Change log for arno-iptables-firewall package in Ubuntu

arno-iptables-firewall (2.1.1a-3) unstable; urgency=medium

  * Use dh tools to install the systemd service file (thanks to Chris
    Hofstaedtler <email address hidden> for a patch) (Closes: #1058771).
  * d/salsa-ci.yml: Add variable SALSA_CI_DISABLE_BUILD_PACKAGE_ANY.

 -- Sven Geuer <email address hidden>  Tue, 19 Dec 2023 21:13:11 +0100

Available diffs

• diff from 2.1.1a-2 to 2.1.1a-3 (955 bytes)

arno-iptables-firewall (2.1.1a-2) unstable; urgency=medium

  * d/control:
    - Move dependency from the transitional dnsutils to bind9-dnsutils.
    - Update Homepage to point to the repository on Github, the original home
      page seems unmaintained.
  * d/copyright:
    - Update Upstream-Contact to point to the Github issues.
    - Update Arno's email address.
    - Bump years to 2023 for Arno von Lonnie.
  * d/u/metadata:
    - Update Contact and Security-Contact to point to the Github issues.
    - Drop the FAQ field, the referenced URL is unmaintained.
  * d/rules:
    - Make use of execute_before/after_dh_command.
    - Simplify the recipe of execute_after_dh_installchangelogs.
    - Add '#export DH_VERBOSE=1'.
  * d/templates, d/po/*:
    - Request to call 'service…' to manually start the firewall, replacing
      'invoke-rc.d…'.
  * d/rules, d/post*, d/pre*:
    - Tidy rules and maintainer scripts regarding dh_installinit/systemd.

 -- Sven Geuer <email address hidden>  Tue, 07 Nov 2023 13:36:50 +0100

Available diffs

• diff from 2.1.1a-1 to 2.1.1a-2 (5.4 KiB)

arno-iptables-firewall (2.1.1a-1) unstable; urgency=medium

  * New upstream release.
  * Adapt d/patches/* to new release.
    - Drop nf_conntrack_helper.patch which has been integrated upstream.
  * Update d/po/*.
    - Change field Report-Msgid-Bugs-To to point to the generic email
      address of the package rather than to the personal one of a former
      package maintainer.
    - Normalize '#. description' to '#. Description'.
    - Adjust line breaks of some multi-line fields in cs.po and ru.po.

 -- Sven Geuer <email address hidden>  Tue, 13 Jun 2023 14:08:35 +0200

Available diffs

• diff from 2.1.1-8 to 2.1.1a-1 (10.0 KiB)

arno-iptables-firewall (2.1.1-8) unstable; urgency=medium

  * Move systemd services from /usr/lib/systemd back to /lib/systemd
    (Closes: #1034213).

 -- Sven Geuer <email address hidden>  Sat, 22 Apr 2023 17:20:52 +0200

Available diffs

• diff from 2.1.1-7 to 2.1.1-8 (1.8 KiB)

arno-iptables-firewall (2.1.1-7) unstable; urgency=medium

  * Backport upstream's fix regarding the kernel parameter
    net.netfilter.nf_conntrack_helper which does not exist anymore
    since kernel version 6.0.0 (Closes: #1031894).
  * Bump Standards-Version to 4.6.2; no more changes necessary.
  * Update renamed lintian tag in d/s/lintian-overrides.
  * Bump 2022 to 2023 in d/copyright.

 -- Sven Geuer <email address hidden>  Tue, 28 Feb 2023 22:07:04 +0100

Available diffs

• diff from 2.1.1-6 to 2.1.1-7 (2.8 KiB)

arno-iptables-firewall (2.1.1-6) unstable; urgency=medium

  [ Debian Janitor ]
  * Remove unnecessary constraint from Recommends.

  [ Sven Geuer ]
  * Bump years in d/copyright to 2022 where required.
  * Fix lintian error very-long-line-length-in-source-file by recovering the
    original file header. No change to meta data or effective content.
    - Update d/po/cs.po.
    - Update d/po/nb.po.
    - Update d/po/sv.po.
  * Bump Standards-Version to 4.6.1; no more changes necessary.
  * Refactor d/t/*.
    - Rename test1 to expected-config.
    - Drop test1_ prefix from the test1 helper files and move it into a
      dedicated directory expected-config.d.
    - Rename test2 to implicit-directories.
    - Update control.

 -- Sven Geuer <email address hidden>  Wed, 26 Oct 2022 14:27:40 +0200

Available diffs

• diff from 2.1.1-5 to 2.1.1-6 (7.0 KiB)

arno-iptables-firewall (2.1.1-5) unstable; urgency=medium

  * Use upstream's logrotate configuration file instead of installing
    our own (Closes: #1004215).
    - Drop d/arno-iptables-firewall.logrotate.
  * Fix lintian error maintainer-script-supports-ancient-package-version.
    - Drop d/preinst.
  * Under systemd, make sure arno-iptables-firewall.service gets enabled. In
    addition simplify maintainer scripts.
    - Update d/postinst.
    - Update d/prerm.
    - Update d/postrm.

 -- Sven Geuer <email address hidden>  Mon, 24 Jan 2022 22:28:00 +0100

Available diffs

• diff from 2.1.1-2 to 2.1.1-5 (3.8 KiB)
• diff from 2.1.1-4 to 2.1.1-5 (3.2 KiB)

arno-iptables-firewall (2.1.1-4) unstable; urgency=medium

  * Fix lintian error systemd-service-in-odd-location.
    - Update d/arno-iptables-firewall.install to install upstream's lib/*
      to usr/lib/*.
  * Bump Standards-Version to 4.6.0; no more changes necessary.

 -- Sven Geuer <email address hidden>  Mon, 27 Sep 2021 19:10:17 +0200

arno-iptables-firewall (2.1.1-2) unstable; urgency=medium

  * Adapt watch file to recent changes to uscan.
  * Bump years in d/copyright where required.
  * Bump Standards-Version to 4.5.1; no more changes necessary.

 -- Sven Geuer <email address hidden>  Mon, 01 Feb 2021 19:52:06 +0100

Available diffs

• diff from 2.1.1-1 to 2.1.1-2 (2.2 KiB)

arno-iptables-firewall (2.1.1-1) unstable; urgency=medium

  * New upstream release
  * Adapt d/patches/* to new release.
    - Drop manpage_upgrade.patch which has been integrated upstream.
    - Drop rpc_plugin_fix.patch which has been integrated upstream.
    - Update debian_paths.patch.
  * Update d/control.
    - Add gawk to Depends. The arno-fwfilter script requires it.
    - Simplify the rsyslogd version number the package depends on.
    - Fix some spellings of the Description.

 -- Sven Geuer <email address hidden>  Sat, 19 Sep 2020 17:59:25 +0200

Available diffs

• diff from 2.1.0-3 to 2.1.1-1 (42.6 KiB)

arno-iptables-firewall (2.1.0-3) unstable; urgency=medium

  * Backport an upstream fix to the rpc plugin.
    (Closes: #956552)
    - Introduce d/patches/rpc_plugin_fix.patch.
    - Update d/control to suggest rpcbind.
  * Correct header of d/patches/debian_paths.patch.

 -- Sven Geuer <email address hidden>  Tue, 14 Apr 2020 23:16:25 +0200

Available diffs

• diff from 2.1.0-1 to 2.1.0-3 (4.6 KiB)

arno-iptables-firewall (2.1.0-1) unstable; urgency=medium

  * New upstream release
  * Remove patches integrated upstream.
    - arno-fwfilter_manpage_fix
    - unit_file_addons
    - systemd-service-file-shutdown-problems
  * Adapt remaining patches and add .patch suffix.
    - hostip_url_fix.patch
    - lsb_init.patch
    - debian_paths.patch
  * Return to autopkgtest restriction isolation-machine as
    isolation-container only works reliable with debci localtest.
    - Update d/tests/control.
  * Refactor d/tests/test1 and test1* helper files for better maintainability.
  * Adapt expected iptables dump to this release.
    - Update d/tests/test1_iptables_-S.
  * Update d/NEWS.
  * Update d/copyright.
  * Bump Standards-Version to 4.5.0; no changes necessary.
    - Update d/control.

 -- Sven Geuer <email address hidden>  Fri, 24 Jan 2020 23:12:22 +0100

Available diffs

• diff from 2.0.3-2 to 2.1.0-1 (53.9 KiB)
• diff from 2.0.3-3 to 2.1.0-1 (52.8 KiB)

arno-iptables-firewall (2.0.3-3) unstable; urgency=medium

  [ Samuel Henrique ]
  * Add d/salsa-ci.yml

  [ Sven Geuer ]
  * Fix potential systemd service file shutdown problem
    - Introduce d/patches/systemd-service-file-shutdown-problems
  * Fix typo in manpage
    - Introduce d/patches/arno-fwfilter_manpage_fix
  * Fix introducing text of 00debconf.conf
    - Update d/postinst
    - Update d/tests/test1_00debconf.conf
  * Alter autopkgtest Restrictions from isolation-machine to
    isolation-container
    - Update d/tests/control
  * Update URLs of rocky.eld.leidenuniv.nl to https in d/*
  * Switch to DH compat format
    - Replace Build-Depends debhelper by debhelper-compat in d/control
    - Remove file d/compat
  * d/control:
    - Bump Standards-Version to 4.4.1
    - Add Rules-Requires-Root field
  * d/copyright
    - Add various authors missing for d/*
    - Group files and authors by license
  * d/test/*
    - rework test script and add workaround to run autopkgtest
      successfully on salsa.d.o.

 -- Sven Geuer <email address hidden>  Sat, 23 Nov 2019 13:44:14 +0100

arno-iptables-firewall (2.0.3-2) unstable; urgency=medium

  * d/tests/*: Update test to run successfully with different
    kernel and iptables versions.
  * d/control: Update debhelper Build-Depends from 12 to 12~.

 -- Sven Geuer <email address hidden>  Sat, 19 Jan 2019 13:40:04 +0100

Available diffs

• diff from 2.0.3-1 to 2.0.3-2 (3.0 KiB)

arno-iptables-firewall (2.0.3-1) unstable; urgency=medium

  * New upstream release.
    (Closes: #824684, #862856, #886991, #898770, #913089)
  * New maintainer.
    (Closes: #886951)
  * Update Standards-Version to 4.3.0; no changes necessary.
  * Update debhelper compatibility level to 11.
  * Clean up Depends.
  * Update debian/copyright.
  * Update debian/watch.
  * Make use of dh_installlogrotate and simulate non-existing
    dh_installrsyslog
    - Move logrotate.d.conf to arno-iptables-firewall.logrotate
    - Move rsyslog.d.conf to arno-iptables-firewall.rsyslog
    - Update debian/rules
  * Add support for systemd as alternate init system in addition to sysvinit.
    - Refactor preinst, postinst, prerm, postrm.
  * Patch documentation and security related directives into systemd unit file.
  * Add lintian-override due to missing uplink pgp signature.
  * Add debian/upstream/metadata.
  * Update debian/templates to provide a valid default configuration.
  * Add debian/tests/* for autopkgtest.
  * Convert debian/po/fr.po and sv.po from latin1 to utf8.
  * Clean up debian/dirs
    - Remove redundant directories
  * Remove upgrade support for Debian Releases before squeeze.

  [ Samuel Henrique ]
  * Bump DH level to 12
  * d/control: Add Pre-Depends field required for DH 12
    (thanks to Sven Geuer for noticing)
  * d/copyright: update file

 -- Sven Geuer <email address hidden>  Sun, 13 Jan 2019 22:28:41 +0100

Available diffs

• diff from 2.0.1.f-1.1 to 2.0.3-1 (65.1 KiB)

arno-iptables-firewall (2.0.1.f-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Depend on iproute2 instead of transitional package iproute.
    (Closes: #841001)

 -- Luca Boccassi <email address hidden>  Fri, 05 Jan 2018 22:57:30 +0000

Available diffs

• diff from 2.0.1.f-1 to 2.0.1.f-1.1 (524 bytes)

arno-iptables-firewall (2.0.1.f-1) unstable; urgency=medium

  * Bumped Standards-Version to 3.9.6; no changes necessary.
  * Add package conflict to iptables-persistent to prevent undesired
    behavior that reverts all iptables rules set by this package
    (Closes: #778845).
  * Standardize and modernize debian/control via CME.
  * Install systemd service file (Closes: #803638, #796587), and adjust
    patches to use correct paths for Debian.

 -- Michael Hanke <email address hidden>  Tue, 29 Dec 2015 19:53:58 +0100

Available diffs

• diff from 2.0.1.e-1 to 2.0.1.f-1 (24.4 KiB)

arno-iptables-firewall (2.0.1.e-1) unstable; urgency=low


  * New upstream release.
    - Removed TRACE option.
  * Updated debian/copyright.
  * Bumped Standards-Version to 3.9.5; no changes necessary.
  * Bumped debhelper compatibility level to 9.
  * Adjust update-rc.d call to replace unsupported use of 'start' and 'stop'
    commands with 'defaults' and rely on LSB header information.

 -- Michael Hanke <email address hidden>  Thu, 08 May 2014 16:07:04 +0200

Available diffs

• diff from 2.0.1.d-1 to 2.0.1.e-1 (10.1 KiB)

arno-iptables-firewall (2.0.1.d-1) unstable; urgency=low


  * New upstream release.
    - New plugins: nat-loopback, outbound-snat
    - New 'status-plugins' sub-command.
    - Addressed spurious error messages in conjunction with kmod
      (Closes: #684424)

 -- Michael Hanke <email address hidden>  Mon, 17 Dec 2012 09:07:02 +0100

Available diffs

• diff from 2.0.1.c-1 to 2.0.1.d-1 (13.6 KiB)

arno-iptables-firewall (2.0.1.c-1) unstable; urgency=low


  * Upstream bugfix release.
    - Fix a script 'IFS' issue if IPv6 and DMZ is enabled together with
      DMZ_HOST_OPEN_IP
    - Support for newer kernels (3.4+) which replace ipt_LOG & ip6t_LOG with
      xt_LOG

 -- Michael Hanke <email address hidden>  Thu, 28 Jun 2012 08:13:04 +0200

Available diffs

• diff from 2.0.1.b-3 to 2.0.1.c-1 (2.1 KiB)

arno-iptables-firewall (2.0.1.b-3) unstable; urgency=low


  * Add patch to use LSB init functions for logging. Thanks to
    Mike Miller and Christian Perrier (Closes: #672326).

 -- Michael Hanke <email address hidden>  Sun, 13 May 2012 20:05:16 +0200

Available diffs

• diff from 2.0.1.b-2 to 2.0.1.b-3 (1.1 KiB)

arno-iptables-firewall (2.0.1.b-2) unstable; urgency=low


  * Upload to unstable.

 -- Michael Hanke <email address hidden>  Mon, 23 Apr 2012 21:06:16 +0200

Available diffs

• diff from 2.0.1-1 to 2.0.1.b-2 (39.4 KiB)

arno-iptables-firewall (2.0.1-1) unstable; urgency=low


  * New upstream release. arno-fwfilter is now installed into /usr/bin.
    Obsolete configuration option DNS_FAST_FAIL & RESOLV_IPS have been
    removed.
  * Updated debian/copyright.

 -- Michael Hanke <email address hidden>  Tue, 17 Jan 2012 08:26:33 +0100

Available diffs

• diff from 2.0.0.c-1 (in Ubuntu) to 2.0.1-1 (17.5 KiB)

arno-iptables-firewall (2.0.0.c-1) unstable; urgency=low

  * New upstream maintenance release. Fixed multicast configuration issue
    (Closes: #631424) and updated several plugins.
  * Change strict dependency on rsyslogd to 'recommends'. This software can be
    used with other syslog daemons. However, out-of-the-box configuration is
    currently only provided for rsyslogd -- the default Debian syslog flavor.
    (Closes: #633530)
 -- Ubuntu Archive Auto-Sync <email address hidden>   Mon,  17 Oct 2011 09:09:56 +0000

Available diffs

• diff from 2.0.0.b-1 to 2.0.0.c-1 (5.8 KiB)

arno-iptables-firewall (2.0.0.b-1) unstable; urgency=low

  * New upstream bugfix release (Closes: #619496).
    Upstream merged the URL change related to #613631, but not the default
    option setting.
  * Added Japanese po-debconf template translation (Closes: #626801).
    Thanks to Hideki Yamane.
  * Update rsyslog handling, as the 'reload' action was removed (Closes:
    #628607). Added versioned dependency on the respective rsyslog release.
    Thanks to Michael Biebl for reporting.
  * Bumped Standards-Version to 3.9.2; no changes necessary.
 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  24 Jun 2011 09:06:56 +0000

Available diffs

• diff from 2.0.0.a-2 to 2.0.0.b-1 (15.2 KiB)

arno-iptables-firewall (2.0.0.a-2) unstable; urgency=low

  * Fix bashisms in ipsec plugin (Closes: #617510).

Available diffs

• diff from 1.9.2.k-4 to 2.0.0.a-2 (64.6 KiB)

arno-iptables-firewall (1.9.2.k-4) unstable; urgency=low

  * Add patch to unify the IPv4 and IPv6 default setup to allow outgoing
    traffic, and all incoming traffic on trusted and loopback interfaces.
    This patch also relaxes the rigorous blocking of any IPv6 traffic that was
    introduced by 1.9.2.k-3, and caused applications, like wxmaxima, relying on
    local IPv6 connection to be broken (Closes: #596170).
  * Add patch to prevent IPv6 rule accumulation upon firewall restart. This
    patch supplements the default configuration patch and is also documented
    in #596170.

Available diffs

• diff from 1.9.2.k-2 to 1.9.2.k-4 (13.7 KiB)

arno-iptables-firewall (1.9.2.k-2) unstable; urgency=low

  * Move iproute from recommended to a dependency (Closes: #566117). Thanks to
    Tenno Sereme for reporting.

Available diffs

• diff from 1.9.2.h-1 to 1.9.2.k-2 (34.8 KiB)

arno-iptables-firewall (1.9.2.h-1) unstable; urgency=low

  * New upstream release (Closes: #550222, #553036).
  * Unify dependency-based boot-order and old-style update-rc.d, to be similar
    to shorewall's behavior.
  * Add lintian override. The init script does handle 'stop', but it is
    shadowed by an if-clause. The 'else' branch handles 'stop' as well.

Available diffs

• diff from 1.9.2.d-1 to 1.9.2.h-1 (25.7 KiB)

arno-iptables-firewall (1.9.2.d-1) unstable; urgency=low

  * New upstream release.

Available diffs

• diff from 1.9.2.a-1 to 1.9.2.d-1 (17.1 KiB)

arno-iptables-firewall (1.9.2.a-1) unstable; urgency=low

  * New Upstream Version (Closes: #530045, #520011). Missed releases 1.9.0.c
    and 1.9.2.
  * Added spanish debconf translation (Closes: #522651). Thanks to Francisco
    Javier Cuadrado.
  * Bumped Standards-Version to 3.8.1; no changes necessary.
  * Increase debhelper compat-level to 5.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  12 Jun 2009 13:17:50 +0100

Available diffs

• diff from 1.9.0.b-1 to 1.9.2.a-1 (50.7 KiB)

arno-iptables-firewall (1.9.0.b-1) unstable; urgency=low

  * New upstream version (Closes: #509684). Missed release 1.9.0.a.
  * Added default logging setup for rsyslog (including logrotate config).
    All firewall-related messages go into /var/log/arno-iptables-firewall
    by default. Updated README.Debian and NEWS.Debian accordingly. Thanks to
    Tim Small (Closes: #503198).
  * Do not install syslogd examples, since Debian switched to rsyslog.
  * All executable scripts are now installed into /usr/sbin, since they are
    useless for normal users without access to the logfiles.
  * Updated debian/copyright and converted it into a machine-readable format.
  * Added DM-allow flag.
  * Added VCS information to debian/control.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  28 Apr 2009 21:16:36 +0100

Available diffs

• diff from 1.8.8.o-3 to 1.9.0.b-1 (140.1 KiB)

arno-iptables-firewall (1.8.8.o-3) unstable; urgency=low

  * Bumped Standards-Version to 3.8.0; no changes necessary.
  * Added "$network" to the init script's LSB Required-Start and Required-Stop
    header lines. Thanks to Chris Lamb for the patch (Closes: #493805).
  * Disabled IGD plugin by default (Closes: #493685).

 -- Ubuntu Archive Auto-Sync <email address hidden>   Mon,  15 Dec 2008 10:19:51 +0000

Available diffs

• diff from 1.8.8.o-2 to 1.8.8.o-3 (876 bytes)

arno-iptables-firewall (1.8.8.o-2) unstable; urgency=low

  * Add dnsutils to the recommended packages (Closes: #471430).

arno-iptables-firewall (1.8.8.i-2) unstable; urgency=low

  * Added 'iproute' to the recommended packages, as it is required by one of
    the plugins. Thanks to Joost van Baal for spotting this one.
  * Added Portuguese debconf translation (Thanks to Américo Monteiro).
    Closes: #435181.
  * Switch to new-style homepage field in debian/control.
  * Sponsored upload by Joost van Baal <email address hidden>.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  05 Dec 2007 00:27:33 +0000

arno-iptables-firewall (1.8.8.i-1) unstable; urgency=low

  * New Upstream Version. Fixes a bug in the NAT forwarding rules which caused
    using subnets as source restriction not to work.
    New plugins: Racoon IPSEC VPN Plugin, transparent DNAT plugin
  * Cleanup of the rules file. Most install task are now done by debhelper
    instead of countless cp calls.
  * Stopped manual parsing of dpkg status database. MD5 sum extraction for
    moving conffiles on package upgrade is now done by using dpkg-query.
  * Abandoned dpatch in favor of Git.
  * Sponsored upload by Joost van Baal <email address hidden>.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  23 Oct 2007 15:22:25 +0100

arno-iptables-firewall (1.8.8.h-1) unstable; urgency=low

  * New upstream release. Fix broken plugin loader.
    (Closes: #409609, #412191)
  * Prevent parallel make threads in debian/rules to satisfy dpatch
    requirement.

arno-iptables-firewall (1.8.8.c-1) unstable; urgency=low

  * New upstream release (fixed MAC-filter).

arno-iptables-firewall (1.8.6.c-2) unstable; urgency=low

  * French translation update. Thanks to  Florentin Duneau.(Closes: #367392)
  * Bumped Standards-Version to 3.7.2; no changes necessary.
  * Sponsored upload by Joost van Baal <email address hidden>.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Sun,  02 Jul 2006 21:02:03 +0100

arno-iptables-firewall (1.8.6.c-1) unstable; urgency=low

  * New upstream release.
  * Improved debconf templates to conform to the guidelines in the
    Developers Reference. (Closes: #360579)
  * Added several translations of the debconf templates (cs, nb, sv, vi, fr).
    Thanks to debian-i18n. (Closes: #361110, #362626)
  * Sponsored upload by Joost van Baal <email address hidden>.