libipq0-1.8.7-1.1 >
A `pp9|c ?
_K0@H[ Ve Tsq&^{kIvCpZmJ7sF%@HD
H)תaLZ ?\#D
syv]wj-I+0
$<MK,:;t`
s;fcLkƾL'F:,{F*P|7249670d30c15568a25e55ec65f9cd72ce9b954f 4522795aa9a53b641ba862a6f4e4e38cdcec1aa0f6905c031ec1e0a9cf3e4b2c -T `pp9|w :8jiͫ,$;gW>D
Z#v> Y ca65zȏi&ؘ4iǤsĂ躖Bc7 _>$pbTm4U8{,iz˄Sܗ8kj B1Ez#ȩ-VMFtY P\lG,P)3i^tteGly`x2.LC/Ңz. :,D0 IByx)C1V>y * > p @ ? d
R 2 P f w
* 4 P X
( 8 9 : > @ F G H I X Y \ $ ] , ^ H b T c d W e \ f _ l a u t v | w x y z 4 D H N C libipq0 1.8.7 1.1 Library to interface with the (old) ip_queue kernel mechanism The Netfilter project provides a mechanism (ip_queue) for passing
packets out of the stack for queueing to userspace, then receiving
these packets back into the kernel with a verdict specifying what to
do with the packets (such as ACCEPT or DROP). These packets may also
be modified in userspace prior to reinjection back into the kernel.
ip_queue/libipq is obsoleted by nf_queue/libnetfilter_queue! `ps390zp3a )HSUSE Linux Enterprise 15 SUSE LLC GPL-2.0-only AND Artistic-2.0 https://www.suse.com/ System/Libraries https://netfilter.org/projects/iptables/ linux s390x )H `p`p 30865ae89a50b8c45a850ea895dcc2cdf4cf38b1a44401bd56105db579cb6914 libipq.so.0.0.0 root root root root iptables-1.8.7-1.1.src.rpm libipq.so.0()(64bit) libipq0 libipq0(s390-64) @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.4)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 `_@^א]]@]rJ@\"\9\[[
@[[s[CN@[@ZkZZu@YK@X6@Vs@VRjengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de kstreitova@suse.com kstreitova@suse.com jengelh@inai.de jengelh@inai.de kstreitova@suse.com jengelh@inai.de jengelh@inai.de astieger@suse.com mchandras@suse.de jengelh@inai.de kukuk@suse.de matthias.gerstner@suse.com matthias.gerstner@suse.com jengelh@inai.de matthias.gerstner@suse.com jengelh@inai.de jengelh@inai.de jengelh@inai.de - Update to release 1.8.7
* iptables-nft:
* Improved performance when matching on IP/MAC address prefixes
if the prefix is byte-aligned. In ideal cases, this doubles
packet processing performance.
* Dump user-defined chains in lexical order. This way ruleset
dumps become stable and easily comparable.
* Avoid pointless table/chain creation. For instance,
`iptables-nft -L` no longer creates missing base-chains. - Update to release 1.8.6
* iptables-nft had pointlessly added "bitwise" expressions to
each IP address match, needlessly slowing down run-time
performance (by 50% in worst cases).
* iptables-nft-restore: Support basechain policy value of "-"
(indicating to not change the chain's policy).
* nft-translte: Fix translation of ICMP type "any" match. - Update to release 1.8.5
* IDLETIMER: Add alarm timer option
* nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied) - Update to release 1.8.4
* Fix for wrong counter format in `ebtables-nft-save -c` output.
* Print typical iptables-save comments in arptables- and
ebtables-save, too.
* xt_owner: add --suppl-groups option
* Remove support for /etc/xtables.conf
* Restore support for "-4" and "-6" options in rule lines. - Add Conflicts with iptables-nft = 1.6.2 as during the update to
iptables 1.8 ip6tables-restore-translate, ip6tables-translate,
iptables-restore-translate and iptables-translate were moved from
iptables-nft subpackage (now iptables-backend-nft) to the main
package. So we need to add a conflict here otherwise we hit file
conflicts error during the update. - add missing Provides/Obsoletes for the renamed package
iptables-backend-nft (was iptables-nft) - Update to new upstream release 1.8.3
* ebtables: Fix rule listing with counters
* ebtables-nft: Support user-defined chain policies
- Remove 0001-include-extend-the-headers-conflict-workaround-to-in.patch
0001-include-fix-build-with-kernel-headers-before-4.2.patch
(upstreamed) - Add 0001-include-fix-build-with-kernel-headers-before-4.2.patch,
0001-include-extend-the-headers-conflict-workaround-to-in.patch
to fix build with older linux-glibc-devel. [boo#1132821] - Add iptables-1.8.2-dont_read_garbage.patch that fixes a situation
where 'iptables -L' reads garbage from the struct as the kernel
never filled it in the bugged case. This can lead to issues like
mapping a few TiB of memory [bsc#1106751]. - Update to new upstream release 1.8.2
* Fix incorrect handling of various targets and options in
iptables-nft,ebtables-nft,arptables-nft. - Update to new upstream release 1.8.1
* New cgroup match revision with reduced memory footprint - note build-time dependency on libnftnl >= 1.1.1 - Add missing update-alternatives dependency to Requires(post)
section. If this is missing the package fails to install properly
when it is used as build dependency. - Update to new upstream release 1.8.0 and snapshot 1.8.0.g75
* The ipv6 "srh" match can now match previous/next/last sid
* CONNMARK target now supports bit-shifting for restore,set
and save-mark.
* DNAT now supports shifted portmap ranges.
* iptables now comes in two backends: legacy and nft. - Use %license instead of %doc [bsc#1082318] - Fix ethertypes ownership, should be %exclude, not %ghost. - Resolve conflict with ebtables and obtain ethertypes from new netcfg minor
version. FATE#320520 - Update to new upstream release 1.6.2
* add support for the "srh" match
* add randomize-full for the "MASQUERADE" target
* add rate match mode to the "hashlimit" match - Add iptables-batch-lock.patch: Fix a locking issue of
iptables-batch which can cause it to spuriously fail when other
programs modify the iptables rules in parallel (bnc#1045130).
This can especially affect SuSEfirewall2 during startup. - Update to new upstream release 1.6.1
* add support for hashlimit rev 2 for higher pps rates
* add support for cgroup2 path matching
* translation program for nft - Update to final release 1.6.0
* Only a build fix, no new significant changes. - Update to new snapshot v1.4.21-367-g9763347 [1.6.0~]
* -m ah/esp/rt: restore matching "any SPI id" by default
(they unexpectedly defaulted to --spi 0 rather than --spi ALL)
* -m cgroup: new module
* -m dst: make ! --dst-len work
* -m ipcomp: new module
* -m socket: add --restore-skmark option
* -j CT: add support for new zone options
* -j REJECT: add missing ICMPv6 codes
* -j TEE: make it possible to delete rules with -D ... -j
* -j SNAT/DNAT: add randomize-full support /sbin/ldconfig /sbin/ldconfig s390zp3a 1617957401 1.8.7-1.1 1.8.7-1.1 libipq.so.0 libipq.so.0.0.0 /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/72499241369ed9e387d77110c1a200d9-iptables cpio xz 5 s390x-suse-linux ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=368462469a777f2c1340c1db6def990561b667a6, stripped P R R R R d8:UE utf-8 1ec867c9309ac27c70dee2d2a0175f3ef4d3659e3f6b96bf30a4be8e9062e126 ? 7zXZ
! t/*
F]
cr$x#vƊNr 9@Oai(bZ{3(HQ5i
Z5HvZS٣t:\ q-8A%38MGaeͫ@5d܄s]o"I\= }Ƃ' i HXIb7H:X /657EN
BdWy6j."I !TZiKp 6 ؟Sr?u ;vf^jE6ȍJ[\}rpsMUQhH]TF?
Pa>/$O\>&d^Cտ@W[6Ap~Mb9+jQ5EOZtlΐdއA? &9ȥ+-[qZTqiK5b
y5aQ)\Sݭ<#3fG`SA$ۣ{Bvm 1i:UabߍVlx̢x6 J+; M8Z2xm{=i(\" ETh.EIkl) 4f^[
뙹ejAA17tA>t
B]5E)
;cX;1Y+&C9
" aZɟ^*X|e6A2":nt}&u)#a5y[1B!~p cdHԙ±F-kYqrP]_pNШ(i̊~Nk% ɧpi"g[Vј&PܵTX퍙8)
A| btQvV P7T(
'NN/JB??#45%n]+PMR[! &j2ouf34پh5ڕK^XG:ͧ3k_r6R
gY,rw뫍.#Q-⼛2!9RF\vN.h OPS-QhYg!n0:/|h#hlځ_ ZH(2 ^f!,`./ F m/AyX*^ l Z^:2ksUSi)/__@FUJhc{
l+R==bkB{-* 1
-_r
f ş?E+e2.88*[L\\ ` n3U/!:$kjm(
EY#} UҾ3ZU}a ҸQILMAx
`? y 3@w:" 5<' IP +tk6 ӿ t%aԥÞ+Id3ކ߮> J砈(;Sj?Yn]"ljPSk!Y&ؼ&$]4!nv(\8@7c終נ/
"?i4%e+ήw; -֕RP $Ci0 X/A.6
dP
oKy
z" Z!ahu~Zv $/Zy/QT8r; xf4W鸖
SgqDXiM"HKDD\:<.π_!e\0oc)
y]P[VI-ҔyPUqmTd/
Jp18Z@;EЭFsd6[u8f@#R2Fb
+0*o:sSkxcྋˣ0B̬
`ѷv9|dg:1ݒ<
b'
ݞ0