Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 250407

Summary: net-firewall/xtables-addons
Product: Gentoo Linux Reporter: Nathan McSween <nwmcsween>
Component: New packagesAssignee: Peter Volkov (RETIRED) <pva>
Status: RESOLVED FIXED    
Severity: enhancement CC: cla, jaak, tc
Priority: High Keywords: EBUILD, InOverlay
Version: unspecified   
Hardware: All   
OS: Linux   
URL: http://jengelh.medozas.de/projects/xtables/
Whiteboard: [pva-dev-overlay]
Package list:
Runtime testing required: ---
Attachments: Ebuild for xtables-addons-1.6
Fixed ebuild for xtables-addons-1.6
git ebuild for xtables-addons
Removes debug code that causes compile error
Disables homemade depmod
No ipset install
Revised git ebuild
git ebuild for xtables-addons
xtables-addons-1.8.ebuild
updates a macro to fix the ipp2p cli
build.log (sandbox violation)

Description Nathan McSween 2008-12-09 16:00:15 UTC
patch-o-matic was burdensome and hard to maintain someone created a new out of tree module setup for iptables

Reproducible: Always

Steps to Reproduce:
Comment 1 Nathan McSween 2008-12-09 16:01:41 UTC
Created attachment 174739 [details]
Ebuild for xtables-addons-1.6
Comment 2 Nathan McSween 2008-12-09 16:02:45 UTC
Created attachment 174740 [details]
Fixed ebuild for xtables-addons-1.6
Comment 3 Nathan McSween 2008-12-09 16:53:27 UTC
Needs a patch to kill installation of ipset
Comment 4 Bryan Duff 2009-01-14 16:38:54 UTC
Created attachment 178491 [details]
git ebuild for xtables-addons
Comment 5 Bryan Duff 2009-01-14 16:40:00 UTC
Created attachment 178493 [details, diff]
Removes debug code that causes compile error
Comment 6 Bryan Duff 2009-01-14 20:32:13 UTC
New ebuild - doesn't install ipset.  And fixes other cross-compile issues.
Comment 7 Bryan Duff 2009-01-14 20:32:58 UTC
Created attachment 178505 [details, diff]
Disables homemade depmod
Comment 8 Bryan Duff 2009-01-14 20:33:15 UTC
Created attachment 178506 [details, diff]
No ipset install
Comment 9 Bryan Duff 2009-01-14 20:33:33 UTC
Created attachment 178508 [details]
Revised git ebuild
Comment 10 Bryan Duff 2009-01-14 21:37:17 UTC
Created attachment 178512 [details]
git ebuild for xtables-addons

Fix lack of lib install
Comment 11 Nathan William McSween 2009-01-15 05:57:32 UTC
Created attachment 178558 [details]
xtables-addons-1.8.ebuild

Fixed ipset bug
Fixed install issues
Todo fix required crypto modules for xt_sysrq
Todo make uninstall remove kernel modules
Comment 12 Peter Volkov (RETIRED) gentoo-dev 2009-04-04 10:50:25 UTC
I wrote ebuild which I'm going to submit at the tree at some point of time (actually after I fix parallel build issue). If you have time/wish to test ebuild before it gets the tree, you can get it from my dev overlay:

svn co http://overlays.gentoo.org/svn/dev/pva

To make USE_EXPAND working you need to
rm /etc/make.profile
mkdir /etc/make.profile
and put into /etc/make.profile/parent two lines
/path/to/your/current/profile
/path/to/profile/in/my/overlay

e.g. I have there:
camobap ~ # cat /etc/make.profile/parent
/usr/portage/profiles/default/linux/x86/2008.0
/home/pva/overlays/pva/profiles/my-profile
Comment 13 Mike 2009-04-10 13:52:57 UTC
Created attachment 187886 [details, diff]
updates a macro to fix the ipp2p cli

ipp2p commandline interface is broken in the latest release, possibly other extensions too, i haven't checked others. Cause is a forgotten macro update for a renamed function, patch attached, i'll also try to contact upstream.

Apart from that, your ebuild seems to work for me on amd64, peter, at least for building ipp2p, maybe you can add an ~amd64 keyword.
Comment 14 Dawid Węgliński (RETIRED) gentoo-dev 2009-04-29 07:55:05 UTC
Reading it deprecates patch-o-matic i have a question if it has ROUTE.patch?
Comment 15 Weedy 2010-01-15 07:01:21 UTC
So... is this ever going to be added to the tree? Do you plan to version bump your overlay?
Comment 16 Peter Volkov (RETIRED) gentoo-dev 2010-01-18 09:39:36 UTC
Bumped in overlay. It required some rewrite, so please test it. If nothing happens I'll add it to the tree within next few days.

Mike, was a problem reported upsteam? Could you provide steps to reproduce the problem? amd64 keyworded.
Dawid, no I don't see route there, but if you ask upstream there are chances that they'll help you.
Comment 17 Peter Volkov (RETIRED) gentoo-dev 2010-01-18 09:40:56 UTC
Ah, Mike, looking it the sources it looks like problem was fixed. Could you confirm that?
Comment 18 Jaak Ristioja 2010-03-15 21:28:40 UTC
Created attachment 223797 [details]
build.log (sandbox violation)

This is the build.log of a failed build of net-firewall/xtables-addons-1.22 from the aforementioned overlay. It appears to be violating sandbox restrictions.
Comment 19 Peter Volkov (RETIRED) gentoo-dev 2010-03-16 07:34:02 UTC
(In reply to comment #18)
> sandbox violation

Thank you for report Jaak. Please, try updated version in overlay and report back if it works or not.
Comment 20 Jaak Ristioja 2010-03-16 17:13:08 UTC
(In reply to comment #19)
> Thank you for report Jaak. Please, try updated version in overlay and report
> back if it works or not.

It works.
Comment 21 Hodur 2010-03-18 15:52:03 UTC
ipp2p module from xtables-addons-1.24 doesnt work with iptables-1.4.3.2

 * QA Notice: Package has poor programming practices which may compile
 *            fine but exhibit random runtime failures.
 * libxt_ipp2p.c:66: warning: implicit declaration of function 'param_act'

iptables -m ipp2p -h
/lib64/xtables/libxt_ipp2p.so: /lib64/xtables/libxt_ipp2p.so: undefined symbol: param_act
iptables v1.4.3.2: Couldn't load match `ipp2p':/lib64/xtables/libipt_ipp2p.so: cannot open shared object file: No such file or directory
Comment 22 Hodur 2010-03-18 16:06:40 UTC
(In reply to comment #21)
> ipp2p module from xtables-addons-1.24 doesnt work with iptables-1.4.3.2
> 
>  * QA Notice: Package has poor programming practices which may compile
>  *            fine but exhibit random runtime failures.
>  * libxt_ipp2p.c:66: warning: implicit declaration of function 'param_act'
> 
> iptables -m ipp2p -h
> /lib64/xtables/libxt_ipp2p.so: /lib64/xtables/libxt_ipp2p.so: undefined symbol:
> param_act
> iptables v1.4.3.2: Couldn't load match `ipp2p':/lib64/xtables/libipt_ipp2p.so:
> cannot open shared object file: No such file or directory
> 

(In reply to comment #21)
> ipp2p module from xtables-addons-1.24 doesnt work with iptables-1.4.3.2
> 
>  * QA Notice: Package has poor programming practices which may compile
>  *            fine but exhibit random runtime failures.
>  * libxt_ipp2p.c:66: warning: implicit declaration of function 'param_act'
> 
> iptables -m ipp2p -h
> /lib64/xtables/libxt_ipp2p.so: /lib64/xtables/libxt_ipp2p.so: undefined symbol:
> param_act
> iptables v1.4.3.2: Couldn't load match `ipp2p':/lib64/xtables/libipt_ipp2p.so:
> cannot open shared object file: No such file or directory
> 

Please ignore
Don't reproduced with new overlay ebuild
Comment 23 Peter Volkov (RETIRED) gentoo-dev 2010-04-29 09:34:40 UTC
xtables-addons-1.25 was just added to the tree. Try it/report any issues found.