GitLab

Deal first with update-alternatives, then do the symlink cleanup.

This avoids errors like this:

Removing iptables (1.8.2-2) ...
update-alternatives: warning: forcing reinstallation of alternative
 /usr/sbin/iptables-nft because link group iptables is broken
update-alternatives: warning: forcing reinstallation of alternative
 /usr/sbin/ip6tables-nft because link group ip6tables is broken
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

They return non-0 even when running with `-h'.

I don't have time to find a proper fix for this.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

We may need to overwrite them in some situations in postinst.
Also, deconfigure them in more cases in prerm. 

Closes: #913811
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

New  upstream release.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

A few new symbols.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Cherry-pick from upstream:

http://git.netfilter.org/iptables/commit/?id=907e429d7548157016cd51aba4adc5d0c7d9f816

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

These paths are managed by update-alternatives, no need to ship them in the
package.

Closes: #911899
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Fix some typos.

Closes: #912981
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Obsolete, rename them.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Update to upstream version '1.8.2'
with Debian dir 588f1dc113bc8a78aac5111883fa4ec874146bb7

New package upload.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

To be dropped in the buster+1 release cycles, so we don't break people
hardcoding the path to iptables.

Closes: #911777
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

New changelog entry.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Give additional instructions for users installing this version of the package.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The nft version of them now include -restore and -save as well.

While at it, refresh README mentioning this.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Now installing in /usr rather than in / (root).

While at it, fix a random typo.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

New symbols included in libxtables.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Refresh patch.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Similar patch applied upstream and included in the new release.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Update to upstream version '1.8.1'
with Debian dir f7eefdbc289bc01f3d8a1522cd469a3564de9051

More compat renames, use nft instead.

Thanks: Pedretti Fabio <pedretti.fabio@gmail.com>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Typo.

Thanks: Pedretti Fabio <pedretti.fabio@gmail.com>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

New changelog entry, plus adding missing entry 1.6.2-1.1 (NMU).

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Fix typo.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Add new symbols.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Leave room for the original binaries in their old packages.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Merge the binary package into the main iptables package now that compat tools
are the main ones.

While at it, move all binaries to /usr/sbin/ instead of /sbin. No reason for
them to live there.

TODO:
 * actual tests for symlinking issues
 * adjust manpages
 * check update-alternatives
 * check relationships
 * check READMEs etc
 * wrap-and-sort
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Refresh patch with latest upstream changes.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Refresh patch with latest upstream tarball.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Upstream version 1.8.0

A bit more info.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

No longer relevant.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

These manpages have been copied from upstream. In the next upstream release
they will be included in the tarball.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Refresh file with info about nftables and compat/translate tools.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

If the iptables-nftables-package is installed with and old iptables package,
there will be a path clash. Let's prevent that with an explicit Break.

Anyway, iptables-nftables-package Depends on an specific version of iptables
due to dependencies.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Now the old iptables binary is server at /sbin/iptables-legacy.
Then, using the update-alternatives system one can choose which binary is going
to provide the actual /sbin/iptables tool, either iptables-legacy or
the newer iptables-compat (nf_tables compat).

The compat version is given more priority by default.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>