1 |
%define _disable_ld_no_undefined 1 |
2 |
|
3 |
%define major 12 |
4 |
%define libname %mklibname iptables %{major} |
5 |
%define develname %mklibname -d iptables |
6 |
|
7 |
%define iptc_develname %mklibname -d iptc |
8 |
|
9 |
%define ipq_major 0 |
10 |
%define ipq_libname %mklibname ipq %{ipq_major} |
11 |
%define ipq_develname %mklibname -d ipq |
12 |
|
13 |
%define ip4tc_major 2 |
14 |
%define ip4tc_libname %mklibname ip4tc %{ip4tc_major} |
15 |
%define ip4tc_develname %mklibname -d ip4tc |
16 |
|
17 |
%define ip6tc_major 2 |
18 |
%define ip6tc_libname %mklibname ip6tc %{ip6tc_major} |
19 |
%define ip6tc_develname %mklibname -d ip6tc |
20 |
|
21 |
# install init scripts to /usr/libexec with systemd |
22 |
%define script_path %{_libexecdir} |
23 |
|
24 |
Summary: Tools for managing Linux kernel packet filtering capabilities |
25 |
Name: iptables |
26 |
Version: 1.8.7 |
27 |
Release: %mkrel 1 |
28 |
License: GPLv2+ |
29 |
Group: System/Kernel and hardware |
30 |
URL: https://www.netfilter.org/ |
31 |
Source0: https://www.netfilter.org/projects/iptables/files/%{name}-%{version}.tar.bz2 |
32 |
Source1: iptables.init |
33 |
Source2: ip6tables.init |
34 |
Source3: iptables.config |
35 |
Source4: ip6tables.config |
36 |
Source5: iptables.service |
37 |
# S101 used to be in the added patches |
38 |
Source101: libipt_IFWLOG.c |
39 |
# (oe) psd comes from iptables-1.3.7, was removed in iptables-1.3.8 |
40 |
Source102: libipt_psd.c |
41 |
Source103: libipt_psd.man |
42 |
Patch0: iptables-1.2.8-libiptc.h.patch |
43 |
Patch1: iptables-1.8.2-dont_read_garbage.patch |
44 |
Patch101: iptables-IFWLOG_extension.diff |
45 |
Patch102: iptables-psd.diff |
46 |
Provides: userspace-ipfilter = %{version} |
47 |
BuildRequires: bison |
48 |
BuildRequires: flex |
49 |
BuildRequires: xz |
50 |
BuildRequires: pkgconfig(libmnl) >= 1.0 |
51 |
BuildRequires: pkgconfig(libnftnl) >= 1.1.6 |
52 |
BuildRequires: pkgconfig(libnfnetlink) |
53 |
BuildRequires: pkgconfig(libnetfilter_conntrack) >= 1.0.4 |
54 |
BuildRequires: pcap-devel |
55 |
BuildRequires: kernel-headers |
56 |
Requires(post): rpm-helper >= 0.24.8-1 |
57 |
Requires(preun): rpm-helper >= 0.24.8-1 |
58 |
Obsoletes: %{name} < 1.4.3.2 |
59 |
Obsoletes: %{name}-ipv6 < 1.4.1.1-0.5 |
60 |
Provides: %{name}-ipv6 |
61 |
BuildRequires: systemd-units |
62 |
Requires(post): initscripts |
63 |
Requires(post): sysvinit |
64 |
Requires(preun): sysvinit |
65 |
Requires(postun): sysvinit |
66 |
Provides: ebtables = 2.0.10.4-10 |
67 |
Obsoletes: ebtables < 2.0.10.4-9 |
68 |
Provides: arptables = 0.0.5-3 |
69 |
Obsoletes: arptables < 0.0.5-2 |
70 |
|
71 |
%description |
72 |
iptables controls the Linux kernel network packet filtering code. It allows you |
73 |
to set up firewalls and IP masquerading, etc. |
74 |
|
75 |
Install iptables if you need to set up firewalling for your network. |
76 |
|
77 |
%package nft |
78 |
Summary: NFT Packet Filter Administration utilties in the style of Xtables |
79 |
Group: System/Kernel and hardware |
80 |
Conflicts: ebtables < 2.0.10.4-9 |
81 |
|
82 |
%description nft |
83 |
The programs shipped in this subpackage behave like iptables on the |
84 |
command line, but instead edit the rules of the NFT packet filter in |
85 |
the Linux kernel. Linux kernel 4.2 or newer is recommended to exploit |
86 |
all features. |
87 |
|
88 |
%package -n %{libname} |
89 |
Summary: Shared iptables library |
90 |
Group: System/Libraries |
91 |
Conflicts: %mklibname %{name} 1 |
92 |
|
93 |
%description -n %{libname} |
94 |
iptables controls the Linux kernel network packet filtering code. It allows you |
95 |
to set up firewalls and IP masquerading, etc. |
96 |
|
97 |
This package contains the shared iptables library. |
98 |
|
99 |
%package -n %{develname} |
100 |
Summary: Static library and header files for the iptables library |
101 |
Group: Development/C |
102 |
Requires: kernel-headers |
103 |
Requires: %{libname} = %{version}-%{release} |
104 |
Provides: iptables-devel = %{version} |
105 |
Obsoletes: iptables-devel < 1.4.2 |
106 |
|
107 |
%description -n %{develname} |
108 |
iptables controls the Linux kernel network packet filtering code. It allows you |
109 |
to set up firewalls and IP masquerading, etc. |
110 |
|
111 |
This package contains the static iptables library. |
112 |
|
113 |
|
114 |
# ipq |
115 |
%package -n %{ipq_libname} |
116 |
Summary: Shared iptables library |
117 |
Group: System/Libraries |
118 |
Obsoletes: %{mklibname iptables 1} < 1.4.3.2 |
119 |
|
120 |
%description -n %{ipq_libname} |
121 |
iptables controls the Linux kernel network packet filtering code. It allows you |
122 |
to set up firewalls and IP masquerading, etc. |
123 |
|
124 |
This package contains the ipq library. |
125 |
|
126 |
%package -n %{ipq_develname} |
127 |
Summary: Static library and header files for the iptables library |
128 |
Group: Development/C |
129 |
Requires: kernel-headers |
130 |
Requires: %{ipq_libname} = %{version}-%{release} |
131 |
Requires: %{ipq_develname} = %{version}-%{release} |
132 |
Provides: iptables-ipq-devel = %{version} |
133 |
|
134 |
%description -n %{ipq_develname} |
135 |
iptables controls the Linux kernel network packet filtering code. It allows you |
136 |
to set up firewalls and IP masquerading, etc. |
137 |
|
138 |
This package contains the ipq library. |
139 |
|
140 |
#iptc |
141 |
%package -n %{iptc_develname} |
142 |
Summary: Static library and header files for the iptables library |
143 |
Group: Development/C |
144 |
Requires: kernel-headers |
145 |
Provides: iptables-iptc-devel = %{version} |
146 |
|
147 |
%description -n %{iptc_develname} |
148 |
iptables controls the Linux kernel network packet filtering code. It allows you |
149 |
to set up firewalls and IP masquerading, etc. |
150 |
|
151 |
This package contains the IPTC library. |
152 |
|
153 |
# ip4tc |
154 |
%package -n %{ip4tc_libname} |
155 |
Summary: Shared iptables library |
156 |
Group: System/Libraries |
157 |
Obsoletes: %{mklibname iptables 1} < 1.4.3.2 |
158 |
|
159 |
%description -n %{ip4tc_libname} |
160 |
iptables controls the Linux kernel network packet filtering code. It allows you |
161 |
to set up firewalls and IP masquerading, etc. |
162 |
|
163 |
This package contains the IP4TC library. |
164 |
|
165 |
%package -n %{ip4tc_develname} |
166 |
Summary: Static library and header files for the iptables library |
167 |
Group: Development/C |
168 |
Requires: kernel-headers |
169 |
Requires: %{ip4tc_libname} = %{version}-%{release} |
170 |
Requires: %{iptc_develname} = %{version}-%{release} |
171 |
Provides: iptables-ip6tc-devel = %{version} |
172 |
|
173 |
%description -n %{ip4tc_develname} |
174 |
iptables controls the Linux kernel network packet filtering code. It allows you |
175 |
to set up firewalls and IP masquerading, etc. |
176 |
|
177 |
This package contains the development files for IPTC library. |
178 |
|
179 |
# ip6tc |
180 |
%package -n %{ip6tc_libname} |
181 |
Summary: Shared iptables library |
182 |
Group: System/Libraries |
183 |
Obsoletes: %{mklibname iptables 1} < 1.4.3.2 |
184 |
|
185 |
%description -n %{ip6tc_libname} |
186 |
iptables controls the Linux kernel network packet filtering code. It allows you |
187 |
to set up firewalls and IP masquerading, etc. |
188 |
|
189 |
This package contains the IP6TC library. |
190 |
|
191 |
%package -n %{ip6tc_develname} |
192 |
Summary: Static library and header files for the iptables library |
193 |
Group: Development/C |
194 |
Requires: kernel-headers |
195 |
Requires: %{ip6tc_libname} = %{version}-%{release} |
196 |
Provides: iptables-ip6tc-devel = %{version} |
197 |
|
198 |
%description -n %{ip6tc_develname} |
199 |
iptables controls the Linux kernel network packet filtering code. It allows you |
200 |
to set up firewalls and IP masquerading, etc. |
201 |
|
202 |
This package contains the development files for IP6TC library. |
203 |
|
204 |
%prep |
205 |
|
206 |
%setup -q |
207 |
%patch0 -p1 |
208 |
%patch1 -p1 |
209 |
|
210 |
# (cg) NB the name "iptables.init" is important. See note in install below |
211 |
cp %{SOURCE1} iptables.init |
212 |
cp %{SOURCE2} ip6tables.init |
213 |
cp %{SOURCE3} iptables.sample |
214 |
cp %{SOURCE4} ip6tables.sample |
215 |
|
216 |
# fix libdir |
217 |
perl -pi -e "s|\@lib\@|%{_lib}|g" iptables.init |
218 |
|
219 |
# extensions |
220 |
install -m0644 %{SOURCE101} extensions/ |
221 |
# (oe) psd comes from iptables-1.3.7, was removed in iptables-1.3.8 |
222 |
install -m0644 %{SOURCE102} extensions/ |
223 |
install -m0644 %{SOURCE103} extensions/ |
224 |
|
225 |
%patch101 -p0 |
226 |
%patch102 -p0 |
227 |
|
228 |
find . -type f | xargs perl -pi -e "s,/usr/local,%{_prefix},g" |
229 |
|
230 |
# use the saner headers from the kernel |
231 |
rm -f include/linux/{kernel,types}.h |
232 |
|
233 |
# don't run /sbin/ldconfig |
234 |
perl -pi -e "s|/sbin/ldconfig|/bin/true|g" Makefile* |
235 |
|
236 |
%build |
237 |
export LIBS="-ldl" |
238 |
|
239 |
%serverbuild |
240 |
|
241 |
autoreconf -fis |
242 |
|
243 |
export CFLAGS="$CFLAGS -fPIC" |
244 |
export CXXFLAGS="$CXXFLAGS -fPIC" |
245 |
export FFLAGS="$FFLAGS -fPIC" |
246 |
|
247 |
%configure \ |
248 |
--bindir=/sbin \ |
249 |
--sbindir=/sbin \ |
250 |
--enable-devel \ |
251 |
--enable-libipq \ |
252 |
--enable-ipv4 \ |
253 |
--enable-ipv6 \ |
254 |
--with-ksource=%{_prefix}/src/linux \ |
255 |
--with-xtlibdir=/%{_lib}/iptables |
256 |
|
257 |
%make_build |
258 |
|
259 |
## make more devel libs (debian) |
260 |
#ar rcs libiptables.a iptables.o |
261 |
#ar rcs libip6tables.a ip6tables.o |
262 |
|
263 |
# hmm... |
264 |
ar rcs libiptc/libiptc.a libiptc/.libs/libip4tc.o libiptc/.libs/libip6tc.o |
265 |
|
266 |
%install |
267 |
%make_install |
268 |
|
269 |
# remove la file(s) |
270 |
rm -f %{buildroot}/%{_lib}/*.la |
271 |
rm -f %{buildroot}%{_libdir}/*.la |
272 |
|
273 |
# (oe) this in conjunction with the distro initscript will make it possible |
274 |
# to use development versions of the netfilter modules and with different |
275 |
# api:s. (according to blino) |
276 |
install -d %{buildroot}/%{_lib}/iptables.d |
277 |
mv %{buildroot}/%{_lib}/iptables %{buildroot}/%{_lib}/iptables.d/linux-2.6-main |
278 |
|
279 |
# move the shared libs |
280 |
mv %{buildroot}%{_libdir}/libxtables.so.%{major}* %{buildroot}/%{_lib}/ |
281 |
ln -snf /%{_lib}/libxtables.so.%{major} %{buildroot}%{_libdir}/libxtables.so |
282 |
|
283 |
mv %{buildroot}%{_libdir}/libip4tc.so.%{ip4tc_major}* %{buildroot}/%{_lib}/ |
284 |
ln -snf /%{_lib}/libip4tc.so.%{ip4tc_major} %{buildroot}%{_libdir}/libip4tc.so |
285 |
|
286 |
mv %{buildroot}%{_libdir}/libip6tc.so.%{ip6tc_major}* %{buildroot}/%{_lib}/ |
287 |
ln -snf /%{_lib}/libip6tc.so.%{ip6tc_major} %{buildroot}%{_libdir}/libip6tc.so |
288 |
|
289 |
# static development files |
290 |
install -d %{buildroot}%{_libdir} |
291 |
install -m0644 libiptc/libiptc.a %{buildroot}%{_libdir}/libiptc.a |
292 |
#install -m0644 libiptables.a %{buildroot}%{_libdir}/ |
293 |
#install -m0644 libip6tables.a %{buildroot}%{_libdir}/ |
294 |
|
295 |
# header development files |
296 |
install -d %{buildroot}%{_includedir}/{libipq,libiptc,libipulog} |
297 |
install -m0644 include/libipq/*.h %{buildroot}%{_includedir}/libipq/ |
298 |
install -m0644 include/libiptc/*.h %{buildroot}%{_includedir}/libiptc/ |
299 |
install -m0644 include/libipulog/*.h %{buildroot}%{_includedir}/libipulog/ |
300 |
|
301 |
# iptables and netfilter development files |
302 |
install -d %{buildroot}%{_includedir}/net/netfilter/ |
303 |
install -d %{buildroot}%{_includedir}/iptables |
304 |
#install -m0644 include/net/netfilter/*.h %{buildroot}%{_includedir}/net/netfilter/ |
305 |
install -m0644 include/ip*tables.h %{buildroot}%{_includedir}/ |
306 |
install -m0644 include/iptables/internal.h %{buildroot}%{_includedir}/iptables |
307 |
|
308 |
|
309 |
# (cg) NB the name "iptables.init" is important. The dracut usrmove convertfs |
310 |
# module will avoid a post-merge conflict by renaming the files to match this |
311 |
# naming convension. If this package is updated to change the names below, |
312 |
# you should also take care to update dracut and the convertfs module accordingly. |
313 |
install -d %{buildroot}%{script_path} |
314 |
install -m0755 iptables.init %{buildroot}%{script_path}/ |
315 |
install -m0755 ip6tables.init %{buildroot}%{script_path}/ |
316 |
|
317 |
# (tmb) add compat symlinks for ip(6)tbles-multi |
318 |
pushd %{buildroot}/sbin/ |
319 |
ln -snf xtables-nft-multi iptables-multi |
320 |
ln -snf xtables-nft-multi ip6tables-multi |
321 |
popd |
322 |
|
323 |
# install systemd service files |
324 |
install -d -m 755 %{buildroot}/lib/systemd/system |
325 |
install -c -m 644 %{SOURCE5} %{buildroot}/lib/systemd/system/ |
326 |
sed -e 's;iptables\.init;ip6tables.init;g' -e 's;IPv4;IPv6;g' < %{SOURCE5} > ip6tables.service |
327 |
install -c -m 644 ip6tables.service %{buildroot}/lib/systemd/system/ |
328 |
sed -i 's!@LIBDIR@!%{_libexecdir}!' %{buildroot}/lib/systemd/system/ip6tables.service |
329 |
sed -i 's!@LIBDIR@!%{_libexecdir}!' %{buildroot}/lib/systemd/system/iptables.service |
330 |
|
331 |
%post |
332 |
%_post_service iptables |
333 |
%_post_service ip6tables |
334 |
%{script_path}/iptables.init check |
335 |
|
336 |
%preun |
337 |
%_preun_service iptables |
338 |
%_preun_service ip6tables |
339 |
|
340 |
%triggerun -- iptables < 1.4.12.1 |
341 |
# Autostart |
342 |
/bin/systemctl --no-reload enable iptables.service >/dev/null 2>&1 ||: |
343 |
|
344 |
# Delete from sysv management, try to restart service |
345 |
/sbin/chkconfig --del iptables >/dev/null 2>&1 || : |
346 |
/bin/systemctl try-restart iptables.service >/dev/null 2>&1 || : |
347 |
|
348 |
# Autostart |
349 |
/bin/systemctl --no-reload enable ip6tables.service >/dev/null 2>&1 ||: |
350 |
|
351 |
# Delete from sysv management, try to restart service |
352 |
/sbin/chkconfig --del ip6tables >/dev/null 2>&1 || : |
353 |
/bin/systemctl try-restart ip6tables.service >/dev/null 2>&1 || : |
354 |
|
355 |
%files |
356 |
%defattr(-,root,root,0755) |
357 |
%doc INCOMPATIBILITIES iptables.sample ip6tables.sample |
358 |
%attr(0755,root,root) %{script_path}/ip* |
359 |
/lib/systemd/system/iptables.service |
360 |
/lib/systemd/system/ip6tables.service |
361 |
/sbin/iptables |
362 |
/sbin/iptables-apply |
363 |
/sbin/iptables-multi |
364 |
/sbin/iptables-restore |
365 |
/sbin/iptables-save |
366 |
/sbin/iptables-xml |
367 |
/sbin/nfnl_osf |
368 |
# ipv6 |
369 |
/sbin/ip6tables |
370 |
/sbin/ip6tables-apply |
371 |
/sbin/ip6tables-multi |
372 |
/sbin/ip6tables-restore |
373 |
/sbin/ip6tables-save |
374 |
/sbin/arptables |
375 |
/sbin/arptables-nft |
376 |
/sbin/arptables-nft-restore |
377 |
/sbin/arptables-nft-save |
378 |
/sbin/arptables-restore |
379 |
/sbin/arptables-save |
380 |
/sbin/ebtables |
381 |
/sbin/ebtables-nft |
382 |
/sbin/ebtables-nft-restore |
383 |
/sbin/ebtables-nft-save |
384 |
/sbin/ebtables-restore |
385 |
/sbin/ebtables-save |
386 |
/sbin/ip6tables-legacy |
387 |
/sbin/ip6tables-legacy-restore |
388 |
/sbin/ip6tables-legacy-save |
389 |
/sbin/ip6tables-nft |
390 |
/sbin/ip6tables-nft-restore |
391 |
/sbin/ip6tables-nft-save |
392 |
/sbin/iptables-legacy |
393 |
/sbin/iptables-legacy-restore |
394 |
/sbin/iptables-legacy-save |
395 |
/sbin/iptables-nft |
396 |
/sbin/iptables-nft-restore |
397 |
/sbin/iptables-nft-save |
398 |
/sbin/xtables-legacy-multi |
399 |
/sbin/xtables-monitor |
400 |
/sbin/xtables-nft-multi |
401 |
%dir /%{_lib}/iptables.d |
402 |
%dir /%{_lib}/iptables.d/linux-2.6-main |
403 |
/%{_lib}/iptables.d/linux-2.6-main/libarpt_mangle.so |
404 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_802_3.so |
405 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_among.so |
406 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_arp.so |
407 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_arpreply.so |
408 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_dnat.so |
409 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_ip.so |
410 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_ip6.so |
411 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_log.so |
412 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_mark.so |
413 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_mark_m.so |
414 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_nflog.so |
415 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_pkttype.so |
416 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_redirect.so |
417 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_snat.so |
418 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_stp.so |
419 |
/%{_lib}/iptables.d/linux-2.6-main/libebt_vlan.so |
420 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_ah.so |
421 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_CLUSTERIP.so |
422 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_DNAT.so |
423 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_ECN.so |
424 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_icmp.so |
425 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_IFWLOG.so |
426 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_LOG.so |
427 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_MASQUERADE.so |
428 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_NETMAP.so |
429 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_psd.so |
430 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_realm.so |
431 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_REDIRECT.so |
432 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_REJECT.so |
433 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_SNAT.so |
434 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_ttl.so |
435 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_TTL.so |
436 |
/%{_lib}/iptables.d/linux-2.6-main/libipt_ULOG.so |
437 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_AUDIT.so |
438 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_addrtype.so |
439 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_bpf.so |
440 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_cgroup.so |
441 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_CHECKSUM.so |
442 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_CLASSIFY.so |
443 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_cluster.so |
444 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_comment.so |
445 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_connbytes.so |
446 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_connlabel.so |
447 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_connlimit.so |
448 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_connmark.so |
449 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_CONNMARK.so |
450 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_CONNSECMARK.so |
451 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_conntrack.so |
452 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_cpu.so |
453 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_CT.so |
454 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_dccp.so |
455 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_devgroup.so |
456 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_dscp.so |
457 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_DSCP.so |
458 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_esp.so |
459 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_ecn.so |
460 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_hashlimit.so |
461 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_helper.so |
462 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_HMARK.so |
463 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_IDLETIMER.so |
464 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_ipcomp.so |
465 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_iprange.so |
466 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_ipvs.so |
467 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_LED.so |
468 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_length.so |
469 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_limit.so |
470 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_mac.so |
471 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_mark.so |
472 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_MARK.so |
473 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_multiport.so |
474 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_nfacct.so |
475 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_NFLOG.so |
476 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_NFQUEUE.so |
477 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_NOTRACK.so |
478 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_osf.so |
479 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_owner.so |
480 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_physdev.so |
481 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_pkttype.so |
482 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_policy.so |
483 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_quota.so |
484 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_rateest.so |
485 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_RATEEST.so |
486 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_recent.so |
487 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_rpfilter.so |
488 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_sctp.so |
489 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_SECMARK.so |
490 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_set.so |
491 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_SET.so |
492 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_socket.so |
493 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_standard.so |
494 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_state.so |
495 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_statistic.so |
496 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_string.so |
497 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_SYNPROXY.so |
498 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_tcpmss.so |
499 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_TCPMSS.so |
500 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_TCPOPTSTRIP.so |
501 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_tcp.so |
502 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_TEE.so |
503 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_time.so |
504 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_tos.so |
505 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_TOS.so |
506 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_TPROXY.so |
507 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_TRACE.so |
508 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_u32.so |
509 |
/%{_lib}/iptables.d/linux-2.6-main/libxt_udp.so |
510 |
%{_mandir}/*/arptables* |
511 |
%{_mandir}/*/ebtables* |
512 |
%{_mandir}/*/iptables* |
513 |
%{_mandir}/*/xtables* |
514 |
%{_mandir}/man8/nfnl_osf.8* |
515 |
#{_mandir}/man8/nfbpf_compile.8* |
516 |
%{_datadir}/xtables/pf.os |
517 |
# ipv6 |
518 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_ah.so |
519 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_dst.so |
520 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_DNAT.so |
521 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_DNPT.so |
522 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_eui64.so |
523 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_frag.so |
524 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_hbh.so |
525 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_hl.so |
526 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_HL.so |
527 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_icmp6.so |
528 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_ipv6header.so |
529 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_LOG.so |
530 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_MASQUERADE.so |
531 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_mh.so |
532 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_NETMAP.so |
533 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_REDIRECT.so |
534 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_REJECT.so |
535 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_rt.so |
536 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_SNAT.so |
537 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_SNPT.so |
538 |
/%{_lib}/iptables.d/linux-2.6-main/libip6t_srh.so |
539 |
%{_mandir}/*/ip6tables* |
540 |
|
541 |
%files nft |
542 |
%{_sysconfdir}/ethertypes |
543 |
/sbin/iptables-restore-translate |
544 |
/sbin/iptables-translate |
545 |
# ipv6 |
546 |
/sbin/ip6tables-restore-translate |
547 |
/sbin/ip6tables-translate |
548 |
|
549 |
%files -n %{libname} |
550 |
/%{_lib}/libxtables.so.%{major}* |
551 |
|
552 |
%files -n %{develname} |
553 |
%{_includedir}/*.h |
554 |
%dir %{_includedir}/libipq |
555 |
%dir %{_includedir}/libipulog |
556 |
%{_includedir}/libipq/*.h |
557 |
%{_includedir}/libipulog/*.h |
558 |
%{_includedir}/iptables/*.h |
559 |
%{_libdir}/libxtables.so |
560 |
%{_libdir}/pkgconfig/xtables.pc |
561 |
|
562 |
%files -n %{ipq_libname} |
563 |
/%{_libdir}/libipq.so.* |
564 |
|
565 |
%files -n %{ipq_develname} |
566 |
%{_includedir}/libipq/*.h |
567 |
%{_libdir}/pkgconfig/libipq.pc |
568 |
%dir %{_includedir}/libipq |
569 |
%{_libdir}/libipq.so |
570 |
%{_mandir}/man3/*ipq* |
571 |
|
572 |
%files -n %{iptc_develname} |
573 |
%{_includedir}/libiptc/*.h |
574 |
%dir %{_includedir}/libiptc |
575 |
%{_libdir}/libiptc.*a |
576 |
%{_libdir}/pkgconfig/libiptc.pc |
577 |
|
578 |
%files -n %{ip4tc_libname} |
579 |
/%{_lib}/libip4tc.so.* |
580 |
|
581 |
%files -n %{ip4tc_develname} |
582 |
%{_libdir}/libip4tc.so |
583 |
%{_libdir}/pkgconfig/libip4tc.pc |
584 |
|
585 |
%files -n %{ip6tc_libname} |
586 |
/%{_lib}/libip6tc.so.* |
587 |
|
588 |
%files -n %{ip6tc_develname} |
589 |
%{_libdir}/libip6tc.so |
590 |
%{_libdir}/pkgconfig/libip6tc.pc |