diff options
Diffstat (limited to 'core')
| -rw-r--r-- | core/dhcpcd/PKGBUILD | 8 | ||||
| -rw-r--r-- | core/iptables/PKGBUILD | 16 | ||||
| -rw-r--r-- | core/iptables/ip6tables.service | 1 | ||||
| -rw-r--r-- | core/iptables/iptables.service | 1 | ||||
| -rw-r--r-- | core/iptables/simple_firewall.rules | 2 |
5 files changed, 16 insertions, 12 deletions
diff --git a/core/dhcpcd/PKGBUILD b/core/dhcpcd/PKGBUILD index 246563659..aa41b1089 100644 --- a/core/dhcpcd/PKGBUILD +++ b/core/dhcpcd/PKGBUILD @@ -1,11 +1,11 @@ -# $Id: PKGBUILD 171912 2012-11-23 13:37:09Z ronald $ +# $Id: PKGBUILD 174850 2013-01-07 21:57:19Z ronald $ # Maintainer: Ronald van Haren <ronald.archlinux.org> # Contributor: Tom Killian <tom.archlinux.org> # Contributor: Judd Vinet <jvinet.zeroflux.org> pkgname=dhcpcd -pkgver=5.6.3 -pkgrel=2 +pkgver=5.6.4 +pkgrel=1 pkgdesc="RFC2131 compliant DHCP client daemon" url="http://roy.marples.name/projects/dhcpcd/" arch=('i686' 'x86_64') @@ -16,7 +16,7 @@ backup=('etc/conf.d/dhcpcd' 'etc/dhcpcd.conf') options=('emptydirs') # We Need the Empty /var/lib/dhcpcd Directory source=("http://roy.marples.name/downloads/$pkgname/$pkgname-$pkgver.tar.bz2" \ 'dhcpcd.conf.d' 'dhcpcd_.service' 'dhcpcd.service') -sha1sums=('d64b589d15821aa5851fda81078183cc61a3e45a' +sha1sums=('18a09d8fabf926e5d32bd6315b40d77247b11596' 'b67b9ce6a2faaca75fea356966a16be2283b7db0' 'd5304eb00828d4ee2fd879addce473ea09c47635' 'e49e01041f831281a1cd0c97ca21204e0aa07fda') diff --git a/core/iptables/PKGBUILD b/core/iptables/PKGBUILD index 9d9328d81..0dcc6e6c4 100644 --- a/core/iptables/PKGBUILD +++ b/core/iptables/PKGBUILD @@ -1,9 +1,9 @@ -# $Id: PKGBUILD 170004 2012-10-30 23:08:48Z thomas $ +# $Id: PKGBUILD 174851 2013-01-07 21:57:24Z ronald $ # Maintainer: Ronald van Haren <ronald.archlinux.org> # Contributor: Thomas Baechler <thomas@archlinux.org> pkgname=iptables -pkgver=1.4.16.2 +pkgver=1.4.16.3 pkgrel=1 pkgdesc='Linux kernel packet control tool' arch=('i686' 'x86_64') @@ -28,11 +28,11 @@ source=("http://www.iptables.org/projects/iptables/files/${pkgname}-${pkgver}.ta ip6tables.service iptables-flush) backup=(etc/conf.d/iptables) -sha1sums=('6fd368c4f6c31752011a716cccd951601157a493' +sha1sums=('819949fdf4276a04c5061b82898b515f139b0117' '5bb6fa526665cdd728c26f0f282f5a51f220cf88' '2db68906b603e5268736f48c8e251f3a49da1d75' '83b3363878e3660ce23b2ad325b53cbd6c796ecf' - '9907f9e815592837abc7fa3264a401567b7606ab' + 'f085a71f467e4d7cb2cf094d9369b0bcc4bab6ec' 'cdb830137192bbe002c6d01058656bd053ed0ddd' 'd9f9f06b46b4187648e860afa0552335aafe3ce4' 'c45b738b5ec4cfb11611b984c21a83b91a2d58f3' @@ -40,9 +40,10 @@ sha1sums=('6fd368c4f6c31752011a716cccd951601157a493' '7db53bb882f62f6c677cc8559cff83d8bae2ef73' 'ebbd1424a1564fd45f455a81c61ce348f0a14c2e' '44626980a52e49f345a0b1e1ca03060f3a35763c' - '5c4eb4ea88c302e8ff98f435a11dd59b00f4d8b9' - 'f1f16f44c6a5547b6f251d13007fe6585761e8b0' + '5f2e76985a751f635a45612565a6e1bc9547398a' + 'fe6bbe214b3a13bd084f62a8ee9631fd8326c464' 'e7abda09c61142121b6695928d3b71ccd8fdf73a') + build() { cd "${srcdir}/${pkgname}-${pkgver}" @@ -72,8 +73,9 @@ package() { install -D -m644 simple_firewall.rules "${pkgdir}"/etc/iptables/simple_firewall.rules install -D -m644 iptables.conf.d "${pkgdir}"/etc/conf.d/iptables - mkdir -p "${pkgdir}"/var/lib/iptables + mkdir -p "${pkgdir}"/var/lib/{iptables,ip6tables} install -m644 empty-{filter,mangle,nat,raw,security}.rules "${pkgdir}"/var/lib/iptables + install -m644 empty-{filter,mangle,nat,raw,security}.rules "${pkgdir}"/var/lib/ip6tables # install systemd files install -Dm644 ${srcdir}/iptables.service ${pkgdir}/usr/lib/systemd/system/iptables.service diff --git a/core/iptables/ip6tables.service b/core/iptables/ip6tables.service index 9a695f31e..60d76becf 100644 --- a/core/iptables/ip6tables.service +++ b/core/iptables/ip6tables.service @@ -4,6 +4,7 @@ Description=IPv6 Packet Filtering Framework [Service] Type=oneshot ExecStart=/usr/sbin/ip6tables-restore /etc/iptables/ip6tables.rules +ExecReload=/usr/sbin/ip6tables-restore /etc/iptables/ip6tables.rules ExecStop=/usr/lib/systemd/scripts/iptables-flush 6 RemainAfterExit=yes diff --git a/core/iptables/iptables.service b/core/iptables/iptables.service index 3084f53b7..eb1a967f3 100644 --- a/core/iptables/iptables.service +++ b/core/iptables/iptables.service @@ -4,6 +4,7 @@ Description=Packet Filtering Framework [Service] Type=oneshot ExecStart=/usr/sbin/iptables-restore /etc/iptables/iptables.rules +ExecReload=/usr/sbin/iptables-restore /etc/iptables/iptables.rules ExecStop=/usr/lib/systemd/scripts/iptables-flush RemainAfterExit=yes diff --git a/core/iptables/simple_firewall.rules b/core/iptables/simple_firewall.rules index e1604cc36..63426b083 100644 --- a/core/iptables/simple_firewall.rules +++ b/core/iptables/simple_firewall.rules @@ -3,7 +3,7 @@ :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -p icmp -j ACCEPT --A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT +-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -p tcp -j REJECT --reject-with tcp-reset -A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable |