GitLab

If the iptables-nftables-package is installed with and old iptables package,
there will be a path clash. Let's prevent that with an explicit Break.

Anyway, iptables-nftables-package Depends on an specific version of iptables
due to dependencies.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Reported by lintian.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Bump compliance with standards.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Let's use the new Debian salsa service.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

No changes required per checklist:
 https://www.debian.org/doc/debian-policy/upgrading-checklist.html#s-4.0.0

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

As reported by the Debian package tracker hinter.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The affected packages cannot satisfy their cross build dependencies,
because their dependency on iptables-dev is unsatisfiable. In general,
Architecture: all packages can never satisfy cross build dependencies
unless marked Multi-Arch: foreign. In this case, such a marking would be
fatal, as it masks out the architecture constraint. Those packages would
be requesting iptables headers for the host architecture and receiving
them for the build architecture. Thus iptables-dev needs to be switched
to Architecture: any.

Alternatively, all those affected packages need to switch their dependency
to the real packages and iptables-dev should be removed.

Closes: #865464
Signed-off-by: Helmut Grohne <helmutg@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Switch the maintainer to the new netfilter packaging team.

Reference:
 http://ral-arturo.org/2016/11/30/debian-netfilter-team.html

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The problem with this package and libxtables11 not being co-installable
was introduced in the first snapshot version which did not get the
SONAME bumped for the package name. But older versions should still be
co-installable as they have different SONAMES. Change the direction
of the verioned dependencies to cover this.

In addition using a >= should be safe here as long as a libxtables11
is not reintroduced.

Closes: #845800
Signed-off-by: Guillem Jover <guillem@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The URL changed. Now instead of pkg-netfilter/pkg-netfilter, we have
pkg-netfilter/pkg-iptables.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

It's a shorter url, we can use the same for Vcs-Git and Vcs-Browser and
the webgui is more ux friendly :)

Adds '-- development files' to the short description in order to differ from
libxtables12 one.

dh-autoreconf is now a dependency of debhelper.

Use <= rather than << as reported by Alessandro.

Closes: #845278
Reported-by: Alessandro Ghedini <alessandro@cloudflare.com>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

[...]
Preparing to unpack .../libxtables12_1.6.0+snapshot20161117-2_amd64.deb ...
Unpacking libxtables12:amd64 (1.6.0+snapshot20161117-2) ...
dpkg: error processing archive
/var/cache/apt/archives/libxtables12_1.6.0+snapshot20161117-2_amd64.deb
(--unpack):
 trying to overwrite '/usr/lib/x86_64-linux-gnu/libxtables.so.12.0.0',
which is also in package libxtables11:amd64 1.6.0+snapshot20161117-1
dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)
Errors were encountered while processing:
 /var/cache/apt/archives/libxtables12_1.6.0+snapshot20161117-2_amd64.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)
[...]

Closes: #845278
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Bump soname to don't brean reverse dependencies.

Closes: #844755
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Include the translate tools:
 * iptables-translate
 * ip6tables-translate
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

No changes requires per checklist:
 https://www.debian.org/doc/debian-policy/upgrading-checklist.html

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Put myself as Maintainer and use 'arturo@debian.org' as address while at it.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Fix descriptions and long descriptions of libiptc, libip4tc and libip6tc.
Reported-by: Michael Biebl <biebl@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Add missing depends from -dev packages to their binary match.

Closes: #835664
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Run wrap-and-sort in the pacakge.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

libiptc0, libip4tc0 and libip6tc0 don't need a Replaces & Breaks
with iptables, given the library files were moved to multi-arch paths
(so there is no file conflict with the old iptables package).

The -dev packages are different, because they have conflicting paths with
the old iptables-dev package.
Suggested-by: Michael Biebl <biebl@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

So all library packages are Multi-Arch: same, otherwise marking iptables
M-A: foreign is pretty pointless.
Suggested-by: Michael Biebl <biebl@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Michael Biebl says:
 <<
 please consider lowering the priority of the library packages to
 optional. I know lintian will complain about that not being policy
 compliant, but I think installing libraries because of their priority is
 a stupid idea (and discussion is currently ongoing to fix the debian
 policy in that regard).
 >>
Suggested-by: Michael Biebl <biebl@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Given we already depends on -dev packages. They lib packages will be pulled
in by their corresponding -dev package.
Suggested-by: Michael Biebl <biebl@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

To allow transitions from iptables-dev to the libiptc split.
Reported-by: Michael Biebl <biebl@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

There are several little things to fix in the libiptc package split to get
it completed:
 * adjust break/depends
 * distribute usr/include/libiptc/libiptc.h
 * dropped the breaks: linux-libc-dev (<< 3.5), this was added for a file
   conflict regarding /usr/include/linux/netfilter_ipv4/ip_queue.h, which
   is no longer shipped by the library packages.
Signed-off-by: Michael Biebl <biebl@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

We have now conflicts with iptables and iptables-dev (1.6.0-2), given
we have moved files between packages.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

We have a libxtables11 binary package, let's include the devel files
in a libxtables-dev package for coherence.

This is mainly a matter of renaming the iptables-dev binary package.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Generate 2 new binary packages libiptc and libiptc-dev from iptables and
iptables-dev.

This way, we can play Multi-Arch games independently with iptables and libiptc.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

No changes required, per checklist:
 https://www.debian.org/doc/packaging-manuals/upgrading-checklist.txt

Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Users are likely to play with kernel modules. Suggests kmod.

Closes: #623865
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

This change triggers a lintian warning which I don't know
how to handle by now, given libiptc is a *private* library
and should not be used by any package.

E: iptables: shlib-in-multi-arch-foreign-package lib/libiptc.so.0.0.0
N:
N:    The package is marked as Multi-Arch: foreign, but it includes a shared
N:    library in a public library directory.
N:
N:    Refer to https://wiki.ubuntu.com/MultiarchSpec

 for details.
N:
N:    Severity: serious, Certainty: certain
N:
N:    Check: shared-libs, Type: binary, udeb
N:

Closes: #776041
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Move the libxtables11 package from Section 'net' to 'libs'.

Closes: #812973
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Pointing to the alioth project.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

There are no specific manpages for the -compat tools right now.

Writting such manpages is something I would like to discuss with upstream.
I think the best sollution by now is to simply redirect users to the originals.
For this, a dependency with the original tools is required.

It should be noted that such a dependency is not weird, since its very likely
that users of the iptables-nftables-compat package are triying to migrate
their ruleset, so they need the original tools anyway.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

No changes required by:
 https://www.debian.org/doc/packaging-manuals/upgrading-checklist.txt

Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Call wrap-and-sort to put here a bit or ordering.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>