%global mainver 5.2.8 %global baseurl http://www.shorewall.net/pub/shorewall/5.2/shorewall-%{mainver}/ # A very helpful document for packaging Shorewall is "Anatomy of Shorewall 4.0" # which is found at http://www.shorewall.net/Anatomy.html Name: shorewall Version: %{mainver} Release: 9%{?dist} Summary: An iptables front end for firewall configuration License: GPLv2+ URL: http://www.shorewall.net/ Provides: shorewall(firewall) = %{version}-%{release} Source0: %{baseurl}/%{name}-%{version}.tar.bz2 Source1: %{baseurl}/%{name}-lite-%{version}.tar.bz2 Source2: %{baseurl}/%{name}6-%{version}.tar.bz2 Source3: %{baseurl}/%{name}6-lite-%{version}.tar.bz2 Source4: %{baseurl}/%{name}-init-%{version}.tar.bz2 Source5: %{baseurl}/%{name}-core-%{version}.tar.bz2 Patch0: %{name}-init-5.2.7-nm-dispatcher-dir.patch Patch1: systemd-journal.patch Patch2: shorewall-5.2.8--Rewrite-gethostbyname2-and-inet_ntop-to-newer-getadd.patch BuildRequires: perl-generators BuildRequires: perl-interpreter BuildRequires: perl(autouse) BuildRequires: perl(constant) BuildRequires: perl(Cwd) BuildRequires: perl(Digest::SHA) BuildRequires: perl(Errno) BuildRequires: perl(File::Basename) BuildRequires: perl(File::Glob) BuildRequires: perl(File::Temp) BuildRequires: perl(FindBin) BuildRequires: perl(Getopt::Long) BuildRequires: perl(lib) BuildRequires: perl(Scalar::Util) BuildRequires: perl(Sys::Hostname) BuildRequires: perl(sort) BuildRequires: perl(strict) BuildRequires: perl(warnings) BuildRequires: systemd BuildArch: noarch Requires: shorewall-core = %{version}-%{release} Requires: iproute Requires: iptables Requires: perl(Sys::Hostname) Requires: sed Requires(post): sed Requires(post): systemd Requires(preun): systemd Requires(postun): systemd %description The Shoreline Firewall, more commonly known as "Shorewall", is a Netfilter (iptables) based firewall that can be used on a dedicated firewall system, a multi-function gateway/ router/server or on a standalone GNU/Linux system. %package -n shorewall6 Summary: Files for the IPV6 Shorewall Firewall Provides: shorewall(firewall) = %{version}-%{release} Requires: shorewall-core = %{version}-%{release} Requires: iptables iproute Requires: sed Requires(post): sed Requires(post): systemd Requires(preun): systemd Requires(postun): systemd %description -n shorewall6 This package contains the files required for IPV6 functionality of the Shoreline Firewall (shorewall). %package lite Summary: Shorewall firewall for compiled rulesets Provides: shorewall(firewall) = %{version}-%{release} Requires: shorewall-core = %{version}-%{release} Requires: iptables iproute Requires(post): systemd Requires(preun): systemd Requires(postun): systemd %description lite Shorewall Lite is a companion product to Shorewall that allows network administrators to centralize the configuration of Shorewall-based firewalls. Shorewall Lite runs a firewall script generated by a machine with a Shorewall rule compiler. A machine running Shorewall Lite does not need to have a Shorewall rule compiler installed. %package -n shorewall6-lite Summary: Shorewall firewall for compiled IPV6 rulesets Provides: shorewall(firewall) = %{version}-%{release} Requires: shorewall-core = %{version}-%{release} Requires: iptables iproute Requires(post): systemd Requires(preun): systemd Requires(postun): systemd %description -n shorewall6-lite Shorewall6 Lite is a companion product to Shorewall6 (the IPV6 firewall) that allows network administrators to centralize the configuration of Shorewall-based firewalls. Shorewall Lite runs a firewall script generated by a machine with a Shorewall rule compiler. A machine running Shorewall Lite does not need to have a Shorewall rule compiler installed. %package core Summary: Core libraries for Shorewall %description core This package contains the core libraries for Shorewall. %package init Summary: Initialization functionality and NetworkManager integration for Shorewall Requires: shorewall(firewall) = %{version}-%{release} Requires: NetworkManager >= 1.20 Requires: shorewall = %{version}-%{release} Requires: iptables iproute logrotate Requires(post): systemd Requires(preun): systemd Requires(postun): systemd %description init This package adds additional initialization functionality to Shorewall in two ways. It allows the firewall to be closed prior to bringing up network devices. This insures that unwanted connections are not allowed between the time that the network comes up and when the firewall is started. It also integrates with NetworkManager and distribution ifup/ifdown systems to allow for 'event-driven' startup and shutdown. %prep %setup -q -c -n %{name}-%{version} -T -a0 -a1 -a2 -a3 -a4 -a5 # Remove hash-bang from files which are not directly executed as shell # scripts. This silences some rpmlint errors. find . -name "lib.*" -exec sed -i -e '/\#\!\/bin\/sh/d' {} \; # Support .ko.xz kernel modules # https://bugzilla.redhat.com/show_bug.cgi?id=1181504 %if 0%{?fedora} >= 21 find -name shorewall\*.conf | xargs sed -i -e 's/^MODULE_SUFFIX=ko$/MODULE_SUFFIX="ko.xz ko"/' %endif pushd %{name}-init-%{version} %patch0 -p1 popd %patch1 -p1 %patch2 -p1 %build %install for i in shorewall-core shorewall shorewall-lite shorewall6 shorewall6-lite shorewall-init; do pushd ${i}-%{version} # Previous versions used shorewall-init.service.214 for systemd units that used # network-pre, only available in systemd >= 214 others use network-online, # which is available earlier. Starting with 5.x there is only unit services that need # network-online. Both RHEL 7 and Fedora >= 21 have systemd 214 we won't backport # shorewall to epel6 SERVICEFILE=${i}.service ./configure vendor=redhat INITFILE= SERVICEDIR=%{_unitdir} SERVICEFILE=$SERVICEFILE SBINDIR=%{_sbindir} DESTDIR=$RPM_BUILD_ROOT ./install.sh popd done # Fix up file permissions chmod 644 $RPM_BUILD_ROOT%{_datadir}/shorewall-lite/helpers chmod 644 $RPM_BUILD_ROOT%{_datadir}/shorewall6-lite/helpers chmod 755 $RPM_BUILD_ROOT%{_sbindir}/shorewall-lite chmod 755 $RPM_BUILD_ROOT%{_sbindir}/shorewall6-lite chmod 644 $RPM_BUILD_ROOT%{_sysconfdir}/shorewall-lite/shorewall-lite.conf chmod 644 $RPM_BUILD_ROOT%{_sysconfdir}/shorewall6-lite/shorewall6-lite.conf chmod 755 $RPM_BUILD_ROOT%{_prefix}/lib/NetworkManager/dispatcher.d/01-shorewall %post %systemd_post shorewall.service %if 0%{?fedora} >= 21 # Load xz kernel modules sed -i.rpmbak -e '/^MODULE_SUFFIX=ko$/s/=ko$/="ko.xz ko"/' /etc/shorewall/shorewall.conf %endif %preun %systemd_preun shorewall.service %postun %systemd_postun_with_restart shorewall.service %post -n shorewall-lite %systemd_post shorewall-lite.service %preun -n shorewall-lite %systemd_preun shorewall-lite.service %postun -n shorewall-lite %systemd_postun_with_restart shorewall-lite.service %post -n shorewall6 %systemd_post shorewall6.service %if 0%{?fedora} >= 21 # Load xz kernel modules sed -i.rpmbak -e '/^MODULE_SUFFIX=ko$/s/=ko$/="ko.xz ko"/' /etc/shorewall6/shorewall6.conf %endif %preun -n shorewall6 %systemd_preun shorewall6.service %postun -n shorewall6 %systemd_postun_with_restart shorewall6.service %post -n shorewall6-lite %systemd_post shorewall6-lite.service %preun -n shorewall6-lite %systemd_preun shorewall6-lite.service %postun -n shorewall6-lite %systemd_postun_with_restart shorewall6-lite.service %post -n shorewall-init %systemd_post shorewall-init.service %preun -n shorewall-init %systemd_preun shorewall-init.service %postun -n shorewall-init %systemd_postun_with_restart shorewall-init.service # Most /etc/shorewall permissions are 0600. rpmlint complains # about these, but it actually makes sense: just as you can't # call up iptables as a user, you should not be able to read # those files by default %files %license shorewall-%{version}/COPYING %doc shorewall-%{version}/{changelog.txt,releasenotes.txt,Samples} %{_sbindir}/shorewall %dir %{_sysconfdir}/shorewall %config(noreplace) %{_sysconfdir}/shorewall/* %ghost %attr(600,root,root) %{_sysconfdir}/shorewall/masq %config(noreplace) %{_sysconfdir}/logrotate.d/shorewall %config(noreplace) %{_sysconfdir}/sysconfig/shorewall %{_datadir}/shorewall/action.* %{_datadir}/shorewall/actions.std %{_datadir}/shorewall/configfiles/ %{_datadir}/shorewall/configpath %{_datadir}/shorewall/deprecated/ %{_datadir}/shorewall/helpers %{_datadir}/shorewall/lib.cli-std %{_datadir}/shorewall/lib.runtime %{_datadir}/shorewall/macro.* %{_datadir}/shorewall/prog.* %{_datadir}/shorewall/version %{_libexecdir}/shorewall/compiler.pl %{_libexecdir}/shorewall/getparams %{perl_vendorlib}/Shorewall %{_mandir}/man5/shorewall* %exclude %{_mandir}/man5/shorewall6* %exclude %{_mandir}/man5/shorewall-lite* %{_mandir}/man8/shorewall* %exclude %{_mandir}/man8/shorewall6* %exclude %{_mandir}/man8/shorewall-lite* %exclude %{_mandir}/man8/shorewall-init* %{_unitdir}/shorewall.service %dir %{_localstatedir}/lib/shorewall %files lite %license shorewall-lite-%{version}/COPYING %doc shorewall-lite-%{version}/{changelog.txt,releasenotes.txt} %{_sbindir}/shorewall-lite %dir %{_sysconfdir}/shorewall-lite %config(noreplace) %{_sysconfdir}/shorewall-lite/shorewall-lite.conf %config(noreplace) %{_sysconfdir}/logrotate.d/shorewall-lite %config(noreplace) %{_sysconfdir}/sysconfig/shorewall-lite %{_datadir}/shorewall-lite %{_libexecdir}/shorewall-lite %{_mandir}/man5/shorewall-lite* %{_mandir}/man8/shorewall-lite* %{_unitdir}/shorewall-lite.service %dir %{_localstatedir}/lib/shorewall-lite %files -n shorewall6 %license shorewall6-%{version}/COPYING %doc shorewall6-%{version}/{changelog.txt,releasenotes.txt,Samples6} %{_sbindir}/shorewall6 %dir %{_sysconfdir}/shorewall6 %config(noreplace) %{_sysconfdir}/shorewall6/* %config(noreplace) %{_sysconfdir}/logrotate.d/shorewall6 %config(noreplace) %{_sysconfdir}/sysconfig/shorewall6 %{_mandir}/man5/shorewall6* %exclude %{_mandir}/man5/shorewall6-lite* %{_mandir}/man8/shorewall6* %exclude %{_mandir}/man8/shorewall6-lite* %{_datadir}/shorewall6 %{_unitdir}/shorewall6.service %dir %{_localstatedir}/lib/shorewall6 %files -n shorewall6-lite %license shorewall6-lite-%{version}/COPYING %doc shorewall6-lite-%{version}/{changelog.txt,releasenotes.txt} %{_sbindir}/shorewall6-lite %dir %{_sysconfdir}/shorewall6-lite %config(noreplace) %{_sysconfdir}/shorewall6-lite/shorewall6-lite.conf %config(noreplace) %{_sysconfdir}/logrotate.d/shorewall6-lite %config(noreplace) %{_sysconfdir}/sysconfig/shorewall6-lite %{_mandir}/man5/shorewall6-lite* %{_mandir}/man8/shorewall6-lite* %{_datadir}/shorewall6-lite %{_libexecdir}/shorewall6-lite %{_unitdir}/shorewall6-lite.service %dir %{_localstatedir}/lib/shorewall6-lite %files core %license shorewall-core-%{version}/COPYING %doc shorewall-core-%{version}/{changelog.txt,releasenotes.txt} %dir %{_datadir}/shorewall/ %{_datadir}/shorewall/coreversion %{_datadir}/shorewall/functions %{_datadir}/shorewall/lib.base %{_datadir}/shorewall/lib.cli %{_datadir}/shorewall/lib.common %{_datadir}/shorewall/lib.core %{_datadir}/shorewall/shorewallrc %dir %{_libexecdir}/shorewall %{_libexecdir}/shorewall/wait4ifup %files init %license shorewall-init-%{version}/COPYING %doc shorewall-init-%{version}/{changelog.txt,releasenotes.txt} %{_sbindir}/shorewall-init %{_prefix}/lib/NetworkManager/dispatcher.d/01-shorewall %config(noreplace) %{_sysconfdir}/sysconfig/shorewall-init %{_sysconfdir}/logrotate.d/shorewall-init %{_mandir}/man8/shorewall-init.8.* %{_datadir}/shorewall-init %{_libexecdir}/shorewall-init %{_unitdir}/shorewall-init.service %changelog * Tue Feb 08 2022 Michal Josef Špaček - 5.2.8-9 - Rewrite gethostbyname2 and inet_ntop to newer getaddrinfo and getnameinfo Remove depencency to perl-Socket6. * Sat Jan 22 2022 Fedora Release Engineering - 5.2.8-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Nov 18 2021 Michele Baldessari - 5.2.8-7 - Correct perl-Sys-Hostname dep * Thu Nov 18 2021 Michele Baldessari - 5.2.8-6 - Set StandardOutput to journal by adding ba87937f49010b873307240e3a6f22deac511d89 * Fri Sep 24 2021 Michele Baldessari - 5.2.8-5 - Add perl-Sys-Hostname-Long as a dep (rhbz#1957278) * Fri Jul 23 2021 Fedora Release Engineering - 5.2.8-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek - 5.2.8-3 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. * Wed Jan 27 2021 Fedora Release Engineering - 5.2.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Fri Sep 25 2020 Michele Baldessari - 5.2.8-1 - New upstream * Thu Aug 13 2020 Michele Baldessari - 5.2.7-1 - New upstream * Wed Jul 29 2020 Fedora Release Engineering - 5.2.4.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Thu May 14 2020 Michele Baldessari - 5.2.4.5-1 - New upstream * Thu Apr 30 2020 Michele Baldessari - 5.2.4.4-1 - New upstream * Wed Apr 22 2020 Michele Baldessari - 5.2.4.3-1 - New upstream * Mon Apr 20 2020 Michele Baldessari - 5.2.4.2-1 - New upstream * Sat Apr 18 2020 Michele Baldessari - 5.2.4.1-1 - New upstream - Add perl-sort to build-requires * Mon Mar 16 2020 Jitka Plesnikova - 5.2.3.7-2 - Specify all perl's build-requires * Sat Mar 07 2020 Michele Baldessari - 5.2.3.7-1 - New upstream release * Tue Feb 18 2020 Michele Baldessari - 5.2.3.6-1 - New upstream release * Sun Feb 09 2020 Michele Baldessari - 5.2.3.5-1 - New upstream release * Sun Feb 09 2020 Michele Baldessari - 5.2.3-1 - New upstream release - Remove "modules" folders since 8f42a6a72bae3b8dd063f7d6aa9984145ca51907 merged and only helpers are installed * Thu Jan 30 2020 Fedora Release Engineering - 5.2.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Aug 22 2019 Lubomir Rintel - 5.2.2-4 - Move the NetworkManager dispatcher script out of /etc * Fri Jul 26 2019 Fedora Release Engineering - 5.2.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sat Feb 02 2019 Fedora Release Engineering - 5.2.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Mon Jan 21 2019 Michele Baldessari - 5.2.2-1 - New upstream release * Mon Aug 06 2018 Michele Baldessari - 5.2.0.5-1 - New upstream release * Tue Jul 31 2018 Michele Baldessari - 5.2.0.4-1 - New upstream release * Sat Jul 14 2018 Fedora Release Engineering - 5.2.0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Mon May 07 2018 Michele Baldessari - 5.2.0.2 - New upstream release * Wed Apr 11 2018 Michele Baldessari - 5.2.0 - New upstream release * Mon Mar 05 2018 Michele Baldessari - 5.1.12.3 - New upstream release * Fri Feb 16 2018 Michele Baldessari - 5.1.12.1 - New upstream release * Fri Feb 09 2018 Igor Gnatenko - 5.1.10.2-2 - Escape macros in %%changelog * Fri Feb 09 2018 Michele Baldessari - 5.1.12 - New upstream release * Mon Jan 08 2018 Michele Baldessari - 5.1.10.2-1 - New upstream release * Wed Dec 27 2017 Michele Baldessari - 5.1.10-1 - New upstream release * Mon Oct 23 2017 Michele Baldessari - 5.1.8-1 - New upstream release * Thu Jul 27 2017 Fedora Release Engineering - 5.0.14.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Sat Feb 11 2017 Fedora Release Engineering - 5.0.14.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Mon Dec 26 2016 Michele Baldessari - 5.0.14.1-3 - Drop iptables-ipv6 requires as the provides for it in the iptables package is gone. * Wed Dec 21 2016 Michele Baldessari - 5.0.14.1-2 - Fix upgrade of masq files from versions by ghosting any existing file < 5.0.14 * Thu Nov 10 2016 Michele Baldessari - 5.0.14.1-1 - Update to 5.0.14.1 * Tue Oct 18 2016 Michele Baldessari - 5.0.13-1 - Update to 5.0.13 * Sun Sep 04 2016 Michele Baldessari - 5.0.11-1 - Update to 5.0.11 * Mon Jul 18 2016 Michele Baldessari - 5.0.10.1-1 - Update to 5.0.10.1 * Tue Jul 05 2016 Michele Baldessari - 5.0.10-1 - Update to 5.0.10 * Wed Jun 15 2016 Michele Baldessari - 5.0.9.2-1 - Update to 5.0.9.2 * Sun Jun 05 2016 Michele Baldessari - 5.0.9-1 - Update to 5.0.9 * Tue May 03 2016 Michele Baldessari - 5.0.8.2-1 - Update to 5.0.8.2 * Sat Apr 02 2016 Michele Baldessari - 5.0.7.2-1 - Update to 5.0.7.2 * Tue Mar 29 2016 Michele Baldessari - 5.0.7.1-1 - Update to 5.0.7.1 * Mon Mar 28 2016 Michele Baldessari - 5.0.7-1 - Update to 5.0.7 * Mon Mar 21 2016 Michele Baldessari - 5.0.6.2-1 - Add 'sed' requires. Fixes BZ#1319139 * Thu Mar 17 2016 Michele Baldessari - 5.0.6.2-1 - Update to 5.0.6.2 * Thu Mar 10 2016 Michele Baldessari - 5.0.6.1-1 - Update to 5.0.6.1 * Wed Mar 09 2016 Michele Baldessari - 5.0.6-1 - Update to 5.0.6 * Sat Feb 27 2016 Michele Baldessari - 5.0.5.1-1 - Update to 5.0.5.1 * Sat Feb 20 2016 Michele Baldessari - 5.0.5-1 - Update to 5.0.5 * Tue Feb 09 2016 Michele Baldessari - 5.0.4-1 - Update to 5.0.4 - Move license to %%license tag * Thu Feb 04 2016 Fedora Release Engineering - 4.6.13.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Mon Sep 21 2015 Orion Poplawski - 4.6.13.1-1 - Update to 4.6.13.1 * Wed Sep 9 2015 Orion Poplawski - 4.6.13-1 - Update to 4.6.13 * Sun Aug 23 2015 Orion Poplawski - 4.6.12.1-1 - Update to 4.6.12.1 * Mon Jul 13 2015 Orion Poplawski - 4.6.11.1-2 - Make shorewall6 require perl(Socket6) (bug #1228822) * Mon Jul 13 2015 Orion Poplawski - 4.6.11.1-1 - Update to 4.6.11.1 * Tue Jul 7 2015 Orion Poplawski - 4.6.11-1 - Update to 4.6.11 * Fri Jun 19 2015 Fedora Release Engineering - 4.6.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Wed May 6 2015 Orion Poplawski - 4.6.9-1 - Update to 4.6.9 * Tue May 5 2015 Orion Poplawski - 4.6.8.1-1 - Update to 4.6.8.1 * Wed Apr 8 2015 Orion Poplawski - 4.6.8-1 - Update to 4.6.8 * Thu Feb 26 2015 Orion Poplawski - 4.6.6.2-3 - Fix shorewall6 %%post script * Mon Feb 9 2015 Orion Poplawski - 4.6.6.2-2 - Update to 4.6.6.2 * Mon Feb 2 2015 Orion Poplawski - 4.6.6.1-2 - Support xz compressed kernel modules on F21+ (bug #1181504) - Cleanup systemd requires * Tue Jan 27 2015 Orion Poplawski - 4.6.6.1-1 - Update to 4.6.6.1 * Sun Dec 21 2014 Orion Poplawski - 4.6.5.3-1 - Update to 4.6.5.3 - Use newer systemd service files when needed (bug #1176448) * Sat Nov 15 2014 Orion Poplawski - 4.6.5.1-1 - Update to 4.6.5.1 * Mon Oct 20 2014 Orion Poplawski - 4.6.4.3-1 - Update to 4.6.4.3 * Mon Oct 13 2014 Orion Poplawski - 4.6.4.1-1 - Update to 4.6.4.1 * Fri Sep 19 2014 Orion Poplawski - 4.6.3.4-1 - Update to 4.6.3.4 * Thu Sep 4 2014 Orion Poplawski - 4.6.3.2-1 - Update to 4.6.3.2 * Thu Aug 28 2014 Orion Poplawski - 4.6.3.1-1 - Update to 4.6.3.1 * Sat Aug 23 2014 Orion Poplawski - 4.6.3-1 - Update to 4.6.3 * Fri Aug 8 2014 Orion Poplawski - 4.6.2.4-1 - Update to 4.6.2.4 * Tue Jul 29 2014 Orion Poplawski - 4.6.2.3-1 - Update to 4.6.2.3 * Mon Jun 23 2014 Orion Poplawski - 4.6.1.2-1 - Update to 4.6.1.2 * Sun Jun 08 2014 Fedora Release Engineering - 4.6.0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri May 23 2014 Orion Poplawski - 4.6.0.2-1 - Update to 4.6.0.2 - Drop epel7 patch applied upstream * Fri May 23 2014 Orion Poplawski - 4.6.0.1-1 - Update to 4.6.0.1 * Wed May 21 2014 Orion Poplawski - 4.6.0-2 - Update epel7 patch from upstream * Mon May 19 2014 Orion Poplawski - 4.6.0-1 - Update to 4.6.0 - Add patch for epel7 support * Thu Apr 3 2014 Orion Poplawski - 4.5.21.9-1 - Update to 4.5.21.9 * Thu Mar 20 2014 Orion Poplawski - 4.5.21.8-1 - Update to 4.5.21.8 * Tue Mar 11 2014 Orion Poplawski - 4.5.21.7-1 - Update to 4.5.21.7 * Tue Feb 4 2014 Orion Poplawski - 4.5.21.6-1 - Update to 4.5.21.6 * Tue Jan 7 2014 Orion Poplawski - 4.5.21.5-1 - Update to 4.5.21.5 * Mon Oct 7 2013 Orion Poplawski - 4.5.21-1 - Update to 4.5.21 * Sat Aug 03 2013 Petr Pisar - 4.5.18-2 - Perl 5.18 rebuild * Tue Jul 23 2013 Orion Poplawski - 4.5.18-1 - Update to 4.5.18 * Wed Jul 17 2013 Petr Pisar - 4.5.17.1-2 - Perl 5.18 rebuild * Tue Jun 11 2013 Orion Poplawski - 4.5.17.1-1 - Update to 4.5.17.1 * Tue May 14 2013 Orion Poplawski - 4.5.16.1-1 - Update to 4.5.16.1 * Mon May 13 2013 Orion Poplawski - 4.5.16-1 - Update to 4.5.16 * Wed Apr 10 2013 Orion Poplawski - 4.5.15-1 - Update to 4.5.15 * Wed Mar 13 2013 Orion Poplawski - 4.5.14-1 - Update to 4.5.14 * Wed Feb 13 2013 Orion Poplawski - 4.5.13-1 - Update to 4.5.13 * Fri Jan 25 2013 Orion Poplawski - 4.5.12-1 - Update to 4.5.12 * Tue Sep 4 2012 Jonathan G. Underwood - 4.5.7.1-3 - Use new systemd macros instead of scriplets in post/postun/preun - Remove triggerun scriptlets for sysv to systemd conversion * Tue Sep 4 2012 Jonathan G. Underwood - 4.5.7.1-2 - Add logrotate Requires to shorewall-init - Ensure /etc/logrotate.d/shorewall-init is owned by shorewall-init package * Tue Sep 4 2012 Jonathan G. Underwood - 4.5.7.1-1 - Update to 4.5.7.1 * Sat Jul 21 2012 Fedora Release Engineering - 4.5.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Sun May 27 2012 Jonathan G. Underwood - 4.5.4-1 - Update to 4.5.4 * Fri May 11 2012 Orion Poplawski - 4.5.3-1 - Update to 4.5.3 * Wed May 2 2012 Orion Poplawski - 4.5.2.4-1 - Update to 4.5.2.4 - Use BR perl(Digest::SHA) - Drop install patch fixed upstream - Drop setting unneeded install variables - Use %%{perl_vendorlib} * Wed Apr 11 2012 Orion Poplawski - 4.5.2-1 - Update to 4.5.2 - Add patch to fixup install locations - Add BR perl(Digest::SHA1) - Change install ordering to install shorewall-core first - Set DESTDIR for install script - Set SBINDIR and SYSTEMD to handle UsrMove * Sun Mar 18 2012 Jonathan G. Underwood - 4.5.1-1 - Update to 4.5.1 * Wed Feb 22 2012 Orion Poplawski - 4.5.0.1-1 - Update to 4.5.0.1 * Thu Feb 9 2012 Orion Poplawski - 4.5.0-0.2.RC2 - Re-add using %%{_libexecdir}, needed for SELinux * Mon Feb 6 2012 Orion Poplawski - 4.5.0-0.1.RC2 - Update to 4.5.0 RC2 - Add -core sub-package - Drop using %%{_libexecdir} * Sat Jan 14 2012 Fedora Release Engineering - 4.4.25.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Mon Nov 7 2011 Orion Poplawski - 4.4.25.2-1 - Update to 4.4.25.2 - Drop service patches applied upstream * Mon Oct 10 2011 Jonathan G. Underwood - 4.4.23.3-6 - Remove ExecReload from all service files - Add After=network.target to shorewall.service * Wed Sep 21 2011 Jonathan G. Underwood - 4.4.23.3-5 - Remove erroneous spec file comment * Wed Sep 21 2011 Jonathan G. Underwood - 4.4.23.3-4 - Fix up service file installation, try 2 * Wed Sep 21 2011 Jonathan G. Underwood - 4.4.23.3-3 - Fix up service file installation * Tue Sep 20 2011 Jonathan G. Underwood - 4.4.23.3-2 - systemd service files are now upstreamed, so use them from the tarballs * Tue Sep 20 2011 Jonathan G. Underwood - 4.4.23.3-1 - Update to 4.4.23.3 - Spec file cleanups * Sat Aug 20 2011 Jonathan G. Underwood - 4.4.22.3-2 - Rename _baseurl macro to baseurl - Change the defattr to (-,root,root,-) and fix up file permissions - Fixes to file lists * Sat Aug 20 2011 Jonathan G. Underwood - 4.4.22.3-1 - Update to 4.4.22.3 * Thu Aug 11 2011 Orion Poplawski - 4.4.22.2-1 - Update to 4.4.22.2 - Drop patches applied upstream * Wed Aug 3 2011 Orion Poplawski - 4.4.22-2 - Add upstream ALL patch to fix handling zones that begin with 'all' - Add patch to close stdin to prevent some SELinux denial messages (bug 727648) - Make libexec files executable * Tue Aug 2 2011 Orion Poplawski - 4.4.22-1 - Update to 4.4.22 * Sat Jul 23 2011 Jonathan G. Underwood - 4.4.21-5 - Make libexec files executable * Sat Jul 23 2011 Jonathan G. Underwood - 4.4.21-4 - Switch to systemd initialization * Thu Jul 21 2011 Jonathan G. Underwood - 4.4.21-3 - Properly use PERLLIB environment variable for installation of the perl libraries * Thu Jul 21 2011 Jonathan G. Underwood - 4.4.21-2 - Fix Source URL versioning in spec file * Thu Jul 21 2011 Jonathan G. Underwood - 4.4.21-1 - Update to 4.4.21.1 - Fix BZ 720713 (incorrect init file LSB headers) * Wed May 25 2011 Orion Poplawski - 4.4.19.4-1 - Update to 4.4.19.4 * Sat Mar 5 2011 Jonathan G. Underwood - 4.4.17-2 - Add executable permission to getparams * Mon Feb 14 2011 Jonathan G. Underwood - 4.4.17-1 - Update to 4.4.17 * Wed Feb 09 2011 Fedora Release Engineering - 4.4.11.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Sat Aug 7 2010 Jonathan G. Underwood - 4.4.11.1-1 - Update to version 4.4.11.1 * Fri Jul 2 2010 Jonathan G. Underwood - 4.4.10-4 - Fix spec file typo * Wed Jun 16 2010 Jonathan G. Underwood - 4.4.10-3 - Remove separate macros for each tarball version - upstream now releases all tarballs with the same version number - Add virtual Provides for shorewall(firewall) to shorewall, shorewall-lite and shorewall6-lite, and a Requires shorewall(firewall) to shorewall-init. Note that shorewall6 Requires shorewall, so virtual provides not needed there * Sun Jun 13 2010 Jonathan G. Underwood - 4.4.10-2 - Add doc files to shorewall-lite subpackage * Sun Jun 13 2010 Jonathan G. Underwood - 4.4.10-1 - Update to version 4.4.10 - Add new shorewall-init subpackage - Rename init.sh to shorewall-foo-init.sh - Add shorewall-init.sh for init subpackage * Thu Apr 1 2010 Jonathan G. Underwood - 4.4.8-1 - Update to version 4.4.8 - Remove %%buildroot setting - Remove cleaning of buildroot during %%install - Fix %%files * Tue Feb 9 2010 Jonathan G. Underwood - 4.4.6-2 - Fix missing man pages in file lists * Mon Feb 8 2010 Jonathan G. Underwood - 4.4.6-1 - Update to version 4.4.6 * Thu Dec 10 2009 Jonathan G. Underwood - 4.4.4.2-3 - Fix typo in logrotate script name for shorewall6-lite * Thu Dec 10 2009 Jonathan G. Underwood - 4.4.4.2-2 - Add logrotate files to packages * Thu Dec 10 2009 Jonathan G. Underwood - 4.4.4.2-1 - Update to 4.4.4.2 * Fri Nov 6 2009 Jonathan G. Underwood - 4.4.3-1 - Update to 4.4.3 * Thu Sep 3 2009 Jonathan G. Underwood - 4.4.1-1 - Update to 4.4.1 * Tue Aug 18 2009 Jonathan G. Underwood - 4.4.0-2 - Spec file cleanups with respect to package versioning * Tue Aug 18 2009 Orion Poplawski - 4.4.0-1 - Update to 4.4.0 final * Sun Jul 26 2009 Fedora Release Engineering - 4.4.0-0.2.Beta3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Tue Jul 7 2009 Jonathan G. Underwood - 4.4.0-0.1.Beta3 - Update to 4.4.0-Beta3 * Fri Jun 12 2009 Jonathan G. Underwood - 4.3.12-3 - Fix filelist for shorewall6 to include macro.Trcrt * Fri Jun 12 2009 Jonathan G. Underwood - 4.3.12-2 - Remove rfc1918 entries from filelists as no longer included * Thu Jun 11 2009 Jonathan G. Underwood - 4.3.12-1 - Update to version 4.3.12 - Change init files to start as number 28 (previously 25) to ensure starting after NetworkManager (BZ 505444) * Wed May 27 2009 Jonathan G. Underwood - 4.3.10-2 - Fix up /var/lib directories (BZ 502929) * Fri May 8 2009 Jonathan G. Underwood - 4.3.10-1 - Update to development branch, rearrange sub-packages accordingly - Remove shorewall-shell, shorewall-perl, shorewall-common subpackages * Fri May 8 2009 Jonathan G. Underwood - 4.2.8-1 - Update to version 4.2.8 - Update shorewall-perl to 4.2.8.2 - Use global instead of define in macros to comply with packaging guidelines * Mon Apr 13 2009 Jonathan G. Underwood - 4.2.7-5 - Update shorewall-perl to version 4.2.7.3 * Fri Apr 3 2009 Jonathan G. Underwood - 4.2.7-4 - Update shorewall-perl to version 4.2.7.1 (BZ 493984) * Thu Mar 26 2009 Jonathan G. Underwood - 4.2.7-3 - Really make the perl compiler default * Tue Mar 24 2009 Jonathan G. Underwood - 4.2.7-2 - Make the perl compiler the default. Drop shorewall-shell requirement from shorewall package * Tue Mar 24 2009 Jonathan G. Underwood - 4.2.7-1 - Update to version 4.2.7 * Fri Mar 6 2009 Jonathan G. Underwood - 4.2.6-2 - Update shorewall-perl to version 4.6.2.2 * Thu Feb 26 2009 Jonathan G. Underwood - 4.2.6-1 - Update to version 4.2.6 * Wed Feb 25 2009 Fedora Release Engineering - 4.2.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Sun Feb 1 2009 Jonathan G. Underwood - 4.2.5-2 - Update shorewal-perl to version 4.2.5.1 * Sat Jan 24 2009 Jonathan G. Underwood - 4.2.5-1 - Update to version 4.2.5 * Thu Jan 15 2009 Jonathan G. Underwood - 4.2.4-4 - Really update shorewall-perl to 4.2.4.6 * Thu Jan 15 2009 Jonathan G. Underwood - 4.2.4-3 - Update shorewall-perl to 4.2.4.6 * Thu Jan 15 2009 Jonathan G. Underwood - 4.2.4-2 - Fix up dependencies between sub-packages - No longer attempt to own all files in /var/lib/shorewall* but rather clean them up on package removal * Sun Jan 11 2009 Jonathan G. Underwood - 4.2.4-1 - Update to version 4.2.4 which adds IPV6 support and two new sub-packages (shorewall6 and shorewall6-lite) - Add proper versioning to sub-packages - Remove patch patch-perl-4.2.3.1 * Tue Dec 30 2008 Jonathan G. Underwood - 4.2.3-2 - Add upstream patch patch-perl-4.2.3.1 * Thu Dec 18 2008 Jonathan G. Underwood - 4.2.3-1 - Update to version 4.2.3 * Mon Nov 24 2008 Jonathan G. Underwood - 4.2.2-1 - Update to version 4.2.2 - Remove patch patch-perl-4.2.1.1 * Fri Oct 31 2008 Jonathan G. Underwood - 4.2.1-2 - Added upstream patch patch-perl-4.2.1.1 * Sun Oct 26 2008 Jonathan G. Underwood - 4.2.1-1 - Update to version 4.2.1 - Correct source URLs * Sun Oct 12 2008 Jonathan G. Underwood - 4.2.0-1 - Update to version 4.2.0 - New sysv init files which are no longer maintained as patches, but as a Fedora specific file * Sun Sep 28 2008 Jonathan G. Underwood - 4.0.14-1 - Update to version 4.0.14 * Tue Jul 29 2008 Jonathan G. Underwood - 4.0.13-1 - Update to version 4.0.13 - Remove patch-perl-4.0.12.1 - Update BuildRoot to mktemp variant * Sat Jul 5 2008 Jonathan G. Underwood - 4.0.12-2 - Apply patch-perl-4.0.12.1 from upstream * Fri Jun 27 2008 Jonathan G. Underwood - 4.0.12-1 - Update to version 4.0.12 * Sun May 25 2008 Jonathan G. Underwood - 4.0.11-1 - Update to version 4.0.11 - Remove patches for version 4.0.10 * Sun May 4 2008 Jonathan G. Underwood - 4.0.10-2 - Add upstream patches patch-perl-4.0.10-1.diff and patch-common-4.0.10-1.diff * Sun Apr 6 2008 Jonathan G. Underwood - 4.0.10-1 - Update to version 4.0.10 - Remove 4.0.9 patches * Tue Mar 25 2008 Jonathan G. Underwood - 4.0.9-2 - Replace patch-perl-4.0,9-1 with patch-perl-4.0.9.1 - Add patch-shell-4.0.9.1 * Thu Feb 28 2008 Jonathan G. Underwood - 4.0.9-1 - Update to version 4.0.9 - Remove 4.0.8 series patches - Add upstream patch patch-perl-4.0,9-1 (the comma is not a typo) * Sat Feb 16 2008 Jonathan G. Underwood - 4.0.8-3 - Added patch-perl-4.0.8-3.diff and patch-perl-4.0.8-4.diff patches from upstream * Wed Feb 6 2008 Jonathan G. Underwood - 4.0.8-2 - Add upstream patches patch-perl-4.0.8-1.diff and patch-perl-4.0.8-2.diff * Sun Jan 27 2008 Jonathan G. Underwood - 4.0.8-1 - Update to version 4.0.8 - Remove 4.0.7 patches * Sun Jan 6 2008 Jonathan G. Underwood - 4.0.7-2 - Remove 4.0.7.1 patch as it seems that's already been applied to the tarball contents * Sun Jan 6 2008 Jonathan G. Underwood - 4.0.7-2 - Fix error in patching commands in spec file (change -p0 to -p1 for new patches) * Sun Jan 6 2008 Jonathan G. Underwood - 4.0.7-1 - Update to version 4.0.7 - Added 4.0.7.1 patch and all parts of the 4.0.7.2 patch that are relevant (i.e. not the parts working around the iproute2-2.23 bug, as we don't ship the broken iproute2) - Clarified notes about tarball and patch locations * Sat Dec 8 2007 Jonathan G. Underwood - 4.0.6-3 - Added patch-perl-4.0.6-2.diff and patch-perl-4.0.6-3.diff - Fixed URLs for tarballs to match where upstream has moved them to * Wed Nov 28 2007 Jonathan G. Underwood - 4.0.6-2 - Add Requires for shorewall-common to shorewall-shell and shorewall-perl (Orion Poplawski) * Sat Nov 24 2007 Jonathan G. Underwood - 4.0.6-1 - Update to 4.0.6 plus patch-perl-4.0.6-1.diff upstream errata * Sat Oct 27 2007 Jonathan G. Underwood - 4.0.5-1 - Update to 4.0.5 which removes the need for the buildports.pl functionality * Mon Oct 8 2007 Jonathan G. Underwood - 4.0.4-2 - Add ghost files for /var/lib/shorewall/.modules and /var/lib/shorewall/.modulesdir - Fix ownership of /var/lib/shorewall-lite * Sun Oct 7 2007 Jonathan G. Underwood - 4.0.4-1 - Initial version 4 packaging based upon upstream specs by Tom Eastep and version 3 spec by Robert Marcano - Split into shorewall-common, shorewall-shell, shorewall-perl, shorewall-lite subpackages * Sun Sep 09 2007 Robert Marcano - 3.4.6-1 - Update to upstream 3.4.6 * Tue Jul 17 2007 Robert Marcano - 3.4.5-1 - Update to upstream 3.4.5 * Mon Jun 18 2007 Robert Marcano - 3.4.4-1 - Update to upstream 3.4.4 * Fri May 11 2007 Robert Marcano - 3.4.3-1 - Update to upstream 3.4.3 * Sun Apr 15 2007 Robert Marcano - 3.4.2-1 - Update to upstream 3.4.2 * Mon Mar 26 2007 Robert Marcano - 3.4.1-1 - Update to upstream 3.4.1 * Tue Feb 06 2007 Robert Marcano - 3.2.8-1 - Update to upstream 3.2.8 * Thu Dec 21 2006 Robert Marcano - 3.2.7-1 - Update to upstream 3.2.7 * Tue Nov 07 2006 Robert Marcano - 3.2.5-1 - Update to upstream 3.2.5 * Fri Sep 29 2006 Robert Marcano - 3.2.4-1 - Update to upstream 3.2.4 * Mon Aug 28 2006 Robert Marcano - 3.2.3-2 - Rebuild * Sat Aug 26 2006 Robert Marcano - 3.2.3-1 - Update to upstream 3.2.3 * Sun Aug 20 2006 Robert Marcano - 3.2.2-1 - Update to upstream 3.2.2 * Fri Jul 28 2006 Robert Marcano - 3.2.1-1 - Update to upstream 3.2.1 * Sat Jun 24 2006 Robert Marcano - 3.2.0-0.1.RC4 - Update to upstream 3.2.0-RC4 * Thu Jun 01 2006 Robert Marcano - 3.2.0-0.1.Beta8 - Update to upstream 3.2.0-Beta8 * Sun May 14 2006 Robert Marcano - 3.2.0-0.1.Beta7 - Update to upstream 3.2.0-Beta7 * Fri Apr 14 2006 Robert Marcano - 3.2.0-0.1.Beta4 - Update to upstream 3.2.0-Beta4 * Fri Mar 31 2006 Robert Marcano - 3.0.6-1 - Update to upstream 3.0.6 * Mon Feb 13 2006 Robert Marcano - 3.0.5-1 - Rebuild for Fedora Extras 5, Update to upstream 3.0.5 * Thu Jan 12 2006 Robert Marcano - 3.0.4-1 - Update to upstream 3.0.4 * Tue Jan 03 2006 Robert Marcano - 3.0.3-1 - Update to upstream 3.0.3 * Sun Nov 27 2005 Robert Marcano - 3.0.2-1 - Update to upstream 3.0.2 * Fri Nov 11 2005 Robert Marcano - 3.0.0-1 - Update to final 3.0.0 release * Thu Nov 03 2005 Robert Marcano - 3.0.0-0.3.RC3 - Update to upstream 3.0.0-RC3. Samples added to the doc directory * Sun Oct 23 2005 Robert Marcano - 3.0.0-0.3.RC2 - Update to upstream 3.0.0-RC2 * Mon Oct 17 2005 Robert Marcano - 3.0.0-0.2.RC1 - Update to upstream 3.0.0-RC1 * Fri Oct 14 2005 Robert Marcano - 3.0.0-0.1.Beta1 - Update to upstream 3.0.0-Beta1, package README.txt as a documentation file * Sat Oct 08 2005 Robert Marcano - 2.4.5-1 - Update to upstream version 2.4.5 * Wed Sep 28 2005 Robert Marcano - 2.4.4-4 - Spec cleanup following review recomendations * Tue Sep 27 2005 Robert Marcano - Update to 2.4.4, removing doc subpackage because it is not distributed with the source package anymore, it is on a different tarball * Fri Apr 8 2005 Michael Schwendt - rebuilt * Tue Nov 11 2003 Miguel Armas - 1.4.8-1.fdr.2 - Clean backup doc files - Fix some entries in files section * Mon Nov 10 2003 Miguel Armas - 1.4.8-1.fdr.1 - Upgraded to shorewall 1.4.8 * Fri Oct 31 2003 Miguel Armas - 1.4.7-1.fdr.3.a - Start shorewall *before* network for better security. - Added clear command to shorewall init script to run "shorewall clear" - Changed status command in shorewall init script to run "shorewall status" * Thu Oct 30 2003 Miguel Armas - 1.4.7-1.fdr.2.a - Lots of bugfixes in spec file (Thanks to Michael Schwendt) * Sat Oct 25 2003 Miguel Armas - 1.4.7-1.fdr.1.a - Fedorized package - Split documentation in a subpackage (we don't need de docs in a production firewall)