summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--debian/changelog144
-rw-r--r--debian/clean2
-rw-r--r--debian/compat1
-rw-r--r--debian/conntrack.examples1
-rw-r--r--debian/conntrack.install2
-rw-r--r--debian/conntrackd.README.Debian8
-rw-r--r--debian/conntrackd.conf101
-rw-r--r--debian/conntrackd.default5
-rw-r--r--debian/conntrackd.examples2
-rwxr-xr-xdebian/conntrackd.init61
-rw-r--r--debian/conntrackd.install3
-rw-r--r--debian/conntrackd.logrotate9
-rw-r--r--debian/conntrackd.postinst17
-rw-r--r--debian/conntrackd.postrm19
-rwxr-xr-xdebian/conntrackd.preinst25
-rw-r--r--debian/control28
-rw-r--r--debian/copyright21
-rwxr-xr-xdebian/rules13
-rw-r--r--debian/source/format1
-rw-r--r--debian/watch4
20 files changed, 467 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000..0d2cfc3
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,144 @@
+conntrack (1:1.2.1-1) unstable; urgency=low
+
+ * [ed902b3] Initial upstream branch.
+ * [ea27bb4] Imported Upstream version 1.2.1
+ * [9a5f9ae] Update libnetfilter_conntrack requirement
+ * [92005c6] Fix dependency
+ * [fb4a63b] wrap-and-sort debian/control
+ * [21100c2] Remove obsolete stuff
+ * [30f468d] Convert to dh9
+ * [b96ec88] Bump standards version
+ * [741f6a6] wrap-and-sort
+ * [9c43cb9] Install examples
+ * [f403c41] Installation of examples moved to dh_installexamples
+ * [d60e302] Remove wrong example
+
+ -- Alexander Wirt <formorer@debian.org> Tue, 12 Jun 2012 18:09:58 +0200
+
+conntrack (1:1.0.0-2) unstable; urgency=low
+
+ * Build depend on libnetfilter-conntrack >= 0.9.1
+ (Closes: #616410)
+
+ -- Alexander Wirt <formorer@debian.org> Fri, 04 Mar 2011 10:07:00 +0100
+
+conntrack (1:1.0.0-1) unstable; urgency=low
+
+ * New upstream version (Closes: #589202, #589203, #589204)
+ - Fix removing of conntrack entries (Closes: #496769)
+ * Bump standards version
+ * Force deb source 1.0
+ * Use invoke-rc.d in logrotate.de (Closes: #613512)
+ * Make logrotate silent (Closes: #605247)
+
+ -- Alexander Wirt <formorer@debian.org> Thu, 03 Mar 2011 23:07:26 +0100
+
+conntrack (1:0.9.14-2) unstable; urgency=low
+
+ * Integrate lost NMU from Stefan Fritsch. Thanks Stefan
+ * Prevent dpkg conffile prompt for unmodified conntrackd.conf when upgrading
+ from pre 1:0.9.12-1 (closes: #542662).
+
+ -- Alexander Wirt <formorer@debian.org> Sat, 13 Feb 2010 11:17:59 +0100
+
+conntrack (1:0.9.14-1) unstable; urgency=low
+
+ * New upstream version
+ * Add ${misc:Depends} to all binary packages
+ * Add dpatch support
+ * Bump standards version (no changes)
+ * Remove Max from Uploaders. Thanks for your work!
+ * Backport patch from HEAD to fix UDP filtering.
+ Thanks tino for the hint
+
+ -- Alexander Wirt <formorer@debian.org> Sat, 30 Jan 2010 18:34:09 +0100
+
+conntrack (1:0.9.13-1) unstable; urgency=low
+
+ [ Max Kellermann ]
+ * new upstream release (Closes: #537896, #545918)
+ - require libnfnetlink 1.0.0, libnetfilter_conntrack 0.0.100
+ - ChangeLog was removed by upstream
+ * updated home page in the copyright file (Closes: #533583)
+ * correct LSB dependencies in init script, patch by Petter Reinholdtsen
+ (Closes: #541079)
+
+ [ Alexander Wirt ]
+ * Bump standards version
+
+ -- Alexander Wirt <formorer@debian.org> Thu, 17 Sep 2009 12:32:19 +0200
+
+conntrack (1:0.9.12-1) unstable; urgency=low
+
+ [ Max Kellermann ]
+ * new upstream release
+ - build-depend on libnfnetlink 0.0.40, libnetfilter-conntrack 0.0.99
+ - fixes FTBS (undeclared variable)
+ (Closes: #522181, #518891)
+ * moved conntrackd.conf to /etc/conntrackd/conntrackd.conf (Closes: #477679)
+ * updated sample configuration file
+ * updated home page to http://conntrack-tools.netfilter.org/
+ * restart conntrackd after logrotate (Closes: #513079)
+
+ [ Alexander Wirt ]
+ * Bump standards version
+
+ -- Alexander Wirt <formorer@debian.org> Thu, 02 Apr 2009 11:37:25 +0200
+
+conntrack (1:0.9.7-1) unstable; urgency=low
+
+ [ Max Kellermann ]
+ * new upstream release
+ - dropped all patches because they have been merged by upstream
+ - depend on libnfnetlink 0.0.33, libnetfilter-conntrack 0.0.94
+
+ [ Alexander Wirt ]
+ * Bump standards version (No changes)
+
+ -- Alexander Wirt <formorer@debian.org> Tue, 22 Jul 2008 23:33:30 +0200
+
+conntrack (1:0.9.6-4) unstable; urgency=low
+
+ [ Max Kellermann ]
+ * fix compilation on SPARC (printf argument mismatch)
+
+ -- Alexander Wirt <formorer@debian.org> Mon, 14 Apr 2008 23:09:22 +0200
+
+conntrack (1:0.9.6-3) unstable; urgency=low
+
+ [ Max Kellermann ]
+ * fix gcc 4.3 compilation errors:
+ - "large integer implicitly truncated to unsigned type" (Closes: #472812)
+ - "'input' defined but not used" (Closes: #474768)
+
+ -- Alexander Wirt <formorer@debian.org> Tue, 08 Apr 2008 22:08:10 +0200
+
+conntrack (1:0.9.6-2) unstable; urgency=low
+
+ * Build depend on bison (Closes: #472442)
+
+ -- Alexander Wirt <formorer@debian.org> Mon, 24 Mar 2008 12:35:44 +0100
+
+conntrack (1:0.9.6-1) unstable; urgency=low
+
+ [ Max Kellermann ]
+ * new upstream release
+ * added package "conntrackd"
+ * updated watchfile for new upstream name "conntrack-tools" (Closes:
+ #449899)
+ * removed "-Wall" from CFLAGS override
+ * moved DH_COMPAT to debian/compat
+ * don't ignore "make distclean" errors
+ * bumped Standards-Version to 3.7.3
+ * install upstream changelog
+ * added Homepage header to debian/control
+ * call dh_install with -X.svn because upstream accidently distributed
+ the .svn directories
+
+ -- Alexander Wirt <formorer@debian.org> Fri, 21 Mar 2008 22:46:22 +0100
+
+conntrack (1.00~beta2-1) unstable; urgency=low
+
+ * initial debian release (Closes: #388615)
+
+ -- Max Kellermann <max@duempel.org> Thu, 21 Sep 2006 18:04:51 +0200
diff --git a/debian/clean b/debian/clean
new file mode 100644
index 0000000..50b22e2
--- /dev/null
+++ b/debian/clean
@@ -0,0 +1,2 @@
+config.log
+lex.yy.c
diff --git a/debian/compat b/debian/compat
new file mode 100644
index 0000000..ec63514
--- /dev/null
+++ b/debian/compat
@@ -0,0 +1 @@
+9
diff --git a/debian/conntrack.examples b/debian/conntrack.examples
new file mode 100644
index 0000000..dc8cddb
--- /dev/null
+++ b/debian/conntrack.examples
@@ -0,0 +1 @@
+doc/cli
diff --git a/debian/conntrack.install b/debian/conntrack.install
new file mode 100644
index 0000000..ab442d1
--- /dev/null
+++ b/debian/conntrack.install
@@ -0,0 +1,2 @@
+debian/tmp/usr/sbin/conntrack
+debian/tmp/usr/share/man/man8/conntrack.8
diff --git a/debian/conntrackd.README.Debian b/debian/conntrackd.README.Debian
new file mode 100644
index 0000000..8964ec4
--- /dev/null
+++ b/debian/conntrackd.README.Debian
@@ -0,0 +1,8 @@
+conntrackd can run in two modes:
+- statistics mode
+- synchronization mode
+
+This package comes with a sample configuration file for the statistics
+mode in (/etc/conntrackd/conntrackd.conf). There are also sample
+configuration files for the synchronization mode in
+/usr/share/doc/conntrackd/examples.
diff --git a/debian/conntrackd.conf b/debian/conntrackd.conf
new file mode 100644
index 0000000..6d76261
--- /dev/null
+++ b/debian/conntrackd.conf
@@ -0,0 +1,101 @@
+#
+# General settings
+#
+General {
+ #
+ # Number of buckets in the caches: hash table
+ #
+ HashSize 8192
+
+ #
+ # Maximum number of conntracks:
+ # it must be >= $ cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max
+ #
+ HashLimit 65535
+
+ #
+ # Logfile: on (/var/log/conntrackd.log), off, or a filename
+ # Default: off
+ #
+ #LogFile on
+
+ #
+ # Syslog: on, off or a facility name (daemon (default) or local0..7)
+ # Default: off
+ #
+ Syslog on
+
+ #
+ # Lockfile
+ #
+ LockFile /var/lock/conntrackd.lock
+
+ #
+ # Unix socket configuration
+ #
+ UNIX {
+ Path /var/run/conntrackd.sock
+ Backlog 20
+ }
+
+ #
+ # Netlink socket buffer size
+ #
+ SocketBufferSize 262142
+
+ #
+ # Increase the socket buffer up to maximun if required
+ #
+ SocketBufferSizeMaxGrown 655355
+
+ #
+ # Event filtering: This clause allows you to filter certain traffic,
+ # There are currently three filter-sets: Protocol, Address and
+ # State. The filter is attached to an action that can be: Accept or
+ # Ignore. Thus, you can define the event filtering policy of the
+ # filter-sets in positive or negative logic depending on your needs.
+ #
+ Filter {
+ #
+ # Accept only certain protocols: You may want to log the
+ # state of flows depending on their layer 4 protocol.
+ #
+ Protocol Accept {
+ TCP
+ }
+
+ #
+ # Ignore traffic for a certain set of IP's.
+ #
+ Address Ignore {
+ IPv4_address 127.0.0.1 # loopback
+ }
+
+ #
+ # Uncomment this line below if you want to filter by flow state.
+ # The existing TCP states are: SYN_SENT, SYN_RECV, ESTABLISHED,
+ # FIN_WAIT, CLOSE_WAIT, LAST_ACK, TIME_WAIT, CLOSED, LISTEN.
+ #
+ # State Accept {
+ # ESTABLISHED CLOSED TIME_WAIT CLOSE_WAIT for TCP
+ # }
+ }
+}
+
+Stats {
+ #
+ # If you enable this option, the daemon writes the information about
+ # destroyed connections to a logfile. Default is off.
+ # Logfile: on, off, or a filename
+ # Default file: (/var/log/conntrackd-stats.log)
+ #
+ LogFile on
+
+ #
+ # Enable connection logging via Syslog. Default is off.
+ # Syslog: on, off or a facility name (daemon (default) or local0..7)
+ # If you set the facility, use the same as in the General clause,
+ # otherwise you'll get a warning message.
+ #
+ #Syslog on
+}
diff --git a/debian/conntrackd.default b/debian/conntrackd.default
new file mode 100644
index 0000000..9926d79
--- /dev/null
+++ b/debian/conntrackd.default
@@ -0,0 +1,5 @@
+# Which configuration file?
+#CONFIG=/etc/conntrackd/conntrackd.conf
+
+# Additional options for daemon startup.
+#OPTIONS=""
diff --git a/debian/conntrackd.examples b/debian/conntrackd.examples
new file mode 100644
index 0000000..8161d36
--- /dev/null
+++ b/debian/conntrackd.examples
@@ -0,0 +1,2 @@
+doc/stats
+doc/sync
diff --git a/debian/conntrackd.init b/debian/conntrackd.init
new file mode 100755
index 0000000..0c5ccb9
--- /dev/null
+++ b/debian/conntrackd.init
@@ -0,0 +1,61 @@
+#!/bin/bash
+#
+# conntrackd Start conntrackd using /etc/conntrackd.conf
+#
+# Written by Max Kellermann <max@duempel.org>
+#
+### BEGIN INIT INFO
+# Provides: conntrackd
+# Required-Start: $network $syslog $remote_fs
+# Required-Stop: $network $syslog $remote_fs
+# Default-Start: 2 3 4 5
+# Default-Stop: 0 1 6
+# Description: Starts conntrackd
+# short-description: Starts conntrackd
+### END INIT INFO
+
+#includes lsb functions
+source /lib/lsb/init-functions
+
+PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
+DAEMON=/usr/sbin/conntrackd
+
+test -x $DAEMON || exit 0
+
+CONFIG=/etc/conntrackd/conntrackd.conf
+OPTIONS=""
+
+test -f /etc/default/conntrackd && source /etc/default/conntrackd
+
+test -f $CONFIG || exit 0
+
+case "$1" in
+ start)
+ log_begin_msg "Starting conntrackd"
+ start-stop-daemon --start --quiet \
+ --exec $DAEMON \
+ -- \
+ -d \
+ -C "$CONFIG" \
+ $OPTIONS
+ log_end_msg $?
+ ;;
+ stop)
+ log_begin_msg "Stopping conntrackd"
+ $DAEMON \
+ -C "$CONFIG" \
+ -k
+ log_end_msg $?
+ ;;
+ restart|force-reload)
+ $0 stop
+ sleep 1
+ $0 start
+ ;;
+ *)
+ log_action_msg "Usage: /etc/init.d/conntrackd {start|stop|restart|force-reload}"
+ exit 1
+ ;;
+esac
+
+exit 0
diff --git a/debian/conntrackd.install b/debian/conntrackd.install
new file mode 100644
index 0000000..1c9808d
--- /dev/null
+++ b/debian/conntrackd.install
@@ -0,0 +1,3 @@
+debian/conntrackd.conf etc/conntrackd
+debian/tmp/usr/sbin/conntrackd
+debian/tmp/usr/share/man/man8/conntrackd.8
diff --git a/debian/conntrackd.logrotate b/debian/conntrackd.logrotate
new file mode 100644
index 0000000..d1b0164
--- /dev/null
+++ b/debian/conntrackd.logrotate
@@ -0,0 +1,9 @@
+/var/log/conntrackd-stats.log {
+ weekly
+ rotate 2
+ missingok
+
+ postrotate
+ invoke-rc.d conntrackd restart > /dev/null
+ endscript
+}
diff --git a/debian/conntrackd.postinst b/debian/conntrackd.postinst
new file mode 100644
index 0000000..847932b
--- /dev/null
+++ b/debian/conntrackd.postinst
@@ -0,0 +1,17 @@
+#!/bin/sh
+set -e
+
+action=$1
+version=$2
+
+# package versions < 0.9.8-1 had the configuration file in a
+# non-standard location
+if [ "$action" = configure -a -n "$version" ] &&
+ dpkg --compare-versions "$version" lt "1:0.9.8-1" &&
+ test -f /etc/conntrackd.conf.dpkg-updating
+then
+ # unmodified version, delete without prompting
+ rm /etc/conntrackd.conf.dpkg-updating
+fi
+
+#DEBHELPER#
diff --git a/debian/conntrackd.postrm b/debian/conntrackd.postrm
new file mode 100644
index 0000000..4c29446
--- /dev/null
+++ b/debian/conntrackd.postrm
@@ -0,0 +1,19 @@
+#!/bin/sh
+set -e
+
+action=$1
+
+# package versions < 0.9.8-1 had the configuration file in a
+# non-standard location
+if [ "$action" = "abort-upgrade" ] &&
+ [ -f /etc/conntrackd.conf.dpkg-updating ]
+then
+ # unmodified version, restore
+ mv /etc/conntrackd.conf.dpkg-updating /etc/conntrackd.conf
+fi
+
+if [ "$action" = "purge" ] ; then
+ rm -f /etc/conntrackd.conf.dpkg-updating
+fi
+
+#DEBHELPER#
diff --git a/debian/conntrackd.preinst b/debian/conntrackd.preinst
new file mode 100755
index 0000000..2bb65ef
--- /dev/null
+++ b/debian/conntrackd.preinst
@@ -0,0 +1,25 @@
+#!/bin/sh
+set -e
+
+action=$1
+version=$2
+
+if [ "$action" = upgrade -a -n "$version" ] &&
+ dpkg --compare-versions "$version" lt "1:0.9.8-1" &&
+ test -f /etc/conntrackd.conf &&
+ ! test -e /etc/conntrackd/conntrackd.conf; then
+ # package versions < 0.9.8-1 had the configuration file in a
+ # non-standard location
+ mkdir -p /etc/conntrackd
+ if md5sum /etc/conntrackd.conf 2> /dev/null |
+ grep -q 9e463d9bb7902e513da1b90b326bd43d
+ then
+ # unmodified version, dpkg should not prompt, delete in postinst
+ mv /etc/conntrackd.conf /etc/conntrackd.conf.dpkg-updating
+ else
+ # move to new location to make dpkg prompt
+ mv /etc/conntrackd.conf /etc/conntrackd/conntrackd.conf
+ fi
+fi
+
+#DEBHELPER#
diff --git a/debian/control b/debian/control
new file mode 100644
index 0000000..ccf1cce
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,28 @@
+Source: conntrack
+Section: net
+Priority: optional
+Maintainer: Alexander Wirt <formorer@debian.org>
+Homepage: http://conntrack-tools.netfilter.org/
+Build-Depends: bison,
+ debhelper (>= 9),
+ flex,
+ libmnl-dev (>= 1.0.1),
+ libnetfilter-conntrack-dev (>= 1.0.1),
+ libnetfilter-cttimeout-dev (>= 1.0.0)
+Standards-Version: 3.9.3
+
+Package: conntrack
+Architecture: any
+Depends: ${misc:Depends}, ${shlibs:Depends}
+Description: Program to modify the conntrack tables
+ conntrack is a userspace command line program targeted at system
+ administrators. It enables them to view and manage the in-kernel
+ connection tracking state table.
+
+Package: conntrackd
+Architecture: any
+Depends: ${misc:Depends}, ${shlibs:Depends}
+Description: Connection tracking daemon
+ Conntrackd can replicate the status of the connections that are
+ currently being processed by your stateful firewall based on Linux.
+ Conntrackd can also run as statistics daemon.
diff --git a/debian/copyright b/debian/copyright
new file mode 100644
index 0000000..5ab105b
--- /dev/null
+++ b/debian/copyright
@@ -0,0 +1,21 @@
+This package was debianized by Max Kellermann <max@duempel.org> on
+Thu Sep 21 00:09:44 CEST 2006
+
+It was downloaded from http://conntrack-tools.netfilter.org/downloads.html
+
+Upstream Authors:
+Pablo Neira Ayuso <pablo@netfilter.org>
+Harald Welte <laforge@netfilter.org>
+
+Copyright:
+
+(C) 2005 by Pablo Neira Ayuso <pablo@netfilter.org>
+<laforge@netfilter.org>
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 2 of the License, or (at
+ your option) any later version.
+
+On Debian GNU/Linux systems, the complete text of the GNU General
+Public License can be found in `/usr/share/common-licenses/GPL'.
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 0000000..955dd78
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,13 @@
+#!/usr/bin/make -f
+# -*- makefile -*-
+# Sample debian/rules that uses debhelper.
+# This file was originally written by Joey Hess and Craig Small.
+# As a special exception, when this file is copied by dh-make into a
+# dh-make output file, you may use that output file without restriction.
+# This special exception was added by Craig Small in version 0.37 of dh-make.
+
+# Uncomment this to turn on verbose mode.
+#export DH_VERBOSE=1
+
+%:
+ dh $@
diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 0000000..163aaf8
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (quilt)
diff --git a/debian/watch b/debian/watch
new file mode 100644
index 0000000..e684794
--- /dev/null
+++ b/debian/watch
@@ -0,0 +1,4 @@
+version=3
+
+opts="uversionmangle=s/beta/~beta/" \
+http://ftp.netfilter.org/pub/conntrack-tools/conntrack-tools-(\S+)\.tar\.bz2