GitLab

Cherry-pick this patch from upstream:

http://git.netfilter.org/iptables/commit/?id=2478b6cbb8112f940cec61ec1e62a598472d33d0



The patch will likely be present in the next upstream release.

Closes: #922973
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The iptables extensions/ makefile uses this variable to show verbose
information in the building proccess. I dropped this variable without checking
the results. It was there for a reason :-) Reintroduce it.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

New changelog entry.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Let's do a bit of cleanup.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Reported by lintian.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

We had lot of missing manpages which were missing links actually.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Recommend iptables users to migrate to nftables.
Give a refresh to all package descriptions.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Policy upgrading checklist:
 https://www.debian.org/doc/debian-policy/upgrading-checklist.html#version-4-3-0



Changes are:
 * use proper verbose mode
 * refresh URLs in d/copyright
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

New changelog entry.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Deal first with update-alternatives, then do the symlink cleanup.

This avoids errors like this:

Removing iptables (1.8.2-2) ...
update-alternatives: warning: forcing reinstallation of alternative
 /usr/sbin/iptables-nft because link group iptables is broken
update-alternatives: warning: forcing reinstallation of alternative
 /usr/sbin/ip6tables-nft because link group ip6tables is broken
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

They return non-0 even when running with `-h'.

I don't have time to find a proper fix for this.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

We may need to overwrite them in some situations in postinst.
Also, deconfigure them in more cases in prerm. 

Closes: #913811
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

New  upstream release.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

A few new symbols.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Cherry-pick from upstream:

http://git.netfilter.org/iptables/commit/?id=907e429d7548157016cd51aba4adc5d0c7d9f816

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

These paths are managed by update-alternatives, no need to ship them in the
package.

Closes: #911899
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Fix some typos.

Closes: #912981
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Obsolete, rename them.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

New package upload.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

To be dropped in the buster+1 release cycles, so we don't break people
hardcoding the path to iptables.

Closes: #911777
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

New changelog entry.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Give additional instructions for users installing this version of the package.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The nft version of them now include -restore and -save as well.

While at it, refresh README mentioning this.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Now installing in /usr rather than in / (root).

While at it, fix a random typo.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

New symbols included in libxtables.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Refresh patch.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Similar patch applied upstream and included in the new release.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

More compat renames, use nft instead.

Thanks: Pedretti Fabio <pedretti.fabio@gmail.com>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Typo.

Thanks: Pedretti Fabio <pedretti.fabio@gmail.com>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

New changelog entry, plus adding missing entry 1.6.2-1.1 (NMU).

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Fix typo.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Add new symbols.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Leave room for the original binaries in their old packages.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Merge the binary package into the main iptables package now that compat tools
are the main ones.

While at it, move all binaries to /usr/sbin/ instead of /sbin. No reason for
them to live there.

TODO:
 * actual tests for symlinking issues
 * adjust manpages
 * check update-alternatives
 * check relationships
 * check READMEs etc
 * wrap-and-sort
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Refresh patch with latest upstream changes.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Refresh patch with latest upstream tarball.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

A bit more info.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

No longer relevant.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

These manpages have been copied from upstream. In the next upstream release
they will be included in the tarball.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Refresh file with info about nftables and compat/translate tools.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>