Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 472538 - net-firewall/shorewall6 should install Macros/*
Summary: net-firewall/shorewall6 should install Macros/*
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Server (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Vieri
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-06-07 01:22 UTC by Benny Pedersen
Modified: 2013-08-29 18:43 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Benny Pedersen 2013-06-07 01:22:46 UTC
confirmed from Tom Eastep that maintainers should unpack macros from shorewall aswell to get complete shorewall6 macro setup in running install

shorewall6 have 3 macros, i think something is missing :)
Comment 1 Jeroen Roovers (RETIRED) gentoo-dev 2013-06-08 13:10:12 UTC
Incidentally, it appears the 4.5.17 tarballs have all moved to the "superceded/" [sic!] subdirectory.
Comment 2 Benny Pedersen 2013-06-09 02:47:57 UTC
shorewall6 needs shorewall, not just shorewall-core, in dependice, Tom does not have ipv6 only host yet

i have not checked ebuilds dependice so it might already be ok
Comment 3 Constanze Hausner (RETIRED) gentoo-dev 2013-07-13 14:28:33 UTC
As far as I can see, all macros get installed.

For shorewall in /usr/share/shorewall/
For shorewall6 in /usr/share/shorewall6/

There are only 3 macros in the shorewall6 tar.bz2 file.

Can you clarify, what you think, what needs to be fixed?
Thank you.
Comment 4 Benny Pedersen 2013-07-14 15:08:34 UTC
ipv6 only setup still need shorewall (ipv4) to get all macros, in my mind it would just be more nice that it could get done without (ipv4) for ipv6 only setups

as its is now ipv6 hosts need both shorewall and shorewall6 for a complete macros listningens

to end it all, there is no bug, but ipv6 only setups is not supported
Comment 5 Thomas Deutschmann (RETIRED) gentoo-dev 2013-07-16 22:31:57 UTC
> Macros
> 
> The Shorewall6 package depends on Shorewall-common for application macros.
> Only certain address-family specific macros such as macro.AllowICMPs are
> included in Shorewall6. As a consequence, /usr/share/shorewall/ is included
> in the default Shorewall6 CONFIG_PATH.

From http://www.shorewall.net/IPv6Support.html


> Shorewall-core -- Required to install Shorewall, Shorewall6, Shorewall-lite
>                   or Shorewall6-lite.
> Shorewall --      Together with Shorewall-core, includes everything needed to
>                   create an IPv4 firewall.
> Shorewall6 --     Requires the Shorewall package and adds the capability to
>                   create an IPv6 firewall.

From http://www.shorewall.net/download.htm


So for upstream, shorewall6 is an add-on for shorewall, which adds the capability to create an IPv6 firewall.

=> We are missing a dependency for shorewall in shorewall6.
Comment 6 Thomas Deutschmann (RETIRED) gentoo-dev 2013-07-16 22:51:45 UTC
...we don't have a missing dependency:

# emerge -p --tree --deep net-firewall/shorewall6

These are the packages that would be merged, in reverse order:

Calculating dependencies... done!
[ebuild  N     ] net-firewall/shorewall6-4.5.18  USE="doc" 0 kB
[ebuild  N     ]  net-firewall/shorewall-4.5.18  USE="doc" 0 kB
[ebuild  N     ]  dev-perl/Socket6-0.230.0  57 kB



Please correct me if I am wrong, but I don't see a bug here.


P.s: Debian is doing the same like we do: Their shorewall6 is depending on shorewall and shorewall6 does *not* contain the macros provided with shorewall: http://packages.debian.org/jessie/all/shorewall6/filelist
Comment 7 Constanze Hausner (RETIRED) gentoo-dev 2013-08-29 18:43:22 UTC
As Thomas said, this is not a bug.