Date: Thursday, December 6, 2018 @ 03:30:57 Author: seblu Revision: 341100
archrelease: copy trunk to extra-x86_64 Added: nftables/repos/extra-x86_64/PKGBUILD (from rev 341099, nftables/trunk/PKGBUILD) nftables/repos/extra-x86_64/nftables.conf (from rev 341099, nftables/trunk/nftables.conf) nftables/repos/extra-x86_64/nftables.service (from rev 341099, nftables/trunk/nftables.service) Deleted: nftables/repos/extra-x86_64/PKGBUILD nftables/repos/extra-x86_64/nftables.conf nftables/repos/extra-x86_64/nftables.service ------------------+ PKGBUILD | 114 ++++++++++++++++++++++++++--------------------------- nftables.conf | 76 +++++++++++++++++------------------ nftables.service | 30 ++++++------- 3 files changed, 110 insertions(+), 110 deletions(-) Deleted: PKGBUILD =================================================================== --- PKGBUILD 2018-12-06 03:30:50 UTC (rev 341099) +++ PKGBUILD 2018-12-06 03:30:57 UTC (rev 341100) @@ -1,57 +0,0 @@ -# $Id$ -# Maintainer: Sébastien "Seblu" Luttringer <se...@archlinux.org> - -pkgname=nftables -epoch=1 -pkgver=0.9.0 -pkgrel=1 -pkgdesc='Netfilter tables userspace tools' -arch=('x86_64') -url='https://netfilter.org/projects/nftables/' -license=('GPL2') -depends=('libmnl' 'libnftnl' 'gmp' 'readline' 'ncurses') -makedepends=('docbook2x') -backup=('etc/nftables.conf') -validpgpkeys=('C09DB2063F1D7034BA6152ADAB4655A126D292E4') # Netfilter Core Team -source=("https://netfilter.org/projects/nftables/files/nftables-$pkgver.tar.bz2"{,.sig} - 'nftables.conf' - 'nftables.service') -sha1sums=('a3463fc6589c08631ec3f306f6db7f0905249542' - 'SKIP' - '7869aa31ac802922073310ffd4cbbc16450171e5' - '59185e947ebfd599954800ad2c774171b3f4cd58') - -prepare() { - cd $pkgname-$pkgver - # apply patch from the source array (should be a pacman feature) - local filename - for filename in "${source[@]}"; do - if [[ "$filename" =~ \.patch$ ]]; then - msg2 "Applying patch ${filename##*/}" - patch -p1 -N -i "$srcdir/${filename##*/}" - fi - done - : -} - -build() { - cd $pkgname-$pkgver - ./configure \ - --prefix=/usr \ - --sbindir=/usr/bin \ - --sysconfdir=/usr/share \ - CONFIG_MAN=y DB2MAN=docbook2man - make -} - -package() { - pushd $pkgname-$pkgver - make DESTDIR="$pkgdir" install - popd - # basic safe firewall config - install -Dm644 nftables.conf "$pkgdir/etc/nftables.conf" - # systemd - install -Dm644 nftables.service "$pkgdir/usr/lib/systemd/system/nftables.service" -} - -# vim:set ts=2 sw=2 et: Copied: nftables/repos/extra-x86_64/PKGBUILD (from rev 341099, nftables/trunk/PKGBUILD) =================================================================== --- PKGBUILD (rev 0) +++ PKGBUILD 2018-12-06 03:30:57 UTC (rev 341100) @@ -0,0 +1,57 @@ +# Maintainer: Sébastien "Seblu" Luttringer <se...@archlinux.org> + +pkgname=nftables +epoch=1 +pkgver=0.9.0 +pkgrel=2 +pkgdesc='Netfilter tables userspace tools' +arch=('x86_64') +url='https://netfilter.org/projects/nftables/' +license=('GPL2') +depends=('libmnl' 'libnftnl' 'gmp' 'readline' 'ncurses' 'jansson') +makedepends=('docbook2x') +backup=('etc/nftables.conf') +validpgpkeys=('C09DB2063F1D7034BA6152ADAB4655A126D292E4') # Netfilter Core Team +source=("https://netfilter.org/projects/nftables/files/nftables-$pkgver.tar.bz2"{,.sig} + 'nftables.conf' + 'nftables.service') +sha1sums=('a3463fc6589c08631ec3f306f6db7f0905249542' + 'SKIP' + '7869aa31ac802922073310ffd4cbbc16450171e5' + '59185e947ebfd599954800ad2c774171b3f4cd58') + +prepare() { + cd $pkgname-$pkgver + # apply patch from the source array (should be a pacman feature) + local filename + for filename in "${source[@]}"; do + if [[ "$filename" =~ \.patch$ ]]; then + msg2 "Applying patch ${filename##*/}" + patch -p1 -N -i "$srcdir/${filename##*/}" + fi + done + : +} + +build() { + cd $pkgname-$pkgver + ./configure \ + --prefix=/usr \ + --sbindir=/usr/bin \ + --sysconfdir=/usr/share \ + --with-json \ + CONFIG_MAN=y DB2MAN=docbook2man + make +} + +package() { + pushd $pkgname-$pkgver + make DESTDIR="$pkgdir" install + popd + # basic safe firewall config + install -Dm644 nftables.conf "$pkgdir/etc/nftables.conf" + # systemd + install -Dm644 nftables.service "$pkgdir/usr/lib/systemd/system/nftables.service" +} + +# vim:set ts=2 sw=2 et: Deleted: nftables.conf =================================================================== --- nftables.conf 2018-12-06 03:30:50 UTC (rev 341099) +++ nftables.conf 2018-12-06 03:30:57 UTC (rev 341100) @@ -1,38 +0,0 @@ -#!/usr/bin/nft -f -# ipv4/ipv6 Simple & Safe Firewall -# you can find examples in /usr/share/nftables/ - -table inet filter { - chain input { - type filter hook input priority 0; - - # allow established/related connections - ct state {established, related} accept - - # early drop of invalid connections - ct state invalid drop - - # allow from loopback - iifname lo accept - - # allow icmp - ip protocol icmp accept - ip6 nexthdr icmpv6 accept - - # allow ssh - tcp dport ssh accept - - # everything else - reject with icmpx type port-unreachable - } - chain forward { - type filter hook forward priority 0; - drop - } - chain output { - type filter hook output priority 0; - } - -} - -# vim:set ts=2 sw=2 et: Copied: nftables/repos/extra-x86_64/nftables.conf (from rev 341099, nftables/trunk/nftables.conf) =================================================================== --- nftables.conf (rev 0) +++ nftables.conf 2018-12-06 03:30:57 UTC (rev 341100) @@ -0,0 +1,38 @@ +#!/usr/bin/nft -f +# ipv4/ipv6 Simple & Safe Firewall +# you can find examples in /usr/share/nftables/ + +table inet filter { + chain input { + type filter hook input priority 0; + + # allow established/related connections + ct state {established, related} accept + + # early drop of invalid connections + ct state invalid drop + + # allow from loopback + iifname lo accept + + # allow icmp + ip protocol icmp accept + ip6 nexthdr icmpv6 accept + + # allow ssh + tcp dport ssh accept + + # everything else + reject with icmpx type port-unreachable + } + chain forward { + type filter hook forward priority 0; + drop + } + chain output { + type filter hook output priority 0; + } + +} + +# vim:set ts=2 sw=2 et: Deleted: nftables.service =================================================================== --- nftables.service 2018-12-06 03:30:50 UTC (rev 341099) +++ nftables.service 2018-12-06 03:30:57 UTC (rev 341100) @@ -1,15 +0,0 @@ -[Unit] -Description=Netfilter Tables -Documentation=man:nft(8) -Wants=network-pre.target -Before=network-pre.target - -[Service] -Type=oneshot -ExecStart=/usr/bin/nft -f /etc/nftables.conf -ExecReload=/usr/bin/nft flush ruleset ';' include '"/etc/nftables.conf"' -ExecStop=/usr/bin/nft flush ruleset -RemainAfterExit=yes - -[Install] -WantedBy=multi-user.target Copied: nftables/repos/extra-x86_64/nftables.service (from rev 341099, nftables/trunk/nftables.service) =================================================================== --- nftables.service (rev 0) +++ nftables.service 2018-12-06 03:30:57 UTC (rev 341100) @@ -0,0 +1,15 @@ +[Unit] +Description=Netfilter Tables +Documentation=man:nft(8) +Wants=network-pre.target +Before=network-pre.target + +[Service] +Type=oneshot +ExecStart=/usr/bin/nft -f /etc/nftables.conf +ExecReload=/usr/bin/nft flush ruleset ';' include '"/etc/nftables.conf"' +ExecStop=/usr/bin/nft flush ruleset +RemainAfterExit=yes + +[Install] +WantedBy=multi-user.target