GitLab

/etc/ethertypes is needed by ebtables-nft-* binaries and it's provided
by netbase (>= 6.0)

Closes: #946932
Signed-off-by: Alberto Molina Coballes <alb.molina@gmail.com>

Fixes lintian: out-of-date-standards-version
See https://lintian.debian.org/tags/out-of-date-standards-version.html for more details.

Fixes lintian: vcs-field-not-canonical
See https://lintian.debian.org/tags/vcs-field-not-canonical.html for more details.

Fixes lintian: transitional-package-should-be-oldlibs-optional
See https://lintian.debian.org/tags/transitional-package-should-be-oldlibs-optional.html for more details.

Fixes lintian: uses-debhelper-compat-file
See https://lintian.debian.org/tags/uses-debhelper-compat-file.html for more details.

libiptc0 is a transitional dummy package, so the dependecies upon it
have been removed from iptables, libip4tc-dev and libip6tc-dev

Closes: #946202
Signed-off-by: Alberto Molina Coballes <alb.molina@gmail.com>

Homepage switched to https

Closes: #946253
Signed-off-by: Alberto Molina Coballes <alb.molina@gmail.com>

Bump debhelper compat to 12.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

No longer considered upstream a library. The content is moved to libip4tc.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Cherry-pick this patch from upstream, required for a proper build of iptables
1.8.4.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Suggest firewalld. Using an higher-level wrapper rather than directly iptables
is in general a good idea I think.

See this debian-devel mailing list thread for context:
 https://lists.debian.org/debian-devel/2019/07/msg00332.html

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

No longer required.

Closes: #939243
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The package is now Priority: optional. This means it is not installed by
default in Debian.

See this debian-devel mailing list thread:
 https://lists.debian.org/debian-devel/2019/07/msg00332.html

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

No changes required per policy upgrade checklist.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The SONAME was bumped upstream. Adjust all the files to reflect this.

Related upstream change:
 libiptc: Extend struct xtc_ops (341279e09071de01a06bde6cf988d5ec671fe0d1)
 https://git.netfilter.org/iptables/commit/?id=341279e09071de01a06bde6cf988d5ec671fe0d1

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The SONAME was bumped. Adjust all the files to reflect this.

Related upstream change:
 libiptc: Extend struct xtc_ops (341279e09071de01a06bde6cf988d5ec671fe0d1)
 https://git.netfilter.org/iptables/commit/?id=341279e09071de01a06bde6cf988d5ec671fe0d1

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

New iptables release requires a newer libnftnl version.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Let's do a bit of cleanup.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Recommend iptables users to migrate to nftables.
Give a refresh to all package descriptions.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Policy upgrading checklist:
 https://www.debian.org/doc/debian-policy/upgrading-checklist.html#version-4-3-0



Changes are:
 * use proper verbose mode
 * refresh URLs in d/copyright
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Merge the binary package into the main iptables package now that compat tools
are the main ones.

While at it, move all binaries to /usr/sbin/ instead of /sbin. No reason for
them to live there.

TODO:
 * actual tests for symlinking issues
 * adjust manpages
 * check update-alternatives
 * check relationships
 * check READMEs etc
 * wrap-and-sort
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

If the iptables-nftables-package is installed with and old iptables package,
there will be a path clash. Let's prevent that with an explicit Break.

Anyway, iptables-nftables-package Depends on an specific version of iptables
due to dependencies.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Reported by lintian.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Bump compliance with standards.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Let's use the new Debian salsa service.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

No changes required per checklist:
 https://www.debian.org/doc/debian-policy/upgrading-checklist.html#s-4.0.0

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

As reported by the Debian package tracker hinter.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The affected packages cannot satisfy their cross build dependencies,
because their dependency on iptables-dev is unsatisfiable. In general,
Architecture: all packages can never satisfy cross build dependencies
unless marked Multi-Arch: foreign. In this case, such a marking would be
fatal, as it masks out the architecture constraint. Those packages would
be requesting iptables headers for the host architecture and receiving
them for the build architecture. Thus iptables-dev needs to be switched
to Architecture: any.

Alternatively, all those affected packages need to switch their dependency
to the real packages and iptables-dev should be removed.

Closes: #865464
Signed-off-by: Helmut Grohne <helmutg@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Switch the maintainer to the new netfilter packaging team.

Reference:
 http://ral-arturo.org/2016/11/30/debian-netfilter-team.html

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The problem with this package and libxtables11 not being co-installable
was introduced in the first snapshot version which did not get the
SONAME bumped for the package name. But older versions should still be
co-installable as they have different SONAMES. Change the direction
of the verioned dependencies to cover this.

In addition using a >= should be safe here as long as a libxtables11
is not reintroduced.

Closes: #845800
Signed-off-by: Guillem Jover <guillem@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The URL changed. Now instead of pkg-netfilter/pkg-netfilter, we have
pkg-netfilter/pkg-iptables.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

It's a shorter url, we can use the same for Vcs-Git and Vcs-Browser and
the webgui is more ux friendly :)

Adds '-- development files' to the short description in order to differ from
libxtables12 one.

dh-autoreconf is now a dependency of debhelper.

Use <= rather than << as reported by Alessandro.

Closes: #845278
Reported-by: Alessandro Ghedini <alessandro@cloudflare.com>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

[...]
Preparing to unpack .../libxtables12_1.6.0+snapshot20161117-2_amd64.deb ...
Unpacking libxtables12:amd64 (1.6.0+snapshot20161117-2) ...
dpkg: error processing archive
/var/cache/apt/archives/libxtables12_1.6.0+snapshot20161117-2_amd64.deb
(--unpack):
 trying to overwrite '/usr/lib/x86_64-linux-gnu/libxtables.so.12.0.0',
which is also in package libxtables11:amd64 1.6.0+snapshot20161117-1
dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)
Errors were encountered while processing:
 /var/cache/apt/archives/libxtables12_1.6.0+snapshot20161117-2_amd64.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)
[...]

Closes: #845278
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Bump soname to don't brean reverse dependencies.

Closes: #844755
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Include the translate tools:
 * iptables-translate
 * ip6tables-translate
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

No changes requires per checklist:
 https://www.debian.org/doc/debian-policy/upgrading-checklist.html

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>