|
 |
7d290b |
Name: conntrack-tools
|
|
|
7d290b |
Version: 1.4.4
|
|
|
7d290b |
Release: 7%{?dist}
|
|
|
7d290b |
Summary: Manipulate netfilter connection tracking table and run High Availability
|
|
|
7d290b |
Group: System Environment/Base
|
|
|
7d290b |
License: GPLv2
|
|
|
7d290b |
URL: http://netfilter.org
|
|
|
7d290b |
Source0: http://netfilter.org/projects/%{name}/files/%{name}-%{version}.tar.bz2
|
|
|
7d290b |
Source1: conntrackd.service
|
|
|
7d290b |
Source2: conntrackd.conf
|
|
|
7d290b |
BuildRequires: libnfnetlink-devel >= 1.0.1, libnetfilter_conntrack-devel >= 1.0.6
|
|
|
7d290b |
BuildRequires: libnetfilter_cttimeout-devel >= 1.0.0, libnetfilter_cthelper-devel >= 1.0.0
|
|
|
7d290b |
BuildRequires: libmnl-devel >= 1.0.3, libnetfilter_queue-devel >= 1.0.2
|
|
|
7d290b |
BuildRequires: pkgconfig bison flex
|
|
|
7d290b |
Requires: libnetfilter_conntrack >= 1.0.6
|
|
|
7d290b |
Provides: conntrack = 1.0-1
|
|
|
7d290b |
Obsoletes: conntrack < 1.0-1
|
|
|
7d290b |
Requires(post): systemd
|
|
|
7d290b |
Requires(preun): systemd
|
|
|
7d290b |
Requires(postun): systemd
|
|
|
7d290b |
BuildRequires: systemd
|
|
|
7d290b |
|
|
|
7d290b |
Patch1: 0001-conntrack-Support-IPv6-NAT.patch
|
|
|
7d290b |
Patch2: 0002-conntrackd-helpers-dhcpv6-Fix-potential-array-overru.patch
|
|
|
7d290b |
Patch3: 0003-nfct-Drop-dead-code-in-nfct_timeout_parse_params.patch
|
|
|
7d290b |
Patch4: 0004-src-Fix-for-implicit-fallthrough-warnings.patch
|
|
|
7d290b |
Patch5: 0005-conntrack-Fix-CIDR-to-mask-conversion-on-Big-Endian.patch
|
|
|
7d290b |
Patch6: 0006-nfct-helper-Fix-NFCTH_ATTR_PROTO_L4NUM-size.patch
|
|
|
7d290b |
|
|
|
7d290b |
%description
|
|
|
7d290b |
With conntrack-tools you can setup a High Availability cluster and
|
|
|
7d290b |
synchronize conntrack state between multiple firewalls.
|
|
|
7d290b |
|
|
|
7d290b |
The conntrack-tools package contains two programs:
|
|
|
7d290b |
- conntrack: the command line interface to interact with the connection
|
|
|
7d290b |
tracking system.
|
|
|
7d290b |
- conntrackd: the connection tracking userspace daemon that can be used to
|
|
|
7d290b |
deploy highly available GNU/Linux firewalls and collect
|
|
|
7d290b |
statistics of the firewall use.
|
|
|
7d290b |
|
|
|
7d290b |
conntrack is used to search, list, inspect and maintain the netfilter
|
|
|
7d290b |
connection tracking subsystem of the Linux kernel.
|
|
|
7d290b |
Using conntrack, you can dump a list of all (or a filtered selection of)
|
|
|
7d290b |
currently tracked connections, delete connections from the state table,
|
|
|
7d290b |
and even add new ones.
|
|
|
7d290b |
In addition, you can also monitor connection tracking events, e.g.
|
|
|
7d290b |
show an event message (one line) per newly established connection.
|
|
|
7d290b |
|
|
|
7d290b |
%prep
|
|
|
7d290b |
%autosetup -p1
|
|
|
7d290b |
|
|
|
7d290b |
%build
|
|
|
7d290b |
# do not use --enable-cthelper --enable-cttimeout, it causes disabling of these features
|
|
|
7d290b |
%configure --disable-static
|
|
|
7d290b |
%{__make} %{?_smp_mflags}
|
|
|
7d290b |
chmod 644 doc/sync/primary-backup.sh
|
|
|
7d290b |
rm -f doc/sync/notrack/conntrackd.conf.orig doc/sync/alarm/conntrackd.conf.orig doc/helper/conntrackd.conf.orig
|
|
|
7d290b |
|
|
|
7d290b |
%install
|
|
|
7d290b |
%{__make} install DESTDIR=%{buildroot}
|
|
|
7d290b |
find $RPM_BUILD_ROOT -type f -name "*.la" -exec rm -f {} ';'
|
|
|
7d290b |
mkdir -p %{buildroot}%{_sysconfdir}/conntrackd
|
|
|
7d290b |
install -d 0755 %{buildroot}%{_unitdir}
|
|
|
7d290b |
install -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/
|
|
|
7d290b |
install -m 0644 %{SOURCE2} %{buildroot}%{_sysconfdir}/conntrackd/
|
|
|
7d290b |
|
|
|
7d290b |
%files
|
|
|
7d290b |
%doc COPYING AUTHORS TODO doc
|
|
|
7d290b |
%dir %{_sysconfdir}/conntrackd
|
|
|
7d290b |
%config(noreplace) %{_sysconfdir}/conntrackd/conntrackd.conf
|
|
|
7d290b |
%{_unitdir}/conntrackd.service
|
|
|
7d290b |
%{_sbindir}/conntrack
|
|
|
7d290b |
%{_sbindir}/conntrackd
|
|
|
7d290b |
%{_sbindir}/nfct
|
|
|
7d290b |
%{_mandir}/man8/*
|
|
|
7d290b |
%{_mandir}/man5/*
|
|
|
7d290b |
%dir %{_libdir}/conntrack-tools
|
|
|
7d290b |
%{_libdir}/conntrack-tools/*
|
|
|
7d290b |
|
|
|
7d290b |
%post
|
|
|
7d290b |
%systemd_post conntrackd.service
|
|
|
7d290b |
|
|
|
7d290b |
%preun
|
|
|
7d290b |
%systemd_preun conntrackd.service
|
|
|
7d290b |
|
|
|
7d290b |
%postun
|
|
|
7d290b |
%systemd_postun conntrackd.service
|
|
|
7d290b |
|
|
|
7d290b |
%changelog
|
|
|
7d290b |
* Tue Sep 10 2019 Phil Sutter <psutter@redhat.com> - 1.4.4-7
|
|
|
7d290b |
- nfct: helper: Fix NFCTH_ATTR_PROTO_L4NUM size
|
|
|
7d290b |
|
|
|
7d290b |
* Wed Sep 04 2019 Phil Sutter <psutter@redhat.com> - 1.4.4-6
|
|
|
7d290b |
- conntrack: Fix CIDR to mask conversion on Big Endian
|
|
|
7d290b |
|
|
|
7d290b |
* Wed Mar 27 2019 Phil Sutter <psutter@redhat.com> - 1.4.4-5
|
|
|
7d290b |
- Add git commit info to IPv6 NAT support patch
|
|
|
7d290b |
- Backport: conntrackd: helpers: dhcpv6: Fix potential array overrun
|
|
|
7d290b |
- Backport: nfct: Drop dead code in nfct_timeout_parse_params()
|
|
|
7d290b |
- Backport: src: Fix for implicit-fallthrough warnings
|
|
|
7d290b |
|
|
|
7d290b |
* Fri Aug 24 2018 Paul Wouters <pwouters@redhat.com> - 1.4.4-4
|
|
|
7d290b |
- Resolves: rhbz#1578059 Greatest NVR version of conntrack-tools for ppc64le and x86_64 are different
|
|
|
7d290b |
|
|
|
7d290b |
* Mon Apr 03 2017 Paul Wouters <pwouters@redhat.com> - 1.4.4-3
|
|
|
7d290b |
- Resolves: rhbz#1425552 (explicitely Require: libnetfilter_conntrack >= 1.0.6 as it is same .so version)
|
|
|
7d290b |
|
|
|
7d290b |
* Thu Mar 16 2017 Paul Wouters <pwouters@redhat.com> - 1.4.4-2
|
|
|
7d290b |
- Resolves: rhbz#1425552 (conntrack cmd was missing IPv6 support as well)
|
|
|
7d290b |
|
|
|
7d290b |
* Fri Mar 03 2017 Paul Wouters <pwouters@redhat.com> - 1.4.4-1
|
|
|
7d290b |
- Resolves: rhbz#1425552 conntrack does not support Ipv6 NAT
|
|
|
7d290b |
|
|
|
7d290b |
* Fri Aug 12 2016 Paul Wouters <pwouters@redhat.com> - 1.4.3-1
|
|
|
7d290b |
- Resolves: rhbz#1351701 conntrackd -d throws "ERROR: Helper support is disabled"
|
|
|
7d290b |
|
|
|
7d290b |
* Fri Aug 21 2015 Paul Wouters <pwouters@redhat.com> - 1.4.2-9
|
|
|
7d290b |
- Resolves: rhbz#1255578 conntrackd could neither be started nor be stopped
|
|
|
7d290b |
|
|
|
7d290b |
* Tue Aug 18 2015 Paul Wouters <pwouters@redhat.com> - 1.4.2-8
|
|
|
7d290b |
- Resolves: rhbz#CVE-2015-6496
|
|
|
7d290b |
- Fold in upstream patches since 1.4.2 release up to git 900d7e8
|
|
|
7d290b |
- Fold in upstream patch set of 2015-08-18 for coverity issues
|
|
|
7d290b |
|
|
|
7d290b |
* Thu May 21 2015 Paul Wouters <pwouters@redhat.com> - 1.4.2-7
|
|
|
7d290b |
- Resolves: rhbz#1122611 [BNE] Add conntrack-tools package to RHEL-7
|