iptables (1.2.6a-5.0woody2) stable-security; urgency=high * Non-maintainer upload by the Security Team * Applied patch by Mikko Rapeli to fix a bug that prevents loading of required modules [iptables.c, ip6tables.c, CAN-2004-0986] -- Martin Schulze Tue, 26 Oct 2004 15:56:59 +0200 iptables (1.2.6a-5.0woody1) stable; urgency=high * removed extra space character from the init script. The bug causes ruleset save failures and can silently truncate exisiting rulesets to zero bytes. Reported by Jan Minar. Thanks. (closes: Bug#225805) * removed an init script typo, s/Savinging/Saving/ -- Laurence J. Lane Sun, 11 Jan 2004 23:27:55 +0000 iptables (1.2.6a-5) unstable; urgency=high * removed ownercmd patch, closes: 142649 * removed postinst init.d call, closes: 142791 * corrected source URIs in copyright -- Laurence J. Lane Sun, 14 Apr 2002 10:44:57 -0400 iptables (1.2.6a-4) unstable; urgency=high * removed MARK_operations patch, severe breakage -- Laurence J. Lane Mon, 8 Apr 2002 22:41:32 -0400 iptables (1.2.6a-3) unstable; urgency=high * posinst: merged in missing bits from 1.2.5-x and remove bogus "/1" * undo MARK and REJECT changes, severe breakage -- Laurence J. Lane Wed, 3 Apr 2002 14:38:12 -0500 iptables (1.2.6a-2) unstable; urgency=low * corrected typo and bug in initd_autosave() -- Laurence J. Lane Mon, 1 Apr 2002 06:38:01 -0500 iptables (1.2.6a-1) unstable; urgency=medium * New upstream release, closes: 140202 * upstream man page update, closes: 137933 * upstream SEGV fix, closes: 134518 * new init.d setup, changes: * {en,dis}able via debconf rc.d symlink management, closes: 139282 * deprecated "save_active" and "save_inactive" * accept "load " instead of "[ruleset name]" * added uniform policy compliant output, closes: 140400 * removed init.d clear from dev scripts, closes: 139102 * deprecated enable_iptables_initd and iptables_prerm_default * replaced README.Debian * chmod /etc/default/iptables 0644, closes: 132783 * build depend on kernel 2.4.18 source * adjusted update-rc.d runlevels, closes: 140428 * updated pom patch handling, more extension modules, closes: 117536 * removed debian/ip6tables*.8 -- Laurence J. Lane Sun, 31 Mar 2002 22:54:25 -0500 iptables (1.2.5-7) unstable; urgency=low * iptables.c: upstream patch for proto_num segfault * init.d, shut down rc.d change from K10 to K90, closes: #135599 -- Laurence J. Lane Fri, 1 Mar 2002 15:59:23 -0500 iptables (1.2.5-6) unstable; urgency=low * removed extraneous -e in echo call, closes: #133838 -- Laurence J. Lane Thu, 14 Feb 2002 13:28:06 -0500 iptables (1.2.5-5) unstable; urgency=low * diginix inspired most-of-pom build * debian/control: Build-Depends + kernel-source-2.4.17 * debian/control: corrected section override disparity warning * init.d adjustments, increased verbosity, warn for no active/inactive -- Laurence J. Lane Wed, 13 Feb 2002 12:49:12 -0500 iptables (1.2.5-4) unstable; urgency=low * /etc/default/iptables was still confusing people -- Laurence J. Lane Thu, 7 Feb 2002 13:04:41 -0500 iptables (1.2.5-3) unstable; urgency=low * use explicit init.d variable defaults, closes: #132464 -- Laurence J. Lane Tue, 5 Feb 2002 11:23:58 -0500 iptables (1.2.5-2) unstable; urgency=low * used a silver bullet on /var/state/iptables/, closes: #130710 * default to 'nothing' instead of halt before start/stop in init.d because halt effectively disables all IP traffic. * allow saved ruleset filenames as init.d arguments, load the ruleset * Added text to disavow any sense of security afforded by merely installing the iptables package. iptables a tool that can be used to configure firewalls, among other things. The package is most defintely not a one-stop-system-security-solution. closes: #130729 * updated README and descriptions (control) * added netfilter-extensions and netfilter-hacking HOWTOs * resurrected ip6tables-{sav,restor}e.8 from an older package -- Laurence J. Lane Sat, 2 Feb 2002 23:44:14 -0500 iptables (1.2.5-1) unstable; urgency=low * new upstream release * moved /var/state/iptables to /var/lib/iptables, closes: #130337 * moved state dir definitions from default/iptables to init.d/iptables * corrected autosave behavior -- Laurence J. Lane Wed, 23 Jan 2002 13:36:58 -0500 iptables (1.2.4-4) unstable; urgency=low * official upload with new init.d setup -- Laurence J. Lane Sun, 20 Jan 2002 19:24:43 -0500 iptables (1.2.4-3.2) unstable; urgency=low * added optional ip6tables support init.d * changed prerm script init.d call default from "nothing" to "clear" * adjust file permissions on "default" file and state dir in postinst -- Laurence J. Lane Thu, 17 Jan 2002 20:58:00 -0500 iptables (1.2.4-3.1) unstable; urgency=low * README.Debian update * debian/rules: remove dh_testroot from clean target * s/wierd/weird/ in ip{,6}tables.c, see Bug #102771 * indicate -C option not available in manpage/help, see Bug #108199 * added init.d script -- Laurence J. Lane Tue, 15 Jan 2002 19:10:12 -0500 iptables (1.2.4-3) unstable; urgency=low * gcc linking patch by LaMont Jones * Debian README update -- Laurence J. Lane Thu, 13 Dec 2001 07:47:48 -0500 iptables (1.2.4-2) unstable; urgency=low * corrected upstream changelog compilation * debian/control: corrected Sections -- Laurence J. Lane Fri, 9 Nov 2001 00:46:03 -0500 iptables (1.2.4-1) unstable; urgency=low * new upstream version -- Laurence J. Lane Thu, 1 Nov 2001 11:19:05 -0500 iptables (1.2.3-2) unstable; urgency=low * Everett Coleman II's string_to_number() correction for libipt_TOS.c -- Laurence J. Lane Sat, 22 Sep 2001 14:10:45 -0400 iptables (1.2.3-1) unstable; urgency=low * new upstream version * debian/changelog: removed emacs mode settings * added /usr/share/doc/iptables/changelog.gz * Olivier Baudron's string_to_number() / --log-level corrections for iptables.c, libip6t_LOG.c, and libip6t_length.c -- Laurence J. Lane Tue, 4 Sep 2001 10:41:29 -0400 iptables (1.2.2-10) unstable; urgency=low * ip6tables.c: correct IP6T_LIB_DIR path -- Laurence J. Lane Mon, 13 Aug 2001 07:01:15 -0400 iptables (1.2.2-9) unstable; urgency=low * debian/rules: extraneous MAKE caused build failures on some archs -- Laurence J. Lane Sat, 11 Aug 2001 16:47:07 -0400 iptables (1.2.2-8) unstable; urgency=low * debian/rules: move EXTRA_VARS to correct KERNEL_DIR build failures -- Laurence J. Lane Fri, 10 Aug 2001 10:23:03 -0400 iptables (1.2.2-7) unstable; urgency=low * Makefile: set LIBDIR and BINDIR * ip6tables.c: set IP6T_LIB_DIR -- Laurence J. Lane Wed, 8 Aug 2001 04:47:56 -0400 iptables (1.2.2-6) unstable; urgency=low * replace HTML guides with sgml2html (linuxdoc-tools) processed SGML, closes: #107872 * debian/changelog: updated source location, author names, et cetera * debian/rules: s/EXTRAVARS/EXTRA_VARS/g -- Laurence J. Lane Mon, 6 Aug 2001 22:58:22 -0400 iptables (1.2.2-5) unstable; urgency=low * debian/rules: * set $(EXTRAVARS) on command line before $(MAKE) (corrects all variable settings, including LIBDIR, closes: #107839) * use find/xarg in clean target to remove *.{a,o,so} -- Laurence J. Lane Mon, 6 Aug 2001 19:22:42 -0400 iptables (1.2.2-4) unstable; urgency=low * debian/control: updated package descriptions and upgrade standards version to 3.5.6.0 * restore original Makefile, all target and evironment variable hacks moved to debian/rules * reverted to libc6-dev kernel headers (unresolved issues here) * 1.2.2-3 changelog updates: * REJECT.c: CVS code corrects reject-with output (#99728, #105271) * iptables.8: CVS code corrects man page formatting (#97079) * debian/control: Build-Depend on kernel-headers-2.4.7 * debian/rules: remove object files with the clean target and use kernel-headers-2.4.7 for KERNEL headers * enabled libipq build -- Laurence J. Lane Fri, 3 Aug 2001 20:41:13 -0400 iptables (1.2.2-3) unstable; urgency=low * debian/rules: converted from debmake to debhelper * applied fixes from CVS tree, closes: #99728, #97079, #105271 * added iptables-dev package, closes: #106689, #101493 * README.Debian: update -- Laurence J. Lane Tue, 31 Jul 2001 22:45:45 -0400 iptables (1.2.2-2) unstable; urgency=low * removed debian/rules bash expansions, Closes: #98794 -- Laurence J. Lane Sat, 26 May 2001 12:26:55 -0400 iptables (1.2.2-1) unstable; urgency=low * new upstream version -- Laurence J. Lane Fri, 11 May 2001 14:02:25 -0400 iptables (1.2.1a-2) unstable; urgency=low * restore ip6tables, patch provided by Marc Martinez -- Laurence J. Lane Wed, 25 Apr 2001 00:05:26 -0400 iptables (1.2.1a-1) unstable; urgency=low * new upstream release and enabled save/restore, Closes: #94211 -- Laurence J. Lane Thu, 19 Apr 2001 21:02:20 -0400 iptables (1.2.1-1) unstable; urgency=low * new upstream release, Closes: #85318 * removed symlinks to bins * applied debian/patch-ULOG (minor build issue) -- Laurence J. Lane Fri, 16 Mar 2001 16:37:27 -0500 iptables (1.2-10) unstable; urgency=low * bins and libs moved from /usr to /, provided symlinks, Closes: #89529 * added lintian overrides for shared-lib-without-dependency-information -- Laurence J. Lane Wed, 14 Mar 2001 04:24:47 -0500 iptables (1.2-9) unstable; urgency=low * change to libc6's kernel 2.4 headers so sparc can build -- Laurence J. Lane Wed, 7 Mar 2001 13:04:14 -0500 iptables (1.2-8) unstable; urgency=low * --rename-chain correction by sfrost@debian.org, closes: #84275 * debian/rules custom KERNEL_DIR example, closes: #86617 -- Laurence J. Lane Mon, 19 Feb 2001 10:11:16 -0500 iptables (1.2-7) unstable; urgency=low * Build-Depend on kernel-headers-2.4.0-test11, closes: #85871 -- Laurence J. Lane Sat, 17 Feb 2001 07:44:46 -0500 iptables (1.2-6) unstable; urgency=low * Corrected modprobe call, closes: #85299 -- Laurence J. Lane Thu, 8 Feb 2001 22:33:09 -0500 iptables (1.2-5) unstable; urgency=low * Added Build-Depends, closes #84764 -- Laurence J. Lane Sun, 4 Feb 2001 11:46:44 -0500 iptables (1.2-4) unstable; urgency=low * Recompiled without patch-o-matic headers (closes: #81902) -- Laurence J. Lane Thu, 11 Jan 2001 07:03:38 -0500 iptables (1.2-3) unstable; urgency=low * Corrected ip6tables lib path (closes: #81403) * Added temporary ip6tables.8.gz -- Laurence J. Lane Tue, 9 Jan 2001 19:59:40 -0500 iptables (1.2-2) unstable; urgency=low * Removed iptables-{save,restore}.8 * Corrected orig.tar.gz source upload -- Laurence J. Lane Tue, 9 Jan 2001 08:28:55 -0500 iptables (1.2-1) unstable; urgency=low * New maintainer * Enabled ip6tables build -- Laurence J. Lane Mon, 8 Jan 2001 19:51:02 -0500 iptables (1.1.2-1.0) unstable; urgency=low * Non-maintainer upload * New upstream release -- Laurence J. Lane Sat, 14 Oct 2000 13:15:34 -0400 iptables (1.1.1-1.1) unstable; urgency=low * Non-maintainer upload * Bypass kernel patch checks in Makefile, see Bug#67397 -- Laurence J. Lane Thu, 5 Oct 2000 17:34:53 -0400 iptables (1.1.1-1.0) unstable; urgency=low * Non-maintainer upload * New upstream release * Added Packet Filtering and NAT HOWTOs -- Laurence J. Lane Sat, 15 Jul 2000 22:44:17 -0400 iptables (1.1.0-1) unstable; urgency=low * New upstream release -- Christoph Lameter Sun, 14 May 2000 12:09:55 -0700 iptables (1.0.0-3) unstable; urgency=low * Remove Makefile.orig (closes: #63434) -- Christoph Lameter Wed, 3 May 2000 11:23:33 -0700 iptables (1.0.0-2) unstable; urgency=low * make distclean rather than make clean in debian/rules to wipe out platform specific dependendies before shipping source. (closes: #62967) -- Christoph Lameter Mon, 24 Apr 2000 12:12:39 -0700 iptables (1.0.0-1) unstable; urgency=low * Added some more docs. * Rewrote copyright file * Upstream final 1.0.0 release. -- Christoph Lameter Sun, 26 Mar 2000 19:19:19 -0800 iptables (1.0.0alpha-1) unstable; urgency=low * Initial release. -- Christoph Lameter Sun, 26 Mar 2000 18:49:18 -0800 Local variables: mode: debian-changelog End: iptables (1.2.2-3) unstable; urgency=low * converted from debstd to debhelper -- Laurence J. Lane Sat, 30 Jun 2001 19:20:07 -0400 iptables (1.2.2-2) unstable; urgency=low * removed debian/rules bash expansions, Closes: #98794 -- Laurence J. Lane Sat, 26 May 2001 12:26:55 -0400 iptables (1.2.2-1) unstable; urgency=low * new upstream version -- Laurence J. Lane Fri, 11 May 2001 14:02:25 -0400 iptables (1.2.1a-2) unstable; urgency=low * restore ip6tables, patch provided by Marc Martinez -- Laurence J. Lane Wed, 25 Apr 2001 00:05:26 -0400 iptables (1.2.1a-1) unstable; urgency=low * new upstream release and enabled save/restore, Closes: #94211 -- Laurence J. Lane Thu, 19 Apr 2001 21:02:20 -0400 iptables (1.2.1-1) unstable; urgency=low * new upstream release, Closes: #85318 * removed symlinks to bins * applied debian/patch-ULOG (minor build issue) -- Laurence J. Lane Fri, 16 Mar 2001 16:37:27 -0500 iptables (1.2-10) unstable; urgency=low * bins and libs moved from /usr to /, provided symlinks, Closes: #89529 * added lintian overrides for shared-lib-without-dependency-information -- Laurence J. Lane Wed, 14 Mar 2001 04:24:47 -0500 iptables (1.2-9) unstable; urgency=low * change to libc6's kernel 2.4 headers so sparc can build -- Laurence J. Lane Wed, 7 Mar 2001 13:04:14 -0500 iptables (1.2-8) unstable; urgency=low * --rename-chain correction by sfrost@debian.org, closes: #84275 * debian/rules custom KERNEL_DIR example, closes: #86617 -- Laurence J. Lane Mon, 19 Feb 2001 10:11:16 -0500 iptables (1.2-7) unstable; urgency=low * Build-Depend on kernel-headers-2.4.0-test11, closes: #85871 -- Laurence J. Lane Sat, 17 Feb 2001 07:44:46 -0500 iptables (1.2-6) unstable; urgency=low * Corrected modprobe call, closes: #85299 -- Laurence J. Lane Thu, 8 Feb 2001 22:33:09 -0500 iptables (1.2-5) unstable; urgency=low * Added Build-Depends, closes #84764 -- Laurence J. Lane Sun, 4 Feb 2001 11:46:44 -0500 iptables (1.2-4) unstable; urgency=low * Recompiled without patch-o-matic headers (closes: #81902) -- Laurence J. Lane Thu, 11 Jan 2001 07:03:38 -0500 iptables (1.2-3) unstable; urgency=low * Corrected ip6tables lib path (closes: #81403) * Added temporary ip6tables.8.gz -- Laurence J. Lane Tue, 9 Jan 2001 19:59:40 -0500 iptables (1.2-2) unstable; urgency=low * Removed iptables-{save,restore}.8 * Corrected orig.tar.gz source upload -- Laurence J. Lane Tue, 9 Jan 2001 08:28:55 -0500 iptables (1.2-1) unstable; urgency=low * New maintainer * Enabled ip6tables build -- Laurence J. Lane Mon, 8 Jan 2001 19:51:02 -0500 iptables (1.1.2-1.0) unstable; urgency=low * Non-maintainer upload * New upstream release -- Laurence J. Lane Sat, 14 Oct 2000 13:15:34 -0400 iptables (1.1.1-1.1) unstable; urgency=low * Non-maintainer upload * Bypass kernel patch checks in Makefile, see Bug#67397 -- Laurence J. Lane Thu, 5 Oct 2000 17:34:53 -0400 iptables (1.1.1-1.0) unstable; urgency=low * Non-maintainer upload * New upstream release * Added Packet Filtering and NAT HOWTOs -- Laurence J. Lane Sat, 15 Jul 2000 22:44:17 -0400 iptables (1.1.0-1) unstable; urgency=low * New upstream release -- Christoph Lameter Sun, 14 May 2000 12:09:55 -0700 iptables (1.0.0-3) unstable; urgency=low * Remove Makefile.orig (closes: #63434) -- Christoph Lameter Wed, 3 May 2000 11:23:33 -0700 iptables (1.0.0-2) unstable; urgency=low * make distclean rather than make clean in debian/rules to wipe out platform specific dependendies before shipping source. (closes: #62967) -- Christoph Lameter Mon, 24 Apr 2000 12:12:39 -0700 iptables (1.0.0-1) unstable; urgency=low * Added some more docs. * Rewrote copyright file * Upstream final 1.0.0 release. -- Christoph Lameter Sun, 26 Mar 2000 19:19:19 -0800 iptables (1.0.0alpha-1) unstable; urgency=low * Initial release. -- Christoph Lameter Sun, 26 Mar 2000 18:49:18 -0800