SPECS/iptables.spec:45: W: unversioned-explicit-provides userspace-ipfilter SPECS/iptables.spec:51: W: unversioned-explicit-provides %{name}-ipv6 iptables.src:45: W: unversioned-explicit-provides userspace-ipfilter iptables.src:51: W: unversioned-explicit-provides %{name}-ipv6 The specfile contains an unversioned Provides: token, which will match all older, equal, and newer versions of the provided thing. This may cause update problems and will make versioned dependencies, obsoletions and conflicts on the provided thing useless -- make the Provides versioned if possible. SPECS/iptables.spec:90: W: unversioned-explicit-obsoletes %{mklibname SPECS/iptables.spec:90: W: unversioned-explicit-obsoletes iptables SPECS/iptables.spec:116: W: unversioned-explicit-obsoletes %{mklibname SPECS/iptables.spec:116: W: unversioned-explicit-obsoletes iptables SPECS/iptables.spec:142: W: unversioned-explicit-obsoletes %{mklibname SPECS/iptables.spec:142: W: unversioned-explicit-obsoletes iptables SPECS/iptables.spec:168: W: unversioned-explicit-obsoletes %{mklibname SPECS/iptables.spec:168: W: unversioned-explicit-obsoletes iptables iptables.src:90: W: unversioned-explicit-obsoletes %{mklibname iptables.src:90: W: unversioned-explicit-obsoletes iptables iptables.src:116: W: unversioned-explicit-obsoletes %{mklibname iptables.src:116: W: unversioned-explicit-obsoletes iptables iptables.src:142: W: unversioned-explicit-obsoletes %{mklibname iptables.src:142: W: unversioned-explicit-obsoletes iptables iptables.src:168: W: unversioned-explicit-obsoletes %{mklibname iptables.src:168: W: unversioned-explicit-obsoletes iptables The specfile contains an unversioned Obsoletes: token, which will match all older, equal and newer versions of the obsoleted thing. This may cause update problems, restrict future package/provides naming, and may match something it was originally not inteded to match -- make the Obsoletes versioned if possible. iptables.src: W: spelling-error %description -l en_US firewalling -> fire walling, fire-walling, firewall iptables.x86_64: W: spelling-error %description -l en_US firewalling -> fire walling, fire-walling, firewall The value of this tag appears to be misspelled. Please double-check. iptables.src: W: source-or-patch-not-compressed bz2 iptables-IFWLOG_extension.diff iptables.src: W: source-or-patch-not-compressed bz2 iptables-psd.diff iptables.src: W: source-or-patch-not-compressed bz2 iptables-1.2.8-libiptc.h.patch iptables.src: W: source-or-patch-not-compressed bz2 iptables-imq.diff A source archive or file in your package is not compressed using the bz2 compression method (doesn't have the bz2 extension). iptables.x86_64: W: service-default-enabled /etc/rc.d/init.d/ip6tables iptables.x86_64: W: service-default-enabled /etc/rc.d/init.d/iptables The service is enabled by default after "chkconfig --add"; for security reasons, most services should not be. Use "-" as the default runlevel in the init script's "chkconfig:" line and/or remove the "Default-Start:" LSB keyword to fix this if appropriate for this service. iptables.x86_64: W: self-obsoletion iptables-ipv6 < 1.4.1.1-0.5 obsoletes iptables-ipv6 The package obsoletes itself. This is known to cause errors in various tools and should thus be avoided, usually by using appropriately versioned Obsoletes and/or Provides and avoiding unversioned ones. SPECS/iptables.spec: W: patch-not-applied Patch0: iptables-1.2.8-libiptc.h.patch iptables.src: W: patch-not-applied Patch0: iptables-1.2.8-libiptc.h.patch A patch is included in your package but was not applied. Refer to the patches documentation to see what's wrong. SPECS/iptables.spec:28: W: non-standard-group System/Kernel and hardware SPECS/iptables.spec:62: W: non-standard-group System/Libraries SPECS/iptables.spec:73: W: non-standard-group Development/C SPECS/iptables.spec:89: W: non-standard-group System/Libraries SPECS/iptables.spec:100: W: non-standard-group Development/C SPECS/iptables.spec:115: W: non-standard-group System/Libraries SPECS/iptables.spec:126: W: non-standard-group Development/C SPECS/iptables.spec:141: W: non-standard-group System/Libraries SPECS/iptables.spec:152: W: non-standard-group Development/C SPECS/iptables.spec:167: W: non-standard-group System/Libraries SPECS/iptables.spec:178: W: non-standard-group Development/C iptables.src: W: non-standard-group System/Kernel and hardware iptables.x86_64: W: non-standard-group System/Kernel and hardware The value of the Group tag in the package is not valid. Valid groups are: "Amusements/Games", "Amusements/Graphics", "Applications/Archiving", "Applications/Communications", "Applications/Databases", "Applications/Editors", "Applications/Emulators", "Applications/Engineering", "Applications/File", "Applications/Internet", "Applications/Multimedia", "Applications/Productivity", "Applications/Publishing", "Applications/System", "Applications/Text", "Development/Debug", "Development/Debuggers", "Development/Languages", "Development/Libraries", "Development/System", "Development/Tools", "Documentation", "System Environment/Base", "System Environment/Daemons", "System Environment/Kernel", "System Environment/Libraries", "System Environment/Shells", "Unspecified", "User Interface/Desktops", "User Interface/X", "User Interface/X Hardware Support". iptables.src: W: no-signature iptables.x86_64: W: no-signature You have to include your pgp or gpg signature in your package. For more information on signatures, please refer to www.gnupg.org. iptables.src: W: no-packager-tag iptables.x86_64: W: no-packager-tag There is no Packager tag in your package. You have to specify a packager using the Packager tag. Ex: Packager: John Doe . iptables.x86_64: W: no-manual-page-for-binary xtables-multi iptables.x86_64: W: no-manual-page-for-binary ip6tables-multi iptables.x86_64: W: no-manual-page-for-binary iptables-multi Each executable in standard binary directories should have a man page. SPECS/iptables.spec:254: W: mixed-use-of-spaces-and-tabs (spaces: line 254, tab: line 23) iptables.src:62: W: mixed-use-of-spaces-and-tabs (spaces: line 62, tab: line 23) The specfile mixes use of spaces and tabs for indentation, which is a cosmetic annoyance. Use either spaces or tabs for indentation, not both. iptables.x86_64: W: missing-lsb-keyword Required-Start in /etc/rc.d/init.d/ip6tables iptables.x86_64: W: missing-lsb-keyword Required-Stop in /etc/rc.d/init.d/ip6tables iptables.x86_64: W: missing-lsb-keyword Default-Stop in /etc/rc.d/init.d/ip6tables iptables.x86_64: W: missing-lsb-keyword Required-Start in /etc/rc.d/init.d/iptables iptables.x86_64: W: missing-lsb-keyword Required-Stop in /etc/rc.d/init.d/iptables iptables.x86_64: W: missing-lsb-keyword Default-Stop in /etc/rc.d/init.d/iptables The package contains an init script that does not contain one of the LSB init script comment block convention keywords that are recommendable for all init scripts. If there is nothing to add to a keyword's value, include the keyword in the script with an empty value. Note that as of version 3.2, the LSB specification does not mandate presence of any keywords. iptables.x86_64: W: manpage-not-compressed bz2 /usr/share/man/man8/ip6tables-restore.8.xz iptables.x86_64: W: manpage-not-compressed bz2 /usr/share/man/man8/iptables-restore.8.xz iptables.x86_64: W: manpage-not-compressed bz2 /usr/share/man/man1/iptables-xml.1.xz iptables.x86_64: W: manpage-not-compressed bz2 /usr/share/man/man8/iptables.8.xz iptables.x86_64: W: manpage-not-compressed bz2 /usr/share/man/man8/ip6tables-save.8.xz iptables.x86_64: W: manpage-not-compressed bz2 /usr/share/man/man8/ip6tables.8.xz iptables.x86_64: W: manpage-not-compressed bz2 /usr/share/man/man8/iptables-save.8.xz This manual page is not compressed with the bz2 compression method (does not have the bz2 extension). If the compression does not happen automatically when the package is rebuilt, make sure that you have the appropriate rpm helper and/or config packages for your target distribution installed and try rebuilding again; if it still does not happen automatically, you can compress this file in the %install section of the spec file. SPECS/iptables.spec:201: W: macro-in-comment %patch0 SPECS/iptables.spec:204: W: macro-in-comment %{SOURCE100} SPECS/iptables.spec:276: W: macro-in-comment %{buildroot} SPECS/iptables.spec:276: W: macro-in-comment %{_libdir} SPECS/iptables.spec:277: W: macro-in-comment %{buildroot} SPECS/iptables.spec:277: W: macro-in-comment %{_libdir} SPECS/iptables.spec:416: W: macro-in-comment %{_datadir} SPECS/iptables.spec:449: W: macro-in-comment %{_libdir} SPECS/iptables.spec:450: W: macro-in-comment %{_libdir} iptables.src:201: W: macro-in-comment %patch0 iptables.src:204: W: macro-in-comment %{SOURCE100} iptables.src:276: W: macro-in-comment %{buildroot} iptables.src:276: W: macro-in-comment %{_libdir} iptables.src:277: W: macro-in-comment %{buildroot} iptables.src:277: W: macro-in-comment %{_libdir} iptables.src:416: W: macro-in-comment %{_datadir} iptables.src:449: W: macro-in-comment %{_libdir} iptables.src:450: W: macro-in-comment %{_libdir} There is a unescaped macro after a shell style comment in the specfile. Macros are expanded everywhere, so check if it can cause a problem in this case and escape the macro with another leading % if appropriate. iptables.x86_64: W: install-file-in-docs /usr/share/doc/iptables/INSTALL A file whose name suggests that it contains installation instructions is included in the package. Such instructions are often not relevant for already installed packages; if this is the case for this file and it does not contain any information that is of interest after the package has been built and installed, do not include the file in the binary package. iptables.x86_64: W: incoherent-version-in-changelog 1.4.11.1-2.mga2 1.4.12.1-1.mga2 The latest entry in %changelog contains a version identifier that is not coherent with the epoch:version-release tuple of the package. 2 packages and 1 specfiles checked; 0 errors, 86 warnings.