Skip to content

GitLab

Commit 7f04bf74 authored by Laurence J. Lane's avatar Laurence J. Lane Committed by Arturo Borrero Gonzalez
Browse files

Imported Debian patch 1.4.21-2

parent 7e95a8db
Expand all Show whitespace changes
Inline Side-by-side
debian/README.Debian 0 → 100644
View file @ 7f04bf74
Documentation:
==============
The various netfilter and iptables HOWTOS can be found at:
http://www.netfilter.org/documentation/
debian/README.source 0 → 100644
View file @ 7f04bf74
This is a quilt style (using source format 3.0 (quilt)) package build with
a quirky build directory hack. Look at /usr/share/doc/quilt/README.source
for details on using quilt patch management with Debian packages.
debian/changelog 0 → 100644
View file @ 7f04bf74
This diff is collapsed.
debian/control 0 → 100644
View file @ 7f04bf74
Source: iptables
Section: net
Priority: important
Maintainer: Laurence J. Lane <ljlane@debian.org>
Build-Depends: debhelper (>= 9), autoconf, automake, libtool (>=2.2.6), libnfnetlink-dev, libnetfilter-conntrack-dev, libnetfilter-conntrack3, dh-autoreconf
Standards-Version: 3.9.5
Homepage: http://www.netfilter.org/
Package: iptables
Architecture: linux-any
Depends: ${misc:Depends}, ${shlibs:Depends}, libxtables10 (=${binary:Version})
Description: administration tools for packet filtering and NAT
iptables is the userspace command line program used to configure
the Linux packet filtering ruleset. It is targeted towards system
administrators. Since Network Address Translation is also configured
from the packet filter ruleset, iptables is used for this, too. The
iptables package also includes ip6tables. ip6tables is used for
configuring the IPv6 packet filter
Package: libxtables10
Architecture: linux-any
Depends: ${misc:Depends}, ${shlibs:Depends}
Replaces: iptables (<< 1.4.16.3-3)
Breaks: iptables (<< 1.4.16.3-3)
Description: netfilter xtables library
The user-space interface to the Netfilter xtables kernel framework.
Package: iptables-dev
Architecture: linux-any
Priority: optional
Depends: ${misc:Depends}, iptables (=${binary:Version})
Conflicts: iptables (<<1.4.2-2)
Breaks: linux-libc-dev (<< 3.5)
Section: devel
Description: iptables development files
iptables is used to setup, maintain, and inspect the tables of
packet filter rules in the Linux kernel. This package contains
the available library (libipq, libiptc, libxtables), header,
documentation and related files for iptables development.
debian/copyright 0 → 100644
View file @ 7f04bf74
Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: iptables
Upstream-Contact: Netfilter Developer List <netfilter@vger.kernel.org>
Source: http://ftp.netfilter.org/
Files: iptables/*.c
Copyright: 2000-2002, the netfilter coreteam <coreteam@netfilter.org>
Paul 'Rusty' Russell <rusty@rustcorp.com.au>
Marc Boucher <marc+nf@mbsi.ca>
James Morris <jmorris@intercode.com.au>
Harald Welte <laforge@gnumonks.org>
Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
License: GPL-2
Files: extensions/libip6t_DNAT.c
Copyright: 2011, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libip6t_DNPT.c
Copyright: 2012-2013, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libip6t_MASQUERADE.c
Copyright: 2011, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libip6t_NETMAP.c
Copyright: 2011, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libip6t_REDIRECT.c
Copyright: 2011, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libip6t_REJECT.c
Copyright: 2000, Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
License: GPL-2
Files: extensions/libip6t_SNAT.c
Copyright: 2011, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libip6t_SNPT.c
Copyright: 2012-2013, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libip6t_mh.c
Copyright: 2006, USAGI/WIDE Project
License: GPL-2
Files: extensions/libipt_CLUSTERIP.c
Copyright: 2003, Harald Welte <laforge@gnumonks.org>
License: GPL-2
Files: extensions/libipt_ECN.c
Copyright: 2002, by Harald Welte <laforge@gnumonks.org>
License: GPL-2
Files: extensions/libipt_REJECT.c
Copyright: 2000, Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
License: GPL-2
Files: extensions/libipt_TTL.c
Copyright: 2000, Harald Welte <laforge@gnumonks.org>
License: GPL-2
Files: extensions/libipt_ULOG.c
Copyright: 2000, Harald Welte <laforge@gnumonks.org>
License: GPL-2
Files: extensions/libipt_ttl.c
Copyright: 2000, Harald Welte <laforge@gnumonks.org>
License: GPL-2
Files: extensions/libxt_AUDIT.c
Copyright: 2010-2011, Thomas Graf <tgraf@redhat.com>
2010-2011, Red Hat, Inc.
License: GPL-2
Files: extensions/libxt_CHECKSUM.c
Copyright: 2002, Harald Welte <laforge@gnumonks.org>
2010, Red Hat, Inc
License: GPL-2
Files: extensions/libxt_CLASSIFY.c
Copyright: 2003-2013, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libxt_CONNMARK.c
Copyright: 2002, 2004, MARA Systems AB <http://www.marasystems.com> by Henrik Nordstrom <hno@marasystems.com>
License: GPL-2
Files: extensions/libxt_CONNSECMARK.c
Copyright: 2006, Red Hat, Inc., James Morris <jmorris@redhat.com>
License: GPL-2
Files: extensions/libxt_CT.c
Copyright: 2010-2013, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libxt_DSCP.c
Copyright: 2000-2002, Matthew G. Marsh <mgm@paktronix.com>
Harald Welte <laforge@gnumonks.org>
License: GPL-2
Files: extensions/libxt_HMARK.c
Copyright: 2012, Hans Schillstrom <hans.schillstrom@ericsson.com>
2012, Pablo Neira Ayuso <pablo@netfilter.org>
License: GPL-2
Files: extensions/libxt_IDLETIMER.c
Copyright: 2010, Nokia Corporation
License: GPL-2
Files: extensions/libxt_LED.c
Copyright: 2008, Adam Nielsen <a.nielsen@shikadi.net>
License: GPL-2
Files: extensions/libxt_NFQUEUE.c
Copyright: 2005, by Harald Welte <laforge@netfilter.org>
License: GPL-2
Files: extensions/libxt_RATEEST.c
Copyright: 2008-2013, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libxt_SECMARK.c
Copyright: 2006, Red Hat, Inc., James Morris <jmorris@redhat.com>
License: GPL-2
Files: extensions/libxt_SET.c
Copyright: 2000-2002, Joakim Axelsson <gozem@linux.nu>
Patrick Schaaf <bof@bof.de>
Martin Josefsson <gandalf@wlug.westbo.se>
2003-2010, Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
License: GPL-2
Files: extensions/libxt_SYNPROXY.c
Copyright: 2013, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libxt_TCPMSS.c
Copyright: 2000, Marc Boucher
License: GPL-2
Files: extensions/libxt_TCPOPTSTRIP.c
Copyright: 2007, Sven Schnelle <svens@bitebene.org>
2007, CC Computer Consultants GmbH
License: GPL-2
Files: extensions/libxt_TEE.c
Copyright: 2007, Sebastian Claßen <sebastian.classen [at] freenet.ag>
2007-2010, Jan Engelhardt <jengelh [at] medozas de>
License: GPL-2
Files: extensions/libxt_TOS.c
Copyright: 2007, CC Computer Consultants GmbH
License: GPL-2
Files: extensions/libxt_TPROXY.c
Copyright: 2002-2008, BalaBit IT Ltd.
License: GPL-2
Files: extensions/libxt_addrtype.c
Copyright: 2003-2013, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libxt_bpf.c
Copyright: 2013, Google, Inc.
License: GPL-2
Files: extensions/libxt_cluster.c
Copyright: 2009, Pablo Neira Ayuso <pablo@netfilter.org>
License: GPL-2
Files: extensions/libxt_connmark.c
Copyright: 2002, 2004, MARA Systems AB <http://www.marasystems.com> by Henrik Nordstrom <hno@marasystems.com>
License: GPL-2
Files: extensions/libxt_conntrack.c
Copyright: 2001, Marc Boucher (marc@mbsi.ca).
2007-2008, CC Computer Consultants GmbH
License: GPL-2
Files: extensions/libxt_dccp.c
Copyright: 2005, by Harald Welte <laforge@netfilter.org>
License: GPL-2
Files: extensions/libxt_devgroup.c
Copyright: 2011, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libxt_dscp.c
Copyright: 2002, Harald Welte <laforge@gnumonks.org>
License: GPL-2
Files: extensions/libxt_ecn.c
Copyright: 2002, Harald Welte <laforge@netfilter.org>
2011, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libxt_hashlimit.c
Copyright: 2003-2004, Harald Welte <laforge@netfilter.org>
License: GPL-2
Files: extensions/libxt_osf.c
Copyright: 2003+, Evgeniy Polyakov <zbr@ioremap.net>
License: GPL-2
Files: extensions/libxt_owner.c
Copyright: 2007-2008, CC Computer Consultants GmbH
License: GPL-2
Files: extensions/libxt_policy.c
Copyright: 2005-2013, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libxt_rateest.c
Copyright: 2008-2013, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libxt_sctp.c
Copyright: 2003, Harald Welte <laforge@gnumonks.org>
License: GPL-2
Files: extensions/libxt_set.c
Copyright: 2000-2002, Joakim Axelsson <gozem@linux.nu>
Patrick Schaaf <bof@bof.de>
Martin Josefsson <gandalf@wlug.westbo.se>
2003-2010, Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
License: GPL-2
Files: extensions/libxt_socket.c
Copyright: 2007, BalaBit IT Ltd.
License: GPL-2
Files: extensions/libxt_statistic.c
Copyright: 2006-2013, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: extensions/libxt_string.c
Copyright: 2000, Emmanuel Roger <winfield@freegates.be>
2005-08-05, Pablo Neira Ayuso <pablo@eurodev.net>
License: GPL-2
Files: extensions/libxt_time.c
Copyright: 2007, CC Computer Consultants GmbH
License: GPL-2
Files: extensions/libxt_tos.c
Copyright: 2007, CC Computer Consultants GmbH
License: GPL-2
Files: extensions/libxt_u32.c
Copyright: 2002, Don Cohen <don-netf@isis.cs3-inc.com>
2007, CC Computer Consultants GmbH
License: GPL-2
Files: include/linux/netfilter/ipset/ip_set.h
Copyright: 2000-2002, Joakim Axelsson <gozem@linux.nu>
Patrick Schaaf <bof@bof.de>
Martin Josefsson <gandalf@wlug.westbo.se>
2003-2011, Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
License: GPL-2
Files: include/linux/netfilter/xt_AUDIT.h
Copyright: 2010-2011, Thomas Graf <tgraf@redhat.com>
2010-2011, Red Hat, Inc.
License: GPL-2
Files: include/linux/netfilter/xt_CHECKSUM.h
Copyright: 2002, Harald Welte <laforge@gnumonks.org>
2010, Red Hat Inc
License: GPL-2
Files: include/linux/netfilter/xt_DSCP.h
Copyright: 2002, Harald Welte <laforge@gnumonks.org>
License: GPL-2
Files: include/linux/netfilter/xt_IDLETIMER.h
Copyright: 2004, 2010, Nokia Corporation
License: GPL-2
Files: include/linux/netfilter/xt_NFQUEUE.h
Copyright: 2005, Harald Welte <laforge@netfilter.org>
License: GPL-2
Files: include/linux/netfilter/xt_connmark.h
Copyright: 2002, 2004, MARA Systems AB <http://www.marasystems.com> by Henrik Nordstrom <hno@marasystems.com>
License: GPL-2
Files: include/linux/netfilter/xt_conntrack.h
Copyright: 2001, Marc Boucher (marc@mbsi.ca)
License: GPL-2
Files: include/linux/netfilter/xt_dscp.h
Copyright: 2002, Harald Welte <laforge@gnumonks.org>
License: GPL-2
Files: include/linux/netfilter/xt_ecn.h
Copyright: 2002, Harald Welte <laforge@netfilter.org>
License: GPL-2
Files: include/linux/netfilter/xt_osf.h
Copyright: 2003+, Evgeniy Polyakov <johnpol@2ka.mxt.ru>
License: GPL-2
Files: include/linux/netfilter_ipv4.h
Copyright: 1998, Rusty Russell
License: GPL-2
Files: include/linux/netfilter_ipv4/ip_queue.h
Copyright: 2000, James Morris
License: GPL-2
Files: include/linux/netfilter_ipv4/ipt_ECN.h
Copyright: 2002, Harald Welte <laforge@gnumonks.org>
License: GPL-2
Files: include/linux/netfilter_ipv4/ipt_TTL.h
Copyright: 2000, Harald Welte <laforge@netfilter.org>
License: GPL-2
Files: include/linux/netfilter_ipv4/ipt_ULOG.h
Copyright: 2000-2002, Harald Welte <laforge@gnumonks.org>
License: GPL-2
Files: include/linux/netfilter_ipv4/ipt_ttl.h
Copyright: 2000, Harald Welte <laforge@gnumonks.org>
License: GPL-2
Files: include/linux/netfilter_ipv6.h
Copyright: 1998, Rusty Russell
1999, David Jeffery
License: GPL-2
Files: iptables/iptables-apply
Copyright: 2006, Martin F. Krafft <madduck@madduck.net>
2010, GW <gw.2010@tnode.com or http://gw.tnode.com/>
License: Artistic-2
Files: iptables/iptables-save.c
Copyright: 1999, Paul 'Rusty' Russell <rusty@rustcorp.com.au>
2000-2002, Harald Welte <laforge@gnumonks.org>
License: GPL-2
Files: iptables/iptables-xml.c
Copyright: 2006, Ufo Mechanic <azez@ufomechanic.net>
License: GPL-2
Files: libiptc/libip4tc.c
Copyright: 1999, Paul ``Rusty'' Russell
License: GPL-2
Files: libiptc/libip6tc.c
Copyright: 1999, Paul ``Rusty'' Russell
License: GPL-2
Files: libiptc/libiptc.c
Copyright: 1999, Paul ``Rusty'' Russell
2000-2004, by the Netfilter Core Team <coreteam@netfilter.org>
2003, 2004, Harald Welte <laforge@netfilter.org>
2008, Jesper Dangaard Brouer <hawk@comx.dk>
License: GPL-2
Files: libxtables/xtables.c
Copyright: 2000-2006, by the netfilter coreteam <coreteam@netfilter.org>
License: GPL-2
Files: libxtables/xtoptions.c
Copyright: 2011, Jan Engelhardt
License: GPL-2
Files: utils/nfsynproxy.c
Copyright: 2013, Patrick McHardy <kaber@trash.net>
License: GPL-2
Files: utils/pf.os
Copyright: 2000-2003, Michal Zalewski <lcamtuf@coredump.cx>
2003, Mike Frantzen <frantzen@w4g.org>
License:
Permission to use, copy, modify, and distribute this software for any
purpose with or without fee is hereby granted, provided that the above
copyright notice and this permission notice appear in all copies.
.
THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
License: GPL-2
This program is free software; you can redistribute it
and/or modify it under the terms of the GNU General Public
License as published by the Free Software Foundation; either
version 2 of the License, or (at your option) any later
version.
.
This program is distributed in the hope that it will be
useful, but WITHOUT ANY WARRANTY; without even the implied
warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
PURPOSE. See the GNU General Public License for more
details.
.
You should have received a copy of the GNU General Public
License along with this package; if not, write to the Free
Software Foundation, Inc., 51 Franklin St, Fifth Floor,
Boston, MA 02110-1301 USA
.
On Debian systems, the full text of the GNU General Public
License version 2 can be found in the file
`/usr/share/common-licenses/GPL-2'.
License: Artistic-2
The "Artistic License"
.
Preamble
.
The intent of this document is to state the conditions under which a
Package may be copied, such that the Copyright Holder maintains some
semblance of artistic control over the development of the package,
while giving the users of the package the right to use and distribute
the Package in a more-or-less customary fashion, plus the right to make
reasonable modifications.
.
Definitions:
.
"Package" refers to the collection of files distributed by the
Copyright Holder, and derivatives of that collection of files
created through textual modification.
.
"Standard Version" refers to such a Package if it has not been
modified, or has been modified in accordance with the wishes
of the Copyright Holder as specified below.
.
"Copyright Holder" is whoever is named in the copyright or
copyrights for the package.
.
"You" is you, if you're thinking about copying or distributing
this Package.
.
"Reasonable copying fee" is whatever you can justify on the
basis of media cost, duplication charges, time of people involved,
and so on. (You will not be required to justify it to the
Copyright Holder, but only to the computing community at large
as a market that must bear the fee.)
.
"Freely Available" means that no fee is charged for the item
itself, though there may be fees involved in handling the item.
It also means that recipients of the item may redistribute it
under the same conditions they received it.
.
1. You may make and give away verbatim copies of the source form of the
Standard Version of this Package without restriction, provided that you
duplicate all of the original copyright notices and associated disclaimers.
.
2. You may apply bug fixes, portability fixes and other modifications
derived from the Public Domain or from the Copyright Holder. A Package
modified in such a way shall still be considered the Standard Version.
.
3. You may otherwise modify your copy of this Package in any way, provided
that you insert a prominent notice in each changed file stating how and
when you changed that file, and provided that you do at least ONE of the
following:
.
a) place your modifications in the Public Domain or otherwise make them
Freely Available, such as by posting said modifications to Usenet or
an equivalent medium, or placing the modifications on a major archive
site such as uunet.uu.net, or by allowing the Copyright Holder to include
your modifications in the Standard Version of the Package.
.
b) use the modified Package only within your corporation or organization.
.
c) rename any non-standard executables so the names do not conflict
with standard executables, which must also be provided, and provide
a separate manual page for each non-standard executable that clearly
documents how it differs from the Standard Version.
.
d) make other distribution arrangements with the Copyright Holder.
.
4. You may distribute the programs of this Package in object code or
executable form, provided that you do at least ONE of the following:
.
a) distribute a Standard Version of the executables and library files,
together with instructions (in the manual page or equivalent) on where
to get the Standard Version.
.
b) accompany the distribution with the machine-readable source of
the Package with your modifications.
.
c) give non-standard executables non-standard names, and clearly
document the differences in manual pages (or equivalent), together
with instructions on where to get the Standard Version.
.
d) make other distribution arrangements with the Copyright Holder.
.
5. You may charge a reasonable copying fee for any distribution of this
Package. You may charge any fee you choose for support of this
Package. You may not charge a fee for this Package itself. However,
you may distribute this Package in aggregate with other (possibly
commercial) programs as part of a larger (possibly commercial) software
distribution provided that you do not advertise this Package as a
product of your own. You may embed this Package's interpreter within
an executable of yours (by linking); this shall be construed as a mere
form of aggregation, provided that the complete Standard Version of the
interpreter is so embedded.
.
6. The scripts and library files supplied as input to or produced as
output from the programs of this Package do not automatically fall
under the copyright of this Package, but belong to whoever generated
them, and may be sold commercially, and may be aggregated with this
Package. If such scripts or library files are aggregated with this
Package via the so-called "undump" or "unexec" methods of producing a
binary executable image, then distribution of such an image shall
neither be construed as a distribution of this Package nor shall it
fall under the restrictions of Paragraphs 3 and 4, provided that you do
not represent such an executable image as a Standard Version of this
Package.
.
7. C subroutines (or comparably compiled subroutines in other
languages) supplied by you and linked into this Package in order to
emulate subroutines and variables of the language defined by this
Package shall not be considered part of this Package, but are the
equivalent of input as in Paragraph 6, provided these subroutines do
not change the language in any way that would cause it to fail the
regression tests for the language.
.
8. Aggregation of this Package with a commercial distribution is always
permitted provided that the use of this Package is embedded; that is,
when no overt attempt is made to make this Package's interfaces visible
to the end user of the commercial distribution. Such use shall not be
construed as a distribution of this Package.
.
9. The name of the Copyright Holder may not be used to endorse or promote
products derived from this software without specific prior written permission.
.
10. THIS PACKAGE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR
IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
.
The End
debian/iptables-dev.install 0 → 100644
View file @ 7f04bf74
usr/include
usr/share/man/man3
lib/lib*.so
lib/pkgconfig usr/lib
include/linux/netfilter_ipv4/ip_queue.h usr/include/linux/netfilter_ipv4/
debian/iptables.docs 0 → 100644
View file @ 7f04bf74
INCOMPATIBILITIES
debian/iptables.install 0 → 100644
View file @ 7f04bf74
lib/libip*.so.*
usr/sbin/xtables-multi sbin
usr/sbin/ip6tables sbin
usr/sbin/ip6tables-restore sbin
usr/sbin/ip6tables-save sbin
usr/sbin/iptables sbin
usr/sbin/iptables-restore sbin
usr/sbin/iptables-save sbin
usr/sbin/nf* usr/sbin
lib/xtables
iptables/iptables-apply usr/sbin
iptables/iptables.xslt usr/share/iptables
usr/share/man/man8
usr/share/man/man1
debian/iptables.links 0 → 100644
View file @ 7f04bf74
/usr/sbin/iptables-apply /usr/sbin/ip6tables-apply
/usr/share/man/man8/iptables-apply.8.gz /usr/share/man/man8/ip6tables-apply.8.gz
/sbin/xtables-multi /usr/bin/iptables-xml
debian/iptables.lintian-overrides 0 → 100644
View file @ 7f04bf74
iptables binary: package-name-doesnt-match-sonames libip4tc0 libip6tc0 libipq0 libiptc0
debian/iptables.manpages 0 → 100644
View file @ 7f04bf74
iptables/*.8
debian/*.8
debian/libxtables10.install 0 → 100644
View file @ 7f04bf74
lib/libxtables*.so.*
debian/nfnl_osf.8 0 → 100644
View file @ 7f04bf74
.\" Automatically generated by Pod::Man 2.25 (Pod::Simple 3.16)
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" Set up some character translations and predefined strings. \*(-- will
.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
.\" double quote, and \*(R" will give a right double quote. \*(C+ will
.\" give a nicer C++. Capital omega is used to do unbreakable dashes and
.\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
.\" nothing in troff, for use with C<>.
.tr \(*W-
.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
.ie n \{\
. ds -- \(*W-
. ds PI pi
. if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
. if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
. ds L" ""
. ds R" ""
. ds C` ""
. ds C' ""
'br\}
.el\{\
. ds -- \|\(em\|
. ds PI \(*p
. ds L" ``
. ds R" ''
'br\}
.\"
.\" Escape single quotes in literal strings from groff's Unicode transform.
.ie \n(.g .ds Aq \(aq
.el .ds Aq '
.\"
.\" If the F register is turned on, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
.\" entries marked with X<> in POD. Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.ie \nF \{\
. de IX
. tm Index:\\$1\t\\n%\t"\\$2"
..
. nr % 0
. rr F
.\}
.el \{\
. de IX
..
.\}
.\" ========================================================================
.\"
.IX Title "NFNL_OSF 8"
.TH NFNL_OSF 8 "2012-10-27" "nfnl_osf" "nfnl_osf"
.\" For nroff, turn off justification. Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
.nh
.SH "NAME"
nfnl_osf \- load and unload os fingerprint database
.SH "SYNOPSIS"
.IX Header "SYNOPSIS"
load and unload osf fingerprint database for the netfilter osf extension
.SH "DESCRIPTION"
.IX Header "DESCRIPTION"
nffl_osf has no official man page. Look at the osf module in \fB\f(BIiptables\-extensions\fB\|(8)\fR for more information.
.SH "SEE ALSO"
.IX Header "SEE ALSO"
\&\fIiptables\-extensions\fR\|(8)
debian/patches/0101-changelog.patch 0 → 100644
View file @ 7f04bf74
This diff is collapsed.
debian/patches/0102-add_manpages.patch 0 → 100644
View file @ 7f04bf74
From: Laurence J. Lane <ljlane@debian.org>
Subject: add binary man pages
--- /dev/null
+++ b/utils/nfnl_osf.8
@@ -0,0 +1,80 @@
+.\" Automatically generated by Pod::Man 2.25 (Pod::Simple 3.16)
+.\"
+.\" Standard preamble:
+.\" ========================================================================
+.de Sp \" Vertical space (when we can't use .PP)
+.if t .sp .5v
+.if n .sp
+..
+.de Vb \" Begin verbatim text
+.ft CW
+.nf
+.ne \\$1
+..
+.de Ve \" End verbatim text
+.ft R
+.fi
+..
+.\" Set up some character translations and predefined strings. \*(-- will
+.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
+.\" double quote, and \*(R" will give a right double quote. \*(C+ will
+.\" give a nicer C++. Capital omega is used to do unbreakable dashes and
+.\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
+.\" nothing in troff, for use with C<>.
+.tr \(*W-
+.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
+.ie n \{\
+. ds -- \(*W-
+. ds PI pi
+. if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
+. if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
+. ds L" ""
+. ds R" ""
+. ds C` ""
+. ds C' ""
+'br\}
+.el\{\
+. ds -- \|\(em\|
+. ds PI \(*p
+. ds L" ``
+. ds R" ''
+'br\}
+.\"
+.\" Escape single quotes in literal strings from groff's Unicode transform.
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.\"
+.\" If the F register is turned on, we'll generate index entries on stderr for
+.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
+.\" entries marked with X<> in POD. Of course, you'll have to process the
+.\" output yourself in some meaningful fashion.
+.ie \nF \{\
+. de IX
+. tm Index:\\$1\t\\n%\t"\\$2"
+..
+. nr % 0
+. rr F
+.\}
+.el \{\
+. de IX
+..
+.\}
+.\" ========================================================================
+.\"
+.IX Title "NFNL_OSF 8"
+.TH NFNL_OSF 8 "2012-10-27" "nfnl_osf" "nfnl_osf"
+.\" For nroff, turn off justification. Always turn off hyphenation; it makes
+.\" way too many mistakes in technical documents.
+.if n .ad l
+.nh
+.SH "NAME"
+nfnl_osf \- load and unload os fingerprint database
+.SH "SYNOPSIS"
+.IX Header "SYNOPSIS"
+load and unload osf fingerprint database for the netfilter osf extension
+.SH "DESCRIPTION"
+.IX Header "DESCRIPTION"
+nffl_osf has no official man page. Look at the osf module in \fB\f(BIiptables\-extensions\fB\|(8)\fR for more information.
+.SH "SEE ALSO"
+.IX Header "SEE ALSO"
+\&\fIiptables\-extensions\fR\|(8)
--- /dev/null
+++ b/iptables/xtables-multi.8
@@ -0,0 +1,83 @@
+.\" Automatically generated by Pod::Man 2.25 (Pod::Simple 3.16)
+.\"
+.\" Standard preamble:
+.\" ========================================================================
+.de Sp \" Vertical space (when we can't use .PP)
+.if t .sp .5v
+.if n .sp
+..
+.de Vb \" Begin verbatim text
+.ft CW
+.nf
+.ne \\$1
+..
+.de Ve \" End verbatim text
+.ft R
+.fi
+..
+.\" Set up some character translations and predefined strings. \*(-- will
+.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
+.\" double quote, and \*(R" will give a right double quote. \*(C+ will
+.\" give a nicer C++. Capital omega is used to do unbreakable dashes and
+.\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
+.\" nothing in troff, for use with C<>.
+.tr \(*W-
+.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
+.ie n \{\
+. ds -- \(*W-
+. ds PI pi
+. if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
+. if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
+. ds L" ""
+. ds R" ""
+. ds C` ""
+. ds C' ""
+'br\}
+.el\{\
+. ds -- \|\(em\|
+. ds PI \(*p
+. ds L" ``
+. ds R" ''
+'br\}
+.\"
+.\" Escape single quotes in literal strings from groff's Unicode transform.
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.\"
+.\" If the F register is turned on, we'll generate index entries on stderr for
+.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
+.\" entries marked with X<> in POD. Of course, you'll have to process the
+.\" output yourself in some meaningful fashion.
+.ie \nF \{\
+. de IX
+. tm Index:\\$1\t\\n%\t"\\$2"
+..
+. nr % 0
+. rr F
+.\}
+.el \{\
+. de IX
+..
+.\}
+.\" ========================================================================
+.\"
+.IX Title "XTABLES-MULTI 8"
+.TH XTABLES-MULTI 8 "2012-10-27" "xtables 1.4.16.3" "xtables-multi"
+.\" For nroff, turn off justification. Always turn off hyphenation; it makes
+.\" way too many mistakes in technical documents.
+.if n .ad l
+.nh
+.SH "NAME"
+xtables\-multi \- xtables multi\-link binary for netfilter's iptables and ip6tables
+.SH "SYNOPSIS"
+.IX Header "SYNOPSIS"
+.Vb 1
+\& n/a
+.Ve
+.SH "DESCRIPTION"
+.IX Header "DESCRIPTION"
+xtables-multi has no official man page. It is a binary that behaves
+according to the name it is called by. \fB\s-1SEE\s0 \s-1ALSO\s0\fR lists the names.
+.SH "SEE ALSO"
+.IX Header "SEE ALSO"
+\&\fIiptables\fR\|(8), \fIip6tables\fR\|(8), \fIiptables\-save\fR\|(8), \fIip6tables\-save\fR\|(8), \fIiptables\-restore\fR\|(8), \fIip6tables\-resotre\fR\|(8)
debian/patches/0103-lintian_allows_to.patch 0 → 100644
View file @ 7f04bf74
From: Laurence J. Lane
Description: cleanup "allows to", triggered lintian grammar warning
--- a/extensions/libipt_ECN.man
+++ b/extensions/libipt_ECN.man
@@ -1,4 +1,4 @@
-This target allows to selectively work around known ECN blackholes.
+This target selectively works around known ECN blackholes.
It can only be used in the mangle table.
.TP
\fB\-\-ecn\-tcp\-remove\fP
--- a/extensions/libxt_AUDIT.man
+++ b/extensions/libxt_AUDIT.man
@@ -1,4 +1,4 @@
-This target allows to create audit records for packets hitting the target.
+This target allows creates audit records for packets hitting the target.
It can be used to record accepted, dropped, and rejected packets. See
auditd(8) for additional details.
.TP
--- a/extensions/libxt_CHECKSUM.man
+++ b/extensions/libxt_CHECKSUM.man
@@ -1,4 +1,4 @@
-This target allows to selectively work around broken/old applications.
+This target selectively works around broken/old applications.
It can only be used in the mangle table.
.TP
\fB\-\-checksum\-fill\fP
--- a/extensions/libxt_CT.man
+++ b/extensions/libxt_CT.man
@@ -1,4 +1,4 @@
-The CT target allows to set parameters for a packet or its associated
+The CT target sets parameters for a packet or its associated
connection. The target attaches a "template" connection tracking entry to
the packet, which is then used by the conntrack core when initializing
a new ct entry. This target is thus only valid in the "raw" table.
--- a/extensions/libxt_DSCP.man
+++ b/extensions/libxt_DSCP.man
@@ -1,4 +1,4 @@
-This target allows to alter the value of the DSCP bits within the TOS
+This target alters the value of the DSCP bits within the TOS
header of the IPv4 packet. As this manipulates a packet, it can only
be used in the mangle table.
.TP
--- a/extensions/libxt_TCPMSS.man
+++ b/extensions/libxt_TCPMSS.man
@@ -1,4 +1,4 @@
-This target allows to alter the MSS value of TCP SYN packets, to control
+This target alters the MSS value of TCP SYN packets, to control
the maximum size for that connection (usually limiting it to your
outgoing interface's MTU minus 40 for IPv4 or 60 for IPv6, respectively).
Of course, it can only be used
--- a/extensions/libxt_osf.c
+++ b/extensions/libxt_osf.c
@@ -40,7 +40,7 @@
"--ttl level Use some TTL check extensions to determine OS:\n"
" 0 true ip and fingerprint TTL comparison. Works for LAN.\n"
" 1 check if ip TTL is less than fingerprint one. Works for global addresses.\n"
- " 2 do not compare TTL at all. Allows to detect NMAP, but can produce false results.\n"
+ " 2 do not compare TTL at all. This allows NMAP detection, but can produce false results.\n"
"--log level Log determined genres into dmesg even if they do not match desired one:\n"
" 0 log all matched or unknown signatures.\n"
" 1 log only first one.\n"
--- a/iptables/iptables.8.in
+++ b/iptables/iptables.8.in
@@ -244,13 +244,13 @@
This option has no effect in iptables and iptables-restore.
If a rule using the \fB\-4\fP option is inserted with (and only with)
ip6tables-restore, it will be silently ignored. Any other uses will throw an
-error. This option allows to put both IPv4 and IPv6 rules in a single rule file
+error. This option allows IPv4 and IPv6 rules in a single rule file
for use with both iptables-restore and ip6tables-restore.
.TP
\fB\-6\fP, \fB\-\-ipv6\fP
If a rule using the \fB\-6\fP option is inserted with (and only with)
iptables-restore, it will be silently ignored. Any other uses will throw an
-error. This option allows to put both IPv4 and IPv6 rules in a single rule file
+error. This option allows IPv4 and IPv6 rules in a single rule file
for use with both iptables-restore and ip6tables-restore.
This option has no effect in ip6tables and ip6tables-restore.
.TP
debian/patches/0104-lintian_hyphens.patch 0 → 100644
View file @ 7f04bf74
From: Laurence J. Lane <ljlane@debian.org>
Description: man page hyphen cleanup
--- a/extensions/libip6t_DNPT.man
+++ b/extensions/libip6t_DNPT.man
@@ -23,7 +23,7 @@
.PP
You may need to enable IPv6 neighbor proxy:
.IP
-sysctl -w net.ipv6.conf.all.proxy_ndp=1
+sysctl \-w net.ipv6.conf.all.proxy_ndp=1
.PP
You also have to use the
.B NOTRACK
--- a/extensions/libip6t_SNPT.man
+++ b/extensions/libip6t_SNPT.man
@@ -23,7 +23,7 @@
.PP
You may need to enable IPv6 neighbor proxy:
.IP
-sysctl -w net.ipv6.conf.all.proxy_ndp=1
+sysctl \-w net.ipv6.conf.all.proxy_ndp=1
.PP
You also have to use the
.B NOTRACK
--- a/extensions/libxt_HMARK.man
+++ b/extensions/libxt_HMARK.man
@@ -56,5 +56,5 @@
\-j HMARK \-\-hmark-tuple ct,src,dst,proto \-\-hmark-offset 10000
\-\-hmark\-mod 10 \-\-hmark\-rnd 0xfeedcafe
.PP
-iptables \-t mangle \-A PREROUTING -j HMARK \-\-hmark\-offset 10000
+iptables \-t mangle \-A PREROUTING \-j HMARK \-\-hmark\-offset 10000
\-\-hmark-tuple src,dst,proto \-\-hmark-mod 10 \-\-hmark\-rnd 0xdeafbeef
--- a/extensions/libxt_SET.man
+++ b/extensions/libxt_SET.man
@@ -21,5 +21,5 @@
when adding an entry if it already exists, reset the timeout value
to the specified one or to the default from the set definition
.PP
-Use of -j SET requires that ipset kernel support is provided, which, for
+Use of \-j SET requires that ipset kernel support is provided, which, for
standard kernels, is the case since Linux 2.6.39.
--- a/extensions/libxt_TOS.man
+++ b/extensions/libxt_TOS.man
@@ -32,5 +32,5 @@
a bug whereby IPv6 TOS mangling does not behave as documented and differs from
the IPv4 version. The TOS mask indicates the bits one wants to zero out, so it
needs to be inverted before applying it to the original TOS field. However, the
-aformentioned kernels forgo the inversion which breaks --set-tos and its
+aformentioned kernels forgo the inversion which breaks \-\-set\-tos and its
mnemonics.
--- a/extensions/libxt_bpf.man
+++ b/extensions/libxt_bpf.man
@@ -4,7 +4,7 @@
\fB\-\-bytecode\fP \fIcode\fP
Pass the BPF byte code format (described in the example below).
.PP
-The code format is similar to the output of the tcpdump -ddd command: one line
+The code format is similar to the output of the tcpdump \-ddd command: one line
that stores the number of instructions, followed by one line for each
instruction. Instruction lines follow the pattern 'u16 u8 u8 u32' in decimal
notation. Fields encode the operation, jump offset if true, jump offset if
--- a/extensions/libxt_cluster.man
+++ b/extensions/libxt_cluster.man
@@ -27,7 +27,7 @@
iptables \-A PREROUTING \-t mangle \-i eth2 \-m cluster
\-\-cluster\-total\-nodes 2 \-\-cluster\-local\-node 1
\-\-cluster\-hash\-seed 0xdeadbeef
-\-j MARK -\-set\-mark 0xffff
+\-j MARK \-\-set\-mark 0xffff
.IP
iptables \-A PREROUTING \-t mangle \-i eth1
\-m mark ! \-\-mark 0xffff \-j DROP
--- a/extensions/libxt_osf.man
+++ b/extensions/libxt_osf.man
@@ -35,11 +35,11 @@
OS fingerprints are loadable using the \fBnfnl_osf\fP program. To load
fingerprints from a file, use:
.PP
-\fBnfnl_osf -f /usr/share/xtables/pf.os\fP
+\fBnfnl_osf \-f /usr/share/xtables/pf.os\fP
.PP
To remove them again,
.PP
-\fBnfnl_osf -f /usr/share/xtables/pf.os -d\fP
+\fBnfnl_osf \-f /usr/share/xtables/pf.os \-d\fP
.PP
The fingerprint database can be downlaoded from
http://www.openbsd.org/cgi-bin/cvsweb/src/etc/pf.os .
--- a/extensions/libxt_set.man
+++ b/extensions/libxt_set.man
@@ -61,5 +61,5 @@
The option \fB\-\-match\-set\fP can be replaced by \fB\-\-set\fP if that does
not clash with an option of other extensions.
.PP
-Use of -m set requires that ipset kernel support is provided, which, for
+Use of \-m set requires that ipset kernel support is provided, which, for
standard kernels, is the case since Linux 2.6.39.
debian/patches/0105-lintian_spelling.patch 0 → 100644
View file @ 7f04bf74
From: Laurence J. Lane <ljlane@debian.org>
Description: lintian spelling warning, s/specifing/specifying
--- a/libipq/ipq_set_verdict.3
+++ b/libipq/ipq_set_verdict.3
@@ -30,7 +30,7 @@
.B ipq_set_verdict
function issues a verdict on a packet previously obtained with
.BR ipq_read ,
-specifing the intended disposition of the packet, and optionally
+specifying the intended disposition of the packet, and optionally
supplying a modified version of the payload data.
.PP
The
debian/patches/0201-660748-iptables_apply_man.patch 0 → 100644
View file @ 7f04bf74
From afc5ba9e94f86a11d50f3554efeafd402faddacb Mon Sep 17 00:00:00 2001
From: "Laurence J. Lane" <ljlane@debian.org>
Date: Mon, 2 Sep 2013 16:46:50 -0400
Subject: [PATCH] iptables: mention iptables-reply in SEE ALSO
Add iptables-apply(8) to the SEE ALSO section of *-save(8)
and *-restore(8).
References: http://bugs.debian.org/660748
Signed-off-by: Laurence J. Lane <ljlane@debian.org>
---
iptables/iptables-restore.8.in | 2 +-
iptables/iptables-save.8.in | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
--- a/iptables/iptables-restore.8.in
+++ b/iptables/iptables-restore.8.in
@@ -65,7 +65,7 @@
.br
Andras Kis-Szabo <kisza@sch.bme.hu> contributed ip6tables-restore.
.SH SEE ALSO
-\fBiptables\-save\fP(8), \fBiptables\fP(8)
+\fBiptables\-apply\fP(8),\fBiptables\-save\fP(8), \fBiptables\fP(8)
.PP
The iptables-HOWTO, which details more iptables usage, the NAT-HOWTO,
which details NAT, and the netfilter-hacking-HOWTO which details the
--- a/iptables/iptables-save.8.in
+++ b/iptables/iptables-save.8.in
@@ -55,7 +55,7 @@
.br
Andras Kis-Szabo <kisza@sch.bme.hu> contributed ip6tables-save.
.SH SEE ALSO
-\fBiptables\-restore\fP(8), \fBiptables\fP(8)
+\fBiptables\-apply\fP(8),\fBiptables\-restore\fP(8), \fBiptables\fP(8)
.PP
The iptables-HOWTO, which details more iptables usage, the NAT-HOWTO,
which details NAT, and the netfilter-hacking-HOWTO which details the
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment