GitLab

Patch proposed by Jamie Strandboge <jamie@ubuntu.com>

Closes: #949576
Signed-off-by: Alberto Molina Coballes <alb.molina@gmail.com>

This is the recommended mode of operation.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Fixes: lintian: out-of-date-standards-version
See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html

libiptc.pc is provided againg by libiptc-dev instead of libip4tc-dev,
so corresponding Breaks ans Replaces Fields are itroduced.

Section field is also changed to libdevel

Closes: #949576
Signed-off-by: Alberto Molina Coballes <alb.molina@gmail.com>

It seems we need further clarificatoin on utility names. Include the suffix
when referencing to them.

Bug: #946258
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

We can't get rid of the libiptc-dev package because pkg-config searchs for the
libiptc.pc file in some packages (like systemd).
The libiptc.pc file is very simple in the sense that it just points to libip4tc
and libip6tc.

My personal opinion is that the change should be made in upstream systemd
instead. They should stop depending on libiptc and directly use either libip4tc
or libip6tc, but that change is apparently too hard. So be it, let the package
contain just a single file.

Closes: #947176
Closes: #946202
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Alberto is collaborating in the development of this package.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

/etc/ethertypes is needed by ebtables-nft-* binaries and it's provided
by netbase (>= 6.0)

Closes: #946932
Signed-off-by: Alberto Molina Coballes <alb.molina@gmail.com>

Fixes lintian: out-of-date-standards-version
See https://lintian.debian.org/tags/out-of-date-standards-version.html for more details.

Fixes lintian: vcs-field-not-canonical
See https://lintian.debian.org/tags/vcs-field-not-canonical.html for more details.

Fixes lintian: transitional-package-should-be-oldlibs-optional
See https://lintian.debian.org/tags/transitional-package-should-be-oldlibs-optional.html for more details.

Fixes lintian: uses-debhelper-compat-file
See https://lintian.debian.org/tags/uses-debhelper-compat-file.html for more details.

libiptc0 is a transitional dummy package, so the dependecies upon it
have been removed from iptables, libip4tc-dev and libip6tc-dev

Closes: #946202
Signed-off-by: Alberto Molina Coballes <alb.molina@gmail.com>

Homepage switched to https

Closes: #946253
Signed-off-by: Alberto Molina Coballes <alb.molina@gmail.com>

Bump debhelper compat to 12.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

No longer considered upstream a library. The content is moved to libip4tc.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Cherry-pick this patch from upstream, required for a proper build of iptables
1.8.4.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Suggest firewalld. Using an higher-level wrapper rather than directly iptables
is in general a good idea I think.

See this debian-devel mailing list thread for context:
 https://lists.debian.org/debian-devel/2019/07/msg00332.html

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

No longer required.

Closes: #939243
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The package is now Priority: optional. This means it is not installed by
default in Debian.

See this debian-devel mailing list thread:
 https://lists.debian.org/debian-devel/2019/07/msg00332.html

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

No changes required per policy upgrade checklist.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The SONAME was bumped upstream. Adjust all the files to reflect this.

Related upstream change:
 libiptc: Extend struct xtc_ops (341279e09071de01a06bde6cf988d5ec671fe0d1)
 https://git.netfilter.org/iptables/commit/?id=341279e09071de01a06bde6cf988d5ec671fe0d1

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The SONAME was bumped. Adjust all the files to reflect this.

Related upstream change:
 libiptc: Extend struct xtc_ops (341279e09071de01a06bde6cf988d5ec671fe0d1)
 https://git.netfilter.org/iptables/commit/?id=341279e09071de01a06bde6cf988d5ec671fe0d1

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

New iptables release requires a newer libnftnl version.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Let's do a bit of cleanup.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Recommend iptables users to migrate to nftables.
Give a refresh to all package descriptions.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Policy upgrading checklist:
 https://www.debian.org/doc/debian-policy/upgrading-checklist.html#version-4-3-0



Changes are:
 * use proper verbose mode
 * refresh URLs in d/copyright
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Merge the binary package into the main iptables package now that compat tools
are the main ones.

While at it, move all binaries to /usr/sbin/ instead of /sbin. No reason for
them to live there.

TODO:
 * actual tests for symlinking issues
 * adjust manpages
 * check update-alternatives
 * check relationships
 * check READMEs etc
 * wrap-and-sort
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

If the iptables-nftables-package is installed with and old iptables package,
there will be a path clash. Let's prevent that with an explicit Break.

Anyway, iptables-nftables-package Depends on an specific version of iptables
due to dependencies.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Reported by lintian.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Bump compliance with standards.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Let's use the new Debian salsa service.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

No changes required per checklist:
 https://www.debian.org/doc/debian-policy/upgrading-checklist.html#s-4.0.0

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

As reported by the Debian package tracker hinter.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The affected packages cannot satisfy their cross build dependencies,
because their dependency on iptables-dev is unsatisfiable. In general,
Architecture: all packages can never satisfy cross build dependencies
unless marked Multi-Arch: foreign. In this case, such a marking would be
fatal, as it masks out the architecture constraint. Those packages would
be requesting iptables headers for the host architecture and receiving
them for the build architecture. Thus iptables-dev needs to be switched
to Architecture: any.

Alternatively, all those affected packages need to switch their dependency
to the real packages and iptables-dev should be removed.

Closes: #865464
Signed-off-by: Helmut Grohne <helmutg@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Switch the maintainer to the new netfilter packaging team.

Reference:
 http://ral-arturo.org/2016/11/30/debian-netfilter-team.html

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The problem with this package and libxtables11 not being co-installable
was introduced in the first snapshot version which did not get the
SONAME bumped for the package name. But older versions should still be
co-installable as they have different SONAMES. Change the direction
of the verioned dependencies to cover this.

In addition using a >= should be safe here as long as a libxtables11
is not reintroduced.

Closes: #845800
Signed-off-by: Guillem Jover <guillem@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The URL changed. Now instead of pkg-netfilter/pkg-netfilter, we have
pkg-netfilter/pkg-iptables.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

It's a shorter url, we can use the same for Vcs-Git and Vcs-Browser and
the webgui is more ux friendly :)

Adds '-- development files' to the short description in order to differ from
libxtables12 one.