBOSE_NULL   = @
 endif
 
 #
@@ -76,7 +75,7 @@ install: ${targets_install}
if test -n ${targets_install}; then install -pm0755 $^ 
${DESTDIR}${xtlibdir}/; fi;
 
 clean:
-   rm -f *.la *.o *.lo *.so *.a {matches,targets}.man initext.c initext4.c 
initext6.c;
+   rm -f *.o *.oo *.so *.a {matches,targets}.man initext.c initext4.c 
initext6.c;
rm -f .*.d .*.dd;
 
 distclean: clean
@@ -90,19 +89,16 @@ init%.o: init%.c
 #
 #  Shared libraries
 #
-lib%.so: lib%.la
-   ${AM_VERBOSE_NULL} ln -fs .libs/$@ $@
+lib%.so: lib%.oo
+   ${AM_VERBOSE_CCLD} ${CCLD} ${AM_LDFLAGS} -shared ${LDFLAGS} -o $@ $ 
-L../libxtables/.libs -lxtables ${$*_LIBADD};
 
-lib%.la: lib%.lo
-   ${AM_VERBOSE_CCLD} ../libtool ${AM_LIBTOOL_SILENT} --tag=CC --mode=link 
${CCLD} ${AM_LDFLAGS} -module ${LDFLAGS} -o $@ $ ../libxtables/libxtables.la 
${$*_LIBADD} -rpath ${xtlibdir}
-
-lib%.lo: ${srcdir}/lib%.c
-   ${AM_VERBOSE_CC} ../libtool ${AM_LIBTOOL_SILENT} --tag=CC 
--mode=compile ${CC} ${AM_CPPFLAGS} ${AM_DEPFLAGS} ${AM_CFLAGS} 
-D_INIT=lib$*_init ${CFLAGS} -o $@ -c $
+lib%.oo: ${srcdir}/lib%.c
+   ${AM_VERBOSE_CC} ${CC} ${AM_CPPFLAGS} 

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2013-03-22 11:19:26

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is iptables, Maintainer is vci...@suse.com

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2012-12-14 
09:21:13.0 +0100
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2013-03-22 
11:19:27.0 +0100
@@ -1,0 +2,25 @@
+Wed Mar 20 08:22:20 UTC 2013 - cfarr...@suse.com
+
+- license update: GPL-2.0 and Artistic-2.0
+  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
+  ^only^ files. Also, aggregation of Artistic-2.0 content
+
+---
+Mon Mar  4 21:42:12 UTC 2013 - jeng...@inai.de
+
+- Update to new upstream release 1.4.18
+* documentation updates
+- Create subpackage xtables-plugins, to aid packaging of xtadm
+- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
+  as a prerequisite for:
+- Add 0001-build-also-use-libtool-for-install-stage.patch
+  to kill of undesired DT_RPATH entries
+
+---
+Tue Dec 25 22:47:56 UTC 2012 - jeng...@inai.de
+
+- Update to new upstream release 1.4.17
+* libxt_time: add support to ignore day transition
+* libxt_statistic: fix save output
+
+---

Old:

  iptables-1.4.16.3.tar.bz2
  iptables-1.4.16.3.tar.bz2.sig

New:

  0001-build-also-use-libtool-for-install-stage.patch
  0001-build-do-not-dereference-symlinks-on-installation.patch
  iptables-1.4.18.tar.bz2
  iptables-1.4.18.tar.bz2.sig



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.a7JUrY/_old  2013-03-22 11:19:28.0 +0100
+++ /var/tmp/diff_new_pack.a7JUrY/_new  2013-03-22 11:19:28.0 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package iptables
 #
-# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,22 +19,25 @@
 Name:   iptables
 %define lname_ipq  libipq0
 %define lname_iptc libiptc0
-%define lname_xt   libxtables9
-Version:1.4.16.3
+%define lname_xt   libxtables10
+Version:1.4.18
 Release:0
 Summary:IP Packet Filter Administration utilities
-License:GPL-2.0+
+License:GPL-2.0 and Artistic-2.0
 Group:  Productivity/Networking/Security
+Url:http://netfilter.org/projects/iptables/
 
-Url:http://netfilter.org/
+#Freecode-URL: http://freecode.com/projects/iptables/
 #Git-Web:  http://git.netfilter.org/
 #Git-Clone:git://git.netfilter.org/iptables
 #DL-URL:   http://netfilter.org/projects/iptables/files/
 Source: 
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
 Source2:
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
 Source3:%name.keyring
-Patch1: iptables-batch.patch
-Patch2: iptables-apply-mktemp-fix.patch
+Patch1: 0001-build-do-not-dereference-symlinks-on-installation.patch
+Patch2: 0001-build-also-use-libtool-for-install-stage.patch
+Patch3: iptables-batch.patch
+Patch4: iptables-apply-mktemp-fix.patch
 
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 %if 0%{?suse_version}
@@ -61,11 +64,20 @@
 %if 0%{?fedora_version} || 0%{?centos_version} || 0%{?rhel_version}
 BuildRequires:  libnfnetlink-devel = 1.0.0
 %endif
+Requires:   xtables-plugins = %version
 
 %description
 iptables is used to set up, maintain, and inspect the tables of IP
 packet filter rules in the Linux kernel. This version requires kernel
-2.4.0 or newer.
+3.0 or newer.
+
+%package -n xtables-plugins
+Summary:Match and Target Extension plugins for iptables
+Group:  Productivity/Networking/Security
+Conflicts:  iptables  1.4.18
+
+%description -n xtables-plugins
+Match and Target Extension plugins for iptables.
 
 %package -n %lname_ipq
 Summary:Library to interface with the (old) ip_queue kernel mechanism
@@ -106,9 +118,6 @@
 Summary:Development files for libiptc, a packet filter ruleset library
 Group:  Development/Libraries/C and C++
 Requires:   %lname_iptc = %version
-# NOT adding Obsoletes/Provides: iptables-devel, because that one has
-# been split into _two_ new pkgs (libxtables-devel, libiptc-devel).
-# NOTE: Please use 

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2012-12-14 09:21:10

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is iptables, Maintainer is vci...@suse.com

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2012-11-17 
07:25:04.0 +0100
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2012-12-14 
09:21:13.0 +0100
@@ -1,0 +2,5 @@
+Wed Nov 28 17:07:29 CET 2012 - sbra...@suse.cz
+
+- Verify GPG signature
+
+---

New:

  iptables.keyring



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.gwhJV0/_old  2012-12-14 09:21:15.0 +0100
+++ /var/tmp/diff_new_pack.gwhJV0/_new  2012-12-14 09:21:15.0 +0100
@@ -32,8 +32,10 @@
 #DL-URL:   http://netfilter.org/projects/iptables/files/
 Source: 
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
 Source2:
http://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
+Source3:%name.keyring
 Patch1: iptables-batch.patch
 Patch2: iptables-apply-mktemp-fix.patch
+
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 %if 0%{?suse_version}
 BuildRequires:  sgmltool
@@ -47,6 +49,9 @@
 %if 0%{?suse_version}
 BuildRequires:  fdupes
 %endif
+%if 0%{?suse_version} = 1230
+BuildRequires:  gpg-offline
+%endif
 %if 0%{?suse_version} = 1140
 BuildRequires:  pkgconfig(libnfnetlink) = 1.0.0
 %endif
@@ -132,6 +137,9 @@
 xtables --variable=xtlibdir).
 
 %prep
+%if 0%{?gpg_verify:1}
+%gpg_verify %{S:2}
+%endif
 %if 0%{?__xz:1}
 %setup -q
 %else
@@ -163,15 +171,10 @@
 %endif
 
 %post -n %lname_ipq -p /sbin/ldconfig
-
 %postun -n %lname_ipq -p /sbin/ldconfig
-
 %post -n %lname_iptc -p /sbin/ldconfig
-
 %postun -n %lname_iptc -p /sbin/ldconfig
-
 %post -n %lname_xt -p /sbin/ldconfig
-
 %postun -n %lname_xt -p /sbin/ldconfig
 
 %files


++ iptables.keyring ++
pub   4096R/BB5F58CC 2010-10-21 [expires: 2015-10-20]
uid  Netfilter Core Team coret...@netfilter.org
sub   4096R/04B92F5C 2010-10-21 [expires: 2015-10-20]

-BEGIN PGP PUBLIC KEY BLOCK-
Version: GnuPG v2.0.19 (GNU/Linux)
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commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2012-11-17 07:25:03

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is iptables, Maintainer is vci...@suse.com

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2012-10-26 
17:08:43.0 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2012-11-17 
07:25:04.0 +0100
@@ -1,0 +2,11 @@
+Thu Nov 15 16:06:15 UTC 2012 - lnus...@suse.de
+
+- list all required binaries explicitly to make sure all of them are actually
+  compiled
+
+---
+Thu Nov 15 14:15:48 UTC 2012 - jeng...@inai.de
+
+- Always regenerate files due to SUSE's iptables-batch patch
+
+---



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.ZUH2CX/_old  2012-11-17 07:25:05.0 +0100
+++ /var/tmp/diff_new_pack.ZUH2CX/_new  2012-11-17 07:25:05.0 +0100
@@ -141,7 +141,8 @@
 %patch -P 1 -P 2 -p1
 
 %build
-if [ ! -e configure ]; then
+# We have the iptables-batch patch, so always regenerate.
+if true || [ ! -e configure ]; then
./autogen.sh;
 fi
 # bnc#561793 - do not include unclean module in iptables manpage
@@ -178,10 +179,17 @@
 %doc COPYING
 %doc %_mandir/man1/*
 %doc %_mandir/man8/*
-%_bindir/iptables*
-%_sbindir/iptables*
-%_sbindir/ip6tables*
-%_sbindir/xtables*
+%_bindir/iptables-xml
+%_sbindir/iptables
+%_sbindir/iptables-apply
+%_sbindir/iptables-batch
+%_sbindir/iptables-restore
+%_sbindir/iptables-save
+%_sbindir/ip6tables
+%_sbindir/ip6tables-batch
+%_sbindir/ip6tables-restore
+%_sbindir/ip6tables-save
+%_sbindir/xtables-multi
 %_sbindir/nfnl_osf
 %_libdir/xtables
 %_datadir/xtables


-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2012-08-04 09:16:54

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is iptables, Maintainer is vci...@suse.com

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2012-05-29 
11:39:04.0 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2012-08-04 
09:16:56.0 +0200
@@ -1,0 +2,7 @@
+Tue Jul 31 12:08:07 UTC 2012 - jeng...@inai.de
+
+- Update to new upstream release 1.4.15
+* libxt_recent: add --mask netmask
+* libxt_hashlimit: add support for byte-based operation
+
+---

Old:

  iptables-1.4.14.tar.bz2
  iptables-1.4.14.tar.bz2.sig

New:

  iptables-1.4.15.tar.bz2
  iptables-1.4.15.tar.bz2.sig



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.UD4tZF/_old  2012-08-04 09:16:59.0 +0200
+++ /var/tmp/diff_new_pack.UD4tZF/_new  2012-08-04 09:16:59.0 +0200
@@ -20,7 +20,7 @@
 %define lname_ipq  libipq0
 %define lname_iptc libiptc0
 %define lname_xt   libxtables7
-Version:1.4.14
+Version:1.4.15
 Release:0
 Summary:IP Packet Filter Administration utilities
 License:GPL-2.0+
@@ -46,9 +46,14 @@
 BuildRequires:  pkgconfig = 0.21
 %if 0%{?suse_version}
 BuildRequires:  fdupes
+%endif
+%if 0%{?suse_version} = 1140
 BuildRequires:  pkgconfig(libnfnetlink) = 1.0.0
 %endif
-%if 0%{?fedora} || 0%{?rhel}
+%if 0%{?suse_version}  0%{?suse_version} = 1110
+BuildRequires:  libnfnetlink-devel = 1.0.0
+%endif
+%if 0%{?fedora_version} || 0%{?centos_version} || 0%{?rhel_version}
 BuildRequires:  libnfnetlink-devel = 1.0.0
 %endif
 

++ iptables-1.4.14.tar.bz2 - iptables-1.4.15.tar.bz2 ++
 2683 lines of diff (skipped)
retrying with extended exclude list
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude 
config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 
--exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh 
old/iptables-1.4.14/build-aux/compile new/iptables-1.4.15/build-aux/compile
--- old/iptables-1.4.14/build-aux/compile   2012-05-26 18:45:19.0 
+0200
+++ new/iptables-1.4.15/build-aux/compile   2012-07-31 12:45:36.0 
+0200
@@ -1,7 +1,7 @@
 #! /bin/sh
 # Wrapper for compilers which do not understand '-c -o'.
 
-scriptversion=2012-01-04.17; # UTC
+scriptversion=2012-03-05.13; # UTC
 
 # Copyright (C) 1999, 2000, 2003, 2004, 2005, 2009, 2010, 2012 Free
 # Software Foundation, Inc.
@@ -79,6 +79,48 @@
   esac
 }
 
+# func_cl_dashL linkdir
+# Make cl look for libraries in LINKDIR
+func_cl_dashL ()
+{
+  func_file_conv $1
+  if test -z $lib_path; then
+lib_path=$file
+  else
+lib_path=$lib_path;$file
+  fi
+  linker_opts=$linker_opts -LIBPATH:$file
+}
+
+# func_cl_dashl library
+# Do a library search-path lookup for cl
+func_cl_dashl ()
+{
+  lib=$1
+  found=no
+  save_IFS=$IFS
+  IFS=';'
+  for dir in $lib_path $LIB
+  do
+IFS=$save_IFS
+if $shared  test -f $dir/$lib.dll.lib; then
+  found=yes
+  lib=$dir/$lib.dll.lib
+  break
+fi
+if test -f $dir/$lib.lib; then
+  found=yes
+  lib=$dir/$lib.lib
+  break
+fi
+  done
+  IFS=$save_IFS
+
+  if test $found != yes; then
+lib=$lib.lib
+  fi
+}
+
 # func_cl_wrapper cl arg...
 # Adjust compile command to suit cl
 func_cl_wrapper ()
@@ -109,43 +151,34 @@
  ;;
  esac
  ;;
+   -I)
+ eat=1
+ func_file_conv $2 mingw
+ set x $@ -I$file
+ shift
+ ;;
-I*)
  func_file_conv ${1#-I} mingw
  set x $@ -I$file
  shift
  ;;
+   -l)
+ eat=1
+ func_cl_dashl $2
+ set x $@ $lib
+ shift
+ ;;
-l*)
- lib=${1#-l}
- found=no
- save_IFS=$IFS
- IFS=';'
- for dir in $lib_path $LIB
- do
-   IFS=$save_IFS
-   if $shared  test -f $dir/$lib.dll.lib; then
- found=yes
- set x $@ $dir/$lib.dll.lib
- break
-   fi
-   if test -f $dir/$lib.lib; then
- found=yes
- set x $@ $dir/$lib.lib
- break
-   fi
- done
- IFS=$save_IFS
-
- test $found != yes  set x $@ $lib.lib
+ func_cl_dashl ${1#-l}
+ set x $@ $lib
  shift
  ;;
+   -L)
+ eat=1
+ func_cl_dashL $2
+ ;;
  

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2012-05-29 11:39:03

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is iptables, Maintainer is vci...@suse.com

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2012-03-29 
07:45:30.0 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2012-05-29 
11:39:04.0 +0200
@@ -1,0 +2,7 @@
+Sat May 26 19:35:38 UTC 2012 - jeng...@inai.de
+
+- Update to new upstream release 1.4.14
+* Support for the new cttimeout infrastructure. This allows you to
+  attach specific timeout policies to flow via iptables CT target.
+
+---

Old:

  iptables-1.4.13.tar.bz2
  iptables-1.4.13.tar.bz2.sig

New:

  iptables-1.4.14.tar.bz2
  iptables-1.4.14.tar.bz2.sig



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.MLlMZ9/_old  2012-05-29 11:39:06.0 +0200
+++ /var/tmp/diff_new_pack.MLlMZ9/_new  2012-05-29 11:39:06.0 +0200
@@ -20,7 +20,7 @@
 %define lname_ipq  libipq0
 %define lname_iptc libiptc0
 %define lname_xt   libxtables7
-Version:1.4.13
+Version:1.4.14
 Release:0
 Summary:IP Packet Filter Administration utilities
 License:GPL-2.0+
@@ -30,8 +30,8 @@
 #DL-URL:   ftp://ftp.netfilter.org/pub/iptables/
 #Git-Web:  http://git.netfilter.org/
 #Git-Clone:git://git.netfilter.org/iptables
-Source: %name-%version.tar.bz2
-Source2:%name-%version.tar.bz2.sig
+Source: ftp://ftp.netfilter.org/pub/iptables/%name-%version.tar.bz2
+Source2:ftp://ftp.netfilter.org/pub/iptables/%name-%version.tar.bz2.sig
 Patch1: iptables-batch.patch
 Patch2: iptables-apply-mktemp-fix.patch
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
@@ -41,8 +41,7 @@
 %if 0%{?fedora_version} || 0%{?centos_version}
 BuildRequires:  sgml-common
 %endif
-BuildRequires:  autoconf
-BuildRequires:  automake
+#git#BuildRequires:  autoconf, automake = 1.10
 BuildRequires:  libtool
 BuildRequires:  pkgconfig = 0.21
 %if 0%{?suse_version}

++ iptables-1.4.13.tar.bz2 - iptables-1.4.14.tar.bz2 ++
 5078 lines of diff (skipped)
retrying with extended exclude list
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' --exclude Makefile.in --exclude configure --exclude 
config.guess --exclude '*.pot' --exclude mkinstalldirs --exclude aclocal.m4 
--exclude config.sub --exclude depcomp --exclude install-sh --exclude ltmain.sh 
old/iptables-1.4.13/build-aux/compile new/iptables-1.4.14/build-aux/compile
--- old/iptables-1.4.13/build-aux/compile   2012-03-27 13:33:49.0 
+0200
+++ new/iptables-1.4.14/build-aux/compile   2012-05-26 18:45:19.0 
+0200
@@ -1,10 +1,10 @@
 #! /bin/sh
-# Wrapper for compilers which do not understand `-c -o'.
+# Wrapper for compilers which do not understand '-c -o'.
 
-scriptversion=2009-10-06.20; # UTC
+scriptversion=2012-01-04.17; # UTC
 
-# Copyright (C) 1999, 2000, 2003, 2004, 2005, 2009  Free Software
-# Foundation, Inc.
+# Copyright (C) 1999, 2000, 2003, 2004, 2005, 2009, 2010, 2012 Free
+# Software Foundation, Inc.
 # Written by Tom Tromey tro...@cygnus.com.
 #
 # This program is free software; you can redistribute it and/or modify
@@ -29,21 +29,186 @@
 # bugs to bug-autom...@gnu.org or send patches to
 # automake-patc...@gnu.org.
 
+nl='
+'
+
+# We need space, tab and new line, in precisely that order.  Quoting is
+# there to prevent tools from complaining about whitespace usage.
+IFS=$nl
+
+file_conv=
+
+# func_file_conv build_file lazy
+# Convert a $build file to $host form and store it in $file
+# Currently only supports Windows hosts. If the determined conversion
+# type is listed in (the comma separated) LAZY, no conversion will
+# take place.
+func_file_conv ()
+{
+  file=$1
+  case $file in
+/ | /[!/]*) # absolute file, and not a UNC file
+  if test -z $file_conv; then
+   # lazily determine how to convert abs files
+   case `uname -s` in
+ MINGW*)
+   file_conv=mingw
+   ;;
+ CYGWIN*)
+   file_conv=cygwin
+   ;;
+ *)
+   file_conv=wine
+   ;;
+   esac
+  fi
+  case $file_conv/,$2, in
+   *,$file_conv,*)
+ ;;
+   mingw/*)
+ file=`cmd //C echo $file  | sed -e 's/\(.*\)  *$/\1/'`
+ ;;
+   cygwin/*)
+ file=`cygpath -m $file || echo $file`
+ ;;
+   wine/*)
+ file=`winepath -w $file || echo $file`
+ ;;
+  

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2012-03-29 07:42:57

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is iptables, Maintainer is vci...@suse.com

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2012-01-06 
11:44:58.0 +0100
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2012-03-29 
07:42:59.0 +0200
@@ -1,0 +2,6 @@
+Tue Mar 27 13:29:31 UTC 2012 - jeng...@medozas.de
+
+- Update to new upstream release 1.4.13
+* Add the rpfilter, nfacct and IPv6 ECN extensions
+
+---

Old:

  iptables-1.4.12.90.tar.xz

New:

  iptables-1.4.13.tar.bz2
  iptables-1.4.13.tar.bz2.sig



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.mn1GDP/_old  2012-03-29 07:43:00.0 +0200
+++ /var/tmp/diff_new_pack.mn1GDP/_new  2012-03-29 07:43:00.0 +0200
@@ -16,13 +16,12 @@
 #
 
 
-
 Name:   iptables
 %define lname_ipq  libipq0
 %define lname_iptc libiptc0
 %define lname_xt   libxtables7
-Version:1.4.12.90
-Release:1
+Version:1.4.13
+Release:0
 Summary:IP Packet Filter Administration utilities
 License:GPL-2.0+
 Group:  Productivity/Networking/Security
@@ -31,7 +30,8 @@
 #DL-URL:   ftp://ftp.netfilter.org/pub/iptables/
 #Git-Web:  http://git.netfilter.org/
 #Git-Clone:git://git.netfilter.org/iptables
-Source: %name-%version.tar.xz
+Source: %name-%version.tar.bz2
+Source2:%name-%version.tar.bz2.sig
 Patch1: iptables-batch.patch
 Patch2: iptables-apply-mktemp-fix.patch
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
@@ -41,9 +41,17 @@
 %if 0%{?fedora_version} || 0%{?centos_version}
 BuildRequires:  sgml-common
 %endif
-BuildRequires:  autoconf automake fdupes libtool
-BuildRequires:  pkgconfig = 0.23 pkgconfig(libnfnetlink) = 1.0.0
-BuildRequires:  xz
+BuildRequires:  autoconf
+BuildRequires:  automake
+BuildRequires:  libtool
+BuildRequires:  pkgconfig = 0.21
+%if 0%{?suse_version}
+BuildRequires:  fdupes
+BuildRequires:  pkgconfig(libnfnetlink) = 1.0.0
+%endif
+%if 0%{?fedora} || 0%{?rhel}
+BuildRequires:  libnfnetlink-devel = 1.0.0
+%endif
 
 %description
 iptables is used to set up, maintain, and inspect the tables of IP
@@ -123,7 +131,7 @@
 %if 0%{?__xz:1}
 %setup -q
 %else
-tar -xf %{S:0} --use=xz;
+tar -xf %{S:0} --use=bzip2;
 %setup -DTq
 %endif
 %patch -P 1 -p1

++ iptables-1.4.12.90.tar.xz - iptables-1.4.13.tar.bz2 ++
 91048 lines of diff (skipped)

-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2012-01-06 11:44:54

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is iptables, Maintainer is pu...@suse.com

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2011-12-31 
17:19:30.0 +0100
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2012-01-06 
11:44:58.0 +0100
@@ -1,0 +2,11 @@
+Mon Jan  2 21:30:38 UTC 2012 - jeng...@medozas.de
+
+- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
+  but master branch), tag locally as 1.4.12.90.
+* ships missing pkgconfig files, compile fix for libnfnetlink
+* libxt_NFQUEUE: fix --queue-bypass ipt-save output
+* libxt_connbytes: fix handling of --connbytes FROM
+* libxt_recent: Add support for --reap option
+- split iptables-devel into libiptc-devel and libxtables-devel
+
+---

Old:

  iptables-1.4.12.1+16.tar.xz

New:

  iptables-1.4.12.90.tar.xz



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.tCUwaI/_old  2012-01-06 11:44:59.0 +0100
+++ /var/tmp/diff_new_pack.tCUwaI/_new  2012-01-06 11:44:59.0 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package iptables
 #
-# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -15,59 +15,110 @@
 # Please submit bugfixes or comments via http://bugs.opensuse.org/
 #
 
+
+
 Name:   iptables
-Version:1.4.12.1+16
-Release:0
-%define xt_sover   7
-Summary:IP Packet Filter Administration
+%define lname_ipq  libipq0
+%define lname_iptc libiptc0
+%define lname_xt   libxtables7
+Version:1.4.12.90
+Release:1
+Summary:IP Packet Filter Administration utilities
 License:GPL-2.0+
 Group:  Productivity/Networking/Security
+
+Url:http://netfilter.org/
 #DL-URL:   ftp://ftp.netfilter.org/pub/iptables/
 #Git-Web:  http://git.netfilter.org/
 #Git-Clone:git://git.netfilter.org/iptables
 Source: %name-%version.tar.xz
 Patch1: iptables-batch.patch
 Patch2: iptables-apply-mktemp-fix.patch
-Url:http://netfilter.org/
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 %if 0%{?suse_version}
 BuildRequires:  sgmltool
 %endif
 %if 0%{?fedora_version} || 0%{?centos_version}
 BuildRequires:  sgml-common
-Provides:   iptables-ipv6 = %version-%release
-Obsoletes:  iptables-ipv6  %version-%release
 %endif
-BuildRequires:  automake
-BuildRequires:  fdupes
-BuildRequires:  libnfnetlink-devel
-BuildRequires:  pkgconfig
+BuildRequires:  autoconf automake fdupes libtool
+BuildRequires:  pkgconfig = 0.23 pkgconfig(libnfnetlink) = 1.0.0
 BuildRequires:  xz
 
 %description
-Iptables is used to set up, maintain, and inspect the tables of IP
+iptables is used to set up, maintain, and inspect the tables of IP
 packet filter rules in the Linux kernel. This version requires kernel
 2.4.0 or newer.
 
-%package devel
-Summary:Libraries, Headers and Development Man Pages for iptables
+%package -n %lname_ipq
+Summary:Library to interface with the (old) ip_queue kernel mechanism
+Group:  System/Libraries
+
+%description -n %lname_ipq
+The Netfilter project provides a mechanism (ip_queue) for passing
+packets out of the stack for queueing to userspace, then receiving
+these packets back into the kernel with a verdict specifying what to
+do with the packets (such as ACCEPT or DROP). These packets may also
+be modified in userspace prior to reinjection back into the kernel.
+
+ip_queue/libipq is obsoleted by nf_queue/libnetfilter_queue!
+
+%package -n libipq-devel
+Summary:Development files for the ip_queue kernel mechanism
 Group:  Development/Libraries/C and C++
-Requires:   %name = %version
-Requires:   libxtables%xt_sover = %version
+Requires:   %lname_ipq = %version
+
+%description -n libipq-devel
+The Netfilter project provides a mechanism (ip_queue) for passing
+packets out of the stack for queueing to userspace, then receiving
+these packets back into the kernel with a verdict specifying what to
+do with the packets (such as ACCEPT or DROP). These packets may also
+be modified in userspace prior to reinjection back into the kernel.
+
+ip_queue/libipq is obsoleted by nf_queue/libnetfilter_queue!
+
+%package -n %lname_iptc
+Summary:Library for 

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory 
checked in at 2011-12-31 17:19:29

Comparing /work/SRC/openSUSE:Factory/iptables (Old)
 and  /work/SRC/openSUSE:Factory/.iptables.new (New)


Package is iptables, Maintainer is pu...@suse.com

Changes:

--- /work/SRC/openSUSE:Factory/iptables/iptables.changes2011-10-05 
01:45:43.0 +0200
+++ /work/SRC/openSUSE:Factory/.iptables.new/iptables.changes   2011-12-31 
17:19:30.0 +0100
@@ -1,0 +2,10 @@
+Wed Dec 28 09:50:23 UTC 2011 - pu...@suse.com
+
+- iptables-apply-mktemp-fix.patch (bnc#730161) 
+
+---
+Wed Nov 30 14:28:11 UTC 2011 - co...@suse.com
+
+- add automake as buildrequire to avoid implicit dependency
+
+---

New:

  iptables-apply-mktemp-fix.patch



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.D3mHt1/_old  2011-12-31 17:19:31.0 +0100
+++ /var/tmp/diff_new_pack.D3mHt1/_new  2011-12-31 17:19:31.0 +0100
@@ -15,22 +15,20 @@
 # Please submit bugfixes or comments via http://bugs.opensuse.org/
 #
 
-
-
 Name:   iptables
-License:GPLv2+
-Group:  Productivity/Networking/Security
 Version:1.4.12.1+16
-Release:1
+Release:0
 %define xt_sover   7
 Summary:IP Packet Filter Administration
-
+License:GPL-2.0+
+Group:  Productivity/Networking/Security
 #DL-URL:   ftp://ftp.netfilter.org/pub/iptables/
 #Git-Web:  http://git.netfilter.org/
 #Git-Clone:git://git.netfilter.org/iptables
 Source: %name-%version.tar.xz
 Patch1: iptables-batch.patch
-URL:http://netfilter.org/
+Patch2: iptables-apply-mktemp-fix.patch
+Url:http://netfilter.org/
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 %if 0%{?suse_version}
 BuildRequires:  sgmltool
@@ -40,7 +38,11 @@
 Provides:   iptables-ipv6 = %version-%release
 Obsoletes:  iptables-ipv6  %version-%release
 %endif
-BuildRequires:  fdupes libnfnetlink-devel pkgconfig xz
+BuildRequires:  automake
+BuildRequires:  fdupes
+BuildRequires:  libnfnetlink-devel
+BuildRequires:  pkgconfig
+BuildRequires:  xz
 
 %description
 Iptables is used to set up, maintain, and inspect the tables of IP
@@ -74,6 +76,7 @@
 %setup -DTq
 %endif
 %patch -P 1 -p1
+%patch2 -p1
 
 %build
 if [ ! -e configure ]; then


++ iptables-apply-mktemp-fix.patch ++
Index: iptables-1.4.12.1+16/iptables/iptables-apply
===
--- iptables-1.4.12.1+16.orig/iptables/iptables-apply
+++ iptables-1.4.12.1+16/iptables/iptables-apply
@@ -111,7 +111,7 @@ if [[ ! -r $FILE ]]; then
exit 2
 fi
 
-COMMANDS=(tempfile $SAVE $RESTORE)
+COMMANDS=(mktemp $SAVE $RESTORE)
 
 for cmd in ${COMMANDS[@]}; do
if ! command -v $cmd /dev/null; then
@@ -122,7 +122,7 @@ done
 
 umask 0700
 
-TMPFILE=$(tempfile -p iptap)
+TMPFILE=$(mktemp)
 trap rm -f $TMPFILE EXIT 1 2 3 4 5 6 7 8 10 11 12 13 14 15
 
 if ! $SAVE $TMPFILE; then
-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory
checked in at Wed Oct 5 01:45:48 CEST 2011.




--- openSUSE:Factory/iptables/iptables.changes  2011-09-23 02:03:40.0 
+0200
+++ /mounts/work_src_done/STABLE/iptables/iptables.changes  2011-10-05 
01:16:05.0 +0200
@@ -1,0 +2,9 @@
+Tue Oct  4 23:01:57 UTC 2011 - jeng...@medozas.de
+
+- Update to a newer git snapshot of the stable branch
+  (to v1.4.12.1-16-gd2b0eaa)
+* resolve failure to load extensions that depend on libm.so
+- rediff of iptables-batch due to fuzz
+- relax runtime requires
+
+---

calling whatdependson for head-i586


Old:

  iptables-1.4.12.1.tar.xz

New:

  iptables-1.4.12.1+16.tar.xz



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.0Y20PT/_old  2011-10-05 01:45:41.0 +0200
+++ /var/tmp/diff_new_pack.0Y20PT/_new  2011-10-05 01:45:41.0 +0200
@@ -15,13 +15,12 @@
 # Please submit bugfixes or comments via http://bugs.opensuse.org/
 #
 
-# norootforbuild
 
 
 Name:   iptables
 License:GPLv2+
 Group:  Productivity/Networking/Security
-Version:1.4.12.1
+Version:1.4.12.1+16
 Release:1
 %define xt_sover   7
 Summary:IP Packet Filter Administration
@@ -31,7 +30,7 @@
 #Git-Clone:git://git.netfilter.org/iptables
 Source: %name-%version.tar.xz
 Patch1: iptables-batch.patch
-Url:http://netfilter.org/
+URL:http://netfilter.org/
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 %if 0%{?suse_version}
 BuildRequires:  sgmltool
@@ -49,11 +48,10 @@
 2.4.0 or newer.
 
 %package devel
-
 Summary:Libraries, Headers and Development Man Pages for iptables
 Group:  Development/Libraries/C and C++
-Requires:   %name = %version-%release
-Requires:   libxtables%xt_sover = %version-%release
+Requires:   %name = %version
+Requires:   libxtables%xt_sover = %version
 
 %description devel
 These libraries are needed to compile
@@ -61,7 +59,6 @@
 - programs using libipq
 
 %package -n libxtables%xt_sover
-
 Summary:Library for functions shared between iptables
 Group:  System/Libraries
 

++ iptables-batch.patch ++
--- /var/tmp/diff_new_pack.0Y20PT/_old  2011-10-05 01:45:41.0 +0200
+++ /var/tmp/diff_new_pack.0Y20PT/_new  2011-10-05 01:45:41.0 +0200
@@ -3,13 +3,13 @@
  iptables/iptables-batch.c |  468 
++
  2 files changed, 477 insertions(+), 1 deletion(-)
 
-Index: iptables/iptables/Makefile.am
+Index: iptables-1.4.12.1+16/iptables/Makefile.am
 ===
 iptables.orig/iptables/Makefile.am
-+++ iptables/iptables/Makefile.am
-@@ -36,7 +36,15 @@ endif
+--- iptables-1.4.12.1+16.orig/iptables/Makefile.am
 iptables-1.4.12.1+16/iptables/Makefile.am
+@@ -24,7 +24,15 @@ endif
  xtables_multi_SOURCES += xshared.c
- xtables_multi_LDADD   += libxtables.la -lm
+ xtables_multi_LDADD   += ../libxtables/libxtables.la -lm
  
 -sbin_PROGRAMS= xtables-multi
 +iptables_batch_SOURCES= iptables-batch.c iptables.c xshared.c
@@ -24,10 +24,10 @@
  man_MANS = iptables.8 iptables-restore.8 iptables-save.8 \
 iptables-xml.1 ip6tables.8 ip6tables-restore.8 \
 ip6tables-save.8
-Index: iptables/iptables/iptables-batch.c
+Index: iptables-1.4.12.1+16/iptables/iptables-batch.c
 ===
 --- /dev/null
-+++ iptables/iptables/iptables-batch.c
 iptables-1.4.12.1+16/iptables/iptables-batch.c
 @@ -0,0 +1,468 @@
 +/*
 + * Author: Ludwig Nussel ludwig.nus...@suse.de

continue with q...



Remember to have fun...

-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory
checked in at Mon Sep 5 16:32:03 CEST 2011.




--- iptables/iptables.changes   2011-07-22 15:17:36.0 +0200
+++ iptables/iptables.changes   2011-09-02 12:39:35.0 +0200
@@ -1,0 +2,24 @@
+Thu Sep  1 17:09:05 UTC 2011 - jeng...@medozas.de
+
+- Update to new upstream release 1.4.12.1
+* regression fixes for the new (stricter) command-line parser
+- restore --includedir= in spec file
+- Put libxtables into its own subpackage so that one does not need
+  a lockstep update of iproute2 on a new iptables package
+- Remove redundant fields (Autoreqprov defaults to on, License is
+  inherited from main package)
+
+---
+Sat Aug 13 01:39:38 CEST 2011 - dr...@suse.de
+
+- include path is /usr/include
+
+---
+Mon Aug  8 00:42:53 UTC 2011 - jeng...@medozas.de
+
+- Put include files into a separate directory to flag up missing
+  CFLAGS. libipq.pc will now be provided.
+- Enable build of nfnl_osf, a tool to upload OS fingerprints to
+  the kernel for use with xt_osf.
+
+---

calling whatdependson for head-i586


Old:

  iptables-1.4.12.tar.xz

New:

  iptables-1.4.12.1.tar.xz



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.Q1A97H/_old  2011-09-05 16:30:51.0 +0200
+++ /var/tmp/diff_new_pack.Q1A97H/_new  2011-09-05 16:30:51.0 +0200
@@ -21,8 +21,9 @@
 Name:   iptables
 License:GPLv2+
 Group:  Productivity/Networking/Security
-Version:1.4.12
+Version:1.4.12.1
 Release:1
+%define xt_sover   7
 Summary:IP Packet Filter Administration
 
 #DL-URL:   ftp://ftp.netfilter.org/pub/iptables/
@@ -32,7 +33,15 @@
 Patch1: iptables-batch.patch
 Url:http://netfilter.org/
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
-BuildRequires:  pkg-config sgmltool xz
+%if 0%{?suse_version}
+BuildRequires:  sgmltool
+%endif
+%if 0%{?fedora_version} || 0%{?centos_version}
+BuildRequires:  sgml-common
+Provides:   iptables-ipv6 = %version-%release
+Obsoletes:  iptables-ipv6  %version-%release
+%endif
+BuildRequires:  fdupes libnfnetlink-devel pkgconfig xz
 
 %description
 Iptables is used to set up, maintain, and inspect the tables of IP
@@ -40,19 +49,33 @@
 2.4.0 or newer.
 
 %package devel
-License:GPLv2+
+
 Summary:Libraries, Headers and Development Man Pages for iptables
 Group:  Development/Libraries/C and C++
-AutoReqProv:on
-Requires:   %name = %version
+Requires:   %name = %version-%release
+Requires:   libxtables%xt_sover = %version-%release
 
 %description devel
 These libraries are needed to compile
 - additional third-party extensions
 - programs using libipq
 
+%package -n libxtables%xt_sover
+
+Summary:Library for functions shared between iptables
+Group:  System/Libraries
+
+%description -n libxtables%xt_sover
+This package contains shared functions exposed for integration with
+iproute2's m_xt.
+
 %prep
+%if 0%{?__xz:1}
 %setup -q
+%else
+tar -xf %{S:0} --use=xz;
+%setup -DTq
+%endif
 %patch -P 1 -p1
 
 %build
@@ -61,8 +84,9 @@
 fi
 # bnc#561793 - do not include unclean module in iptables manpage
 rm -f extensions/libipt_unclean.man
-%configure \
---enable-libipq
+# includedir is overriden on purpose to detect projects that
+# fail to include libxtables_CFLAGS
+%configure --includedir=%_includedir/%name-%version --enable-libipq
 make %{?_smp_mflags}
 
 %install
@@ -71,11 +95,18 @@
 install -m0755 iptables/iptables-apply %buildroot%_sbindir/
 install -m0644 iptables/iptables-apply.8 %buildroot%_mandir/man8/
 find %buildroot -iname *.la -delete
+%if 0%{?suse_version}
+%fdupes %buildroot
+%endif
 
 %post -p /sbin/ldconfig
 
 %postun -p /sbin/ldconfig
 
+%post -n libxtables%xt_sover -p /sbin/ldconfig
+
+%postun -n libxtables%xt_sover -p /sbin/ldconfig
+
 %files
 %defattr(-,root,root)
 %doc COPYING INCOMPATIBILITIES
@@ -85,15 +116,20 @@
 %_sbindir/iptables*
 %_sbindir/ip6tables*
 %_sbindir/xtables*
+%_sbindir/nfnl_osf
 %_libdir/xtables
-%_libdir/*.so.*
+%_libdir/libip*.so.*
+%_datadir/xtables
 
 %files devel
 %defattr(-,root,root)
 %doc %_mandir/man3/*
 %_includedir/*
 %_libdir/*.so
-%_libdir/pkgconfig/xtables.pc
-%_libdir/pkgconfig/libiptc.pc
+%_libdir/pkgconfig/*.pc
+
+%files -n libxtables%xt_sover
+%defattr(-,root,root)
+%_libdir/libxtables.so.*
 
 %changelog






Remember to have fun...

-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit iptables for openSUSE:Factory

[h_root]

Hello community,

here is the log from the commit of package iptables for openSUSE:Factory
checked in at Tue Jul 26 08:58:06 CEST 2011.




--- iptables/iptables.changes   2011-05-30 02:02:46.0 +0200
+++ /mounts/work_src_done/STABLE/iptables/iptables.changes  2011-07-22 
15:17:36.0 +0200
@@ -1,0 +2,24 @@
+Fri Jul 22 13:12:50 UTC 2011 - jeng...@medozas.de
+
+- Update to new upstream release 1.4.12
+* Include lost match/target descriptions in manpage again
+* libxt_LOG: fix ignorance of all but the last flag
+* libxt_HL: restore hl-* option names
+* libxt_hashlimit: use a more obvious expiry value by default
+* libxt_RATEEST: fix find-and-delete of rules with -j RATEEST
+* ipv4: restore negation for the -f option
+* Reject empty host specifications (e.g. -s )
+* libxt_conntrack: restore network byteordering for ABI v1  v2
+* Documentation updates
+
+---
+Wed Jun  8 10:20:57 UTC 2011 - jeng...@medozas.de
+
+- Update to snapshot 1.4.11+git16
+* libxt_owner: restore inversion support
+* option: fix ignored negation before implicit extension loading
+* build: fix installation of symlinks
+* build: fix absence of xml translator in IPv6-only builds
+- Drop merged patches
+
+---

calling whatdependson for head-i586


Old:

  71e402b-fix-install-symlinks.diff
  874bd762-owner-restore-invert.diff
  iptables-1.4.11.tar.xz

New:

  iptables-1.4.12.tar.xz



Other differences:
--
++ iptables.spec ++
--- /var/tmp/diff_new_pack.DizZJp/_old  2011-07-26 08:50:49.0 +0200
+++ /var/tmp/diff_new_pack.DizZJp/_new  2011-07-26 08:50:49.0 +0200
@@ -21,16 +21,15 @@
 Name:   iptables
 License:GPLv2+
 Group:  Productivity/Networking/Security
-Version:1.4.11
+Version:1.4.12
 Release:1
 Summary:IP Packet Filter Administration
 
+#DL-URL:   ftp://ftp.netfilter.org/pub/iptables/
 #Git-Web:  http://git.netfilter.org/
 #Git-Clone:git://git.netfilter.org/iptables
 Source: %name-%version.tar.xz
 Patch1: iptables-batch.patch
-Patch2: 874bd762-owner-restore-invert.diff
-Patch3: 71e402b-fix-install-symlinks.diff
 Url:http://netfilter.org/
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  pkg-config sgmltool xz
@@ -54,7 +53,7 @@
 
 %prep
 %setup -q
-%patch -P 1 -P 2 -P 3 -p1
+%patch -P 1 -p1
 
 %build
 if [ ! -e configure ]; then
@@ -69,8 +68,8 @@
 %install
 make DESTDIR=%buildroot install
 # iptables-apply is not installed by upstream Makefile
-install -m0755 iptables-apply %buildroot%_sbindir/
-install -m0644 iptables-apply.8 %buildroot%_mandir/man8/
+install -m0755 iptables/iptables-apply %buildroot%_sbindir/
+install -m0644 iptables/iptables-apply.8 %buildroot%_mandir/man8/
 find %buildroot -iname *.la -delete
 
 %post -p /sbin/ldconfig
@@ -80,13 +79,13 @@
 %files
 %defattr(-,root,root)
 %doc COPYING INCOMPATIBILITIES
+%doc %_mandir/man1/*
 %doc %_mandir/man8/*
 %_bindir/iptables*
 %_sbindir/iptables*
 %_sbindir/ip6tables*
 %_sbindir/xtables*
-%dir %_libexecdir/xtables
-%_libexecdir/xtables/*
+%_libdir/xtables
 %_libdir/*.so.*
 
 %files devel

++ iptables-batch.patch ++
--- /var/tmp/diff_new_pack.DizZJp/_old  2011-07-26 08:50:49.0 +0200
+++ /var/tmp/diff_new_pack.DizZJp/_new  2011-07-26 08:50:49.0 +0200
@@ -1,13 +1,13 @@
 ---
- Makefile.am  |   10 +
- iptables-batch.c |  468 
+++
+ iptables/Makefile.am  |   10 
+ iptables/iptables-batch.c |  468 
++
  2 files changed, 477 insertions(+), 1 deletion(-)
 
-Index: iptables-1.4.11/Makefile.am
+Index: iptables/iptables/Makefile.am
 ===
 iptables-1.4.11.orig/Makefile.am
-+++ iptables-1.4.11/Makefile.am
-@@ -59,7 +59,15 @@ endif
+--- iptables.orig/iptables/Makefile.am
 iptables/iptables/Makefile.am
+@@ -36,7 +36,15 @@ endif
  xtables_multi_SOURCES += xshared.c
  xtables_multi_LDADD   += libxtables.la -lm
  
@@ -22,12 +22,12 @@
 +
 +sbin_PROGRAMS= xtables-multi iptables-batch ip6tables-batch
  man_MANS = iptables.8 iptables-restore.8 iptables-save.8 \
-iptables-xml.8 ip6tables.8 ip6tables-restore.8 \
+iptables-xml.1 ip6tables.8 ip6tables-restore.8 \
 ip6tables-save.8
-Index: iptables-1.4.11/iptables-batch.c
+Index: iptables/iptables/iptables-batch.c
 ===
 --- /dev/null
-+++ iptables-1.4.11/iptables-batch.c
 iptables/iptables/iptables-batch.c
 @@ -0,0 +1,468 @@
 +/*
 + * Author: Ludwig Nussel ludwig.nus...@suse.de