Get Gentoo!
gentoo.org sites
gentoo.org Wiki Bugs Forums Packages
Planet Archives Sources
Infra Status
summaryrefslogtreecommitdiff
path: root/net-firewall
Commit message (Collapse)AuthorAgeFilesLines
...
* net-firewall/ipt_netflow: Stable for amd64 x86 tooJeroen Roovers2019-12-271-1/+1
| | | | | | | | Package-Manager: Portage-2.3.84, Repoman-2.3.20 Closes: https://bugs.gentoo.org/659266 Closes: https://bugs.gentoo.org/660936 Closes: https://bugs.gentoo.org/678788 Signed-off-by: Jeroen Roovers <jer@gentoo.org>
* net-firewall/ipt_netflow: Check for NF_NAT in kernel >=5.2Jeroen Roovers2019-12-272-6/+28
| | | | | Package-Manager: Portage-2.3.84, Repoman-2.3.20 Signed-off-by: Jeroen Roovers <jer@gentoo.org>
* net-firewall/xtables-addons: version bump to 3.7Anthony G. Basile2019-12-172-2/+2
| | | | | Package-Manager: Portage-2.3.79, Repoman-2.3.16 Signed-off-by: Anthony G. Basile <blueness@gentoo.org>
* net-firewall/ebtables-2.0.11: Version bumpPatrick McLean2019-12-105-0/+164
| | | | | Package-Manager: Portage-2.3.81, Repoman-2.3.20 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* net-firewall/arptables-0.0.5: Version bumpPatrick McLean2019-12-102-0/+35
| | | | | Package-Manager: Portage-2.3.81, Repoman-2.3.20 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* net-firewall/nftables: Depend on >=net-libs/libnftnl-1.1.5Francisco Blas (klondike) Izquierdo Riera2019-12-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Although upstreams reports that nftables 0.9.3 depends on libnftnl 1.1.4 or higher. Using said version results on the following errors: netlink.c: In function ‘netlink_delinearize_chain’: netlink.c:423:38: error: ‘NFTNL_CHAIN_DEVICES’ undeclared (first use in this function); did you mean ‘NFTNL_CHAIN_DEV’? } else if (nftnl_chain_is_set(nlc, NFTNL_CHAIN_DEVICES)) { ^~~~~~~~~~~~~~~~~~~ NFTNL_CHAIN_DEV netlink.c:423:38: note: each undeclared identifier is reported only once for each function it appears in netlink.c: In function ‘netlink_delinearize_obj’: netlink.c:1049:27: error: ‘NFTNL_OBJ_SYNPROXY_MSS’ undeclared (first use in this function); did you mean ‘NFTNL_EXPR_SYNPROXY_MSS’? nftnl_obj_get_u16(nlo, NFTNL_OBJ_SYNPROXY_MSS); ^~~~~~~~~~~~~~~~~~~~~~ NFTNL_EXPR_SYNPROXY_MSS netlink.c:1051:26: error: ‘NFTNL_OBJ_SYNPROXY_WSCALE’ undeclared (first use in this function); did you mean ‘NFTNL_EXPR_SYNPROXY_WSCALE’? nftnl_obj_get_u8(nlo, NFTNL_OBJ_SYNPROXY_WSCALE); ^~~~~~~~~~~~~~~~~~~~~~~~~ NFTNL_EXPR_SYNPROXY_WSCALE netlink.c:1053:27: error: ‘NFTNL_OBJ_SYNPROXY_FLAGS’ undeclared (first use in this function); did you mean ‘NFTNL_EXPR_SYNPROXY_FLAGS’? nftnl_obj_get_u32(nlo, NFTNL_OBJ_SYNPROXY_FLAGS); ^~~~~~~~~~~~~~~~~~~~~~~~ NFTNL_EXPR_SYNPROXY_FLAGS netlink.c: In function ‘netlink_delinearize_flowtable’: netlink.c:1137:3: warning: implicit declaration of function ‘nftnl_flowtable_get_u64’; did you mean ‘nftnl_flowtable_get_u32’? [-Wimplicit-function-declaration] nftnl_flowtable_get_u64(nlo, NFTNL_FLOWTABLE_HANDLE); ^~~~~~~~~~~~~~~~~~~~~~~ nftnl_flowtable_get_u32 netlink.c:1137:32: error: ‘NFTNL_FLOWTABLE_HANDLE’ undeclared (first use in this function); did you mean ‘NFTA_FLOWTABLE_HANDLE’? nftnl_flowtable_get_u64(nlo, NFTNL_FLOWTABLE_HANDLE); ^~~~~~~~~~~~~~~~~~~~~~ NFTA_FLOWTABLE_HANDLE Depend instead on version 1.1.5 or higher with which the compilation suceeds. Closes: https://bugs.gentoo.org/701976 Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.76, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: Port missing changes to 0.9.3Francisco Blas (klondike) Izquierdo Riera2019-12-041-2/+2
| | | | | | | | | | | | | | Lars added nftables-0.9.3 at the time I was doing the changes to rename the modern_kernel USE flag and move the skel files into its own folder in doc. As a result of this, I missed the ebuild and didn't update it. Update also the 0.9.3 ebuild so it follows the same conventions as the others. Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.76, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: fix modern_kernel flagMatthew Thode2019-12-031-4/+4
| | | | | Package-Manager: Portage-2.3.80, Repoman-2.3.19 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: Move skel filesFrancisco Blas (klondike) Izquierdo Riera2019-12-033-4/+107
| | | | | | | | | | | | | | | | | Currently the ebuild installs the skeleton files directly into the ebuild's doc directory. In 0.9.0-r5 the intention was installing them into a skels folder (although this was not done correctly). Replace the sed rules so that the skeleton files are installed into the skel folder. This will be cleaner if for some reason nftables adds further documentation on the future. It is also easier to perform this change now than once we stabilize. Bug: https://bugs.gentoo.org/671254 Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.76, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: rename modern_kernel use flagFrancisco Blas (klondike) Izquierdo Riera2019-12-034-13/+13
| | | | | | | | | | | | | | | | | When the new scripts supporting atomic updates on modern kernels where introduced, usage of the new scripts was controlled by the modern_kernel USE flag. QA has requested that we avoid using underscores on USE flags as they are a reserved character. Rename the modern_kernel USE flag to modern-kernel to address this issue. Closes: https://bugs.gentoo.org/694838 Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.76, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: Bump to version 0.9.3Lars Wendler2019-12-032-0/+145
| | | | | Package-Manager: Portage-2.3.80, Repoman-2.3.19 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-firewall/iptables: Bump to version 1.8.4Lars Wendler2019-12-032-0/+130
| | | | | Package-Manager: Portage-2.3.80, Repoman-2.3.19 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-firewall/nftables: Touch rules-save with right umaskFrancisco Blas (klondike) Izquierdo Riera2019-12-023-3/+3
| | | | | | | | | | | | | | | | | | The nftables ebuild contains code to ensure the rules-save file is created so the service will start on systemd based systems. The current code creates the file with default permissions 644 which triggers the code for detecting misconfigured system added to address bug #691326 Instead of just using touch, start a subshell so we can call umask beforehand and address the issue. Bug: https://bugs.gentoo.org/691326 Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.76, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: Drop vulnerable ebuildFrancisco Blas (klondike) Izquierdo Riera2019-12-021-97/+0
| | | | | | | | | | | Drop the nftables-0.9.0-r4 ebuild which is affected by the permission handling bug as all stable arches can now use -r5 instead. Bug: https://bugs.gentoo.org/691326 Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.76, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/ferm: restrict testJoonas Niilola2019-12-021-0/+3
| | | | | Package-Manager: Portage-2.3.80, Repoman-2.3.19 Signed-off-by: Joonas Niilola <juippis@gentoo.org>
* net-firewall/ferm: drop oldTomas Mozes2019-12-022-37/+0
| | | | | | Signed-off-by: Tomáš Mózes <hydrapolic@gmail.com> Closes: https://github.com/gentoo/gentoo/pull/13802 Signed-off-by: Joonas Niilola <juippis@gentoo.org>
* net-firewall/ferm: bump to 2.5Tomas Mozes2019-12-022-0/+35
| | | | | Signed-off-by: Tomáš Mózes <hydrapolic@gmail.com> Signed-off-by: Joonas Niilola <juippis@gentoo.org>
* net-firewall/firehol: Take over as maintainerJames Le Cuirot2019-11-301-1/+4
| | | | | Package-Manager: Portage-2.3.80, Repoman-2.3.17 Signed-off-by: James Le Cuirot <chewi@gentoo.org>
* */*: Reassign alonbl@'s packagesMichał Górny2019-11-291-4/+2
| | | | Signed-off-by: Michał Górny <mgorny@gentoo.org>
* net-firewall/ipset: Add base-system as maintainerThomas Deutschmann2019-11-271-3/+9
| | | | | Package-Manager: Portage-2.3.80, Repoman-2.3.19 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
* net-firewall/ipset: bump to v7.4Thomas Deutschmann2019-11-274-0/+138
| | | | | | | | | - Add systemd unit Closes: https://bugs.gentoo.org/680438 Closes: https://bugs.gentoo.org/558038 Package-Manager: Portage-2.3.80, Repoman-2.3.19 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
* net-firewall/fwanalog: Remove last-rited pkgMichał Górny2019-11-053-46/+0
| | | | | Bug: https://bugs.gentoo.org/696252 Signed-off-by: Michał Górny <mgorny@gentoo.org>
* net-firewall/fwipsec: Remove last-rited pkgMichał Górny2019-11-053-39/+0
| | | | | Bug: https://bugs.gentoo.org/696252 Signed-off-by: Michał Górny <mgorny@gentoo.org>
* net-firewall/quicktables: Remove last-rited pkgMichał Górny2019-11-053-26/+0
| | | | | Bug: https://bugs.gentoo.org/696252 Signed-off-by: Michał Górny <mgorny@gentoo.org>
* net-firewall/shapecfg: Remove last-rited pkgMichał Górny2019-11-055-110/+0
| | | | | Bug: https://bugs.gentoo.org/696252 Signed-off-by: Michał Górny <mgorny@gentoo.org>
* net-firewall/fwknop: Added myself as a proxy maintainer.Hank Leininger2019-11-041-1/+8
| | | | | | | | Signed-off-by: Hank Leininger <hlein@korelogic.com> Closes: https://bugs.gentoo.org/698604 Package-Manager: Portage-2.3.78, Repoman-2.3.17 Closes: https://github.com/gentoo/gentoo/pull/13457 Signed-off-by: Joonas Niilola <juippis@gentoo.org>
* net-firewall/fwknop: Version bump to 2.6.10.Hank Leininger2019-11-042-0/+131
| | | | | | | | | | Also changed SRC_URI to the main upstream site because github mangles the .tar.gz to break upstream's PGP signature. Signed-off-by: Hank Leininger <hlein@korelogic.com> Bug: https://bugs.gentoo.org/698604 Package-Manager: Portage-2.3.78, Repoman-2.3.17 Signed-off-by: Joonas Niilola <juippis@gentoo.org>
* net-firewall/pftop: remove last rited pkgMikle Kolyada2019-11-033-59/+0
| | | | Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
* */*: reassign packages from bsd@g.oMichał Górny2019-10-121-4/+1
| | | | Signed-off-by: Michał Górny <mgorny@gentoo.org>
* */*: Remove remaining *-fbsd KEYWORDSMichał Górny2019-10-111-1/+1
| | | | Signed-off-by: Michał Górny <mgorny@gentoo.org>
* net-firewall/rtsp-conntrack: version bumpSergey Popov2019-10-023-0/+151
| | | | | | | | | Add compatibility patch for kernel 5.3 Reported-by: Toralf Förster <toralf@gentoo.org> Closes: https://bugs.gentoo.org/695476 Signed-off-by: Sergey Popov <pinkbyte@gentoo.org> Package-Manager: Portage-2.3.66, Repoman-2.3.11
* */*: Reassign coacher's packagesMichał Górny2019-09-251-8/+1
| | | | | Closes: https://bugs.gentoo.org/632974 Signed-off-by: Michał Górny <mgorny@gentoo.org>
* net-firewall/iptables: chmod -x files/*.initMike Gilbert2019-09-192-0/+0
| | | | | Closes: https://bugs.gentoo.org/694844 Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* net-firewall/nftables: chmod -x files/libexec/nftables.shMike Gilbert2019-09-191-0/+0
| | | | | Bug: https://bugs.gentoo.org/694838 Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* net-firewall/nufw: Make USE=prelude a local flagMichał Górny2019-09-151-0/+1
| | | | Signed-off-by: Michał Górny <mgorny@gentoo.org>
* net-firewall/nftables: arm stable wrt bug #693716Mikle Kolyada2019-09-131-1/+1
| | | | | | Package-Manager: Portage-2.3.69, Repoman-2.3.16 RepoMan-Options: --include-arches="arm" Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
* net-firewall/nftables: ia64 stable wrt bug #693716Agostino Sarubbo2019-09-131-1/+1
| | | | | | Package-Manager: Portage-2.3.69, Repoman-2.3.16 RepoMan-Options: --include-arches="ia64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* metadata.xml: popuplate CPE entries for better CVE trackingAllen Webb2019-09-121-0/+3
| | | | | Signed-off-by: Allen Webb <allenwebb@chromium.org> Signed-off-by: Mike Frysinger <vapier@gentoo.org>
* net-firewall/shorewall: drop oldThomas Deutschmann2019-09-122-489/+0
| | | | | Package-Manager: Portage-2.3.76, Repoman-2.3.17 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
* net-firewall/shorewall: x86 stable, applying ALLARCHES policyThomas Deutschmann2019-09-121-1/+1
| | | | | Package-Manager: Portage-2.3.76, Repoman-2.3.17 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
* net-firewall/nftables: amd64 stable wrt bug #693716Agostino Sarubbo2019-09-091-1/+1
| | | | | | Package-Manager: Portage-2.3.69, Repoman-2.3.16 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* net-firewall/nftables: x86 stable (bug #693716)Thomas Deutschmann2019-09-081-1/+1
| | | | | Package-Manager: Portage-2.3.75, Repoman-2.3.17 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
* net-firewall/nftables: Fix permissions for rules.saveFrancisco Blas (klondike) Izquierdo Riera2019-09-075-5/+121
| | | | | | | | | | | | | | | | | | | | Due to a bug, the rules.save file was created with the wrong permissions which allowed all users to read the file with the system rules although root privileges are usually required to do so. To fix this issue, the following measures have been taken: * The umask on nftables-mk.sh is now correctly set to 177 * nftables.sh now also sets the umask before saving the rules * The ebuilds will warn on post installation if the rules.save has insecure permissions * The ebuilds have been bumped to ensure these changes are applied Bug: https://bugs.gentoo.org/691326 Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.69, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/shorewall: fix missing slashesThomas Deutschmann2019-09-041-14/+14
| | | | | Package-Manager: Portage-2.3.75, Repoman-2.3.17 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
* net-firewall/shorewall: bump to v5.2.3.4Thomas Deutschmann2019-09-042-0/+489
| | | | | Package-Manager: Portage-2.3.75, Repoman-2.3.17 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
* net-firewall/nftables-0.9.2: added ~sparcMatt Turner2019-08-271-1/+1
| | | | Signed-off-by: Matt Turner <mattst88@gentoo.org>
* net-firewall/nftables: Bump to version 0.9.2Lars Wendler2019-08-232-0/+139
| | | | | Package-Manager: Portage-2.3.72, Repoman-2.3.17 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-firewall/nufw: Depend on dev-db/mysql-connector-cJeroen Roovers2019-08-191-2/+2
| | | | | | Package-Manager: Portage-2.3.71, Repoman-2.3.17 Fixes: https://bugs.gentoo.org/show_bug.cgi?id=665972 Signed-off-by: Jeroen Roovers <jer@gentoo.org>
* net-firewall/nufw: OldJeroen Roovers2019-08-191-102/+0
| | | | | Package-Manager: Portage-2.3.71, Repoman-2.3.17 Signed-off-by: Jeroen Roovers <jer@gentoo.org>
* net-firewall/ufw: remove unused patchesHasan ÇALIŞIR2019-08-142-194/+0
| | | | | | | Package-Manager: Portage-2.3.69, Repoman-2.3.16 Signed-off-by: Hasan ÇALIŞIR <hasan.calisir@psauxit.com> Closes: https://github.com/gentoo/gentoo/pull/12698 Signed-off-by: Joonas Niilola <juippis@gentoo.org>