** Description changed:
- The latest manual sync introduced build deps which are not in main, and
- therefore dnsmasq is blocked in dep-wait. Please evaluate if a MIR
- needs to be raised, or if we need to carry a delta removing them.
+ 1. Availability - already packaged & builds in Ubuntu universe & Debian
+ stable since 2006
+
+ 2. Rationale -
+ Debian enabled this optional feature when dnsmasq 2.58 was packaged. We are
currently in sync with Debian dnsmasq.
+
+ From dnsmasq 2.58 changelog. :
+
+ Add support for Linux conntrack connection marking. If
+ enabled with --conntrack, the connection mark for incoming
+ DNS queries will be copied to the outgoing connections
+ used to answer those queries. This allows clever firewall
+ and accounting stuff. Only available if dnsmasq is
+ compiled with HAVE_CONNTRACK and adds a dependency on
+ libnetfilter-conntrack. Thanks to Ed Wildgoose for the
+ initial idea, testing and sponsorship of this function.
+
+ 3. Security - There are no known security bugs:
+ https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=conntrack (These appear to
refer to the Linux kernel itself. libnetfilter-conntrack has only existed since
2005.)
+
+ 4. QA -
+ https://bugs.launchpad.net/ubuntu/+source/libnetfilter-conntrack
+
http://bugs.debian.org/cgi-bin/pkgreport.cgi?repeatmerged=no&src=libnetfilter-conntrack
+
http://bugzilla.netfilter.org/buglist.cgi?quicksearch=product%3A%22netfilter%2Fiptables%22
(it's a bit confusing how this bugzilla works)
+
+ 5. UI - N/A
+
+ 6. Dependencies:
https://bazaar.launchpad.net/+branch/ubuntu/libnetfilter-conntrack/view/head:/debian/control
+ All dependencies are already in main
+
+ 7. Standards compliant 3.9.1
+
+ 8. Maintenance - We are currently in sync with Debian
+
+ Original bug report
+ ===================
+ The latest manual sync introduced build deps which are not in main, and
therefore dnsmasq is blocked in dep-wait. Please evaluate if a MIR needs to be
raised, or if we need to carry a delta removing them.
libnetfilter-conntrack: libnetfilter-conntrack-dev libnetfilter-
conntrack3 libnetfilter-conntrack3-dbg
Thanks.
** Summary changed:
- [MIR] libnetfilter-conntrack
+ [mir] libnetfilter-conntrack
** Changed in: libnetfilter-conntrack (Ubuntu)
Status: Confirmed => New
** Changed in: libnetfilter-conntrack (Ubuntu)
Assignee: Jeremy Bicha (jbicha) => (unassigned)
** Changed in: dnsmasq (Ubuntu)
Assignee: Jeremy Bicha (jbicha) => (unassigned)
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to dnsmasq in Ubuntu.
https://bugs.launchpad.net/bugs/875818
Title:
[mir] libnetfilter-conntrack
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/875818/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
