libipq0-1.8.7-1.1 >  A `pp9|\Cs μhA~czk}AuhLŸ󔹀gNH>UwEpBnu^6po0Mڪq9 ((ڂmyĬT5lB;+(!Al4Ue7 ɖVOeu: !>L͋|)B?S7n͇v҈࢕KDX$I:ȉv[6!)?4?k=BN%`VPG$.=N*c8c01e9d3f12b2a41de807f7e7c0c2801602c34f1c8c5914635a3bb36dc16f13eaff31a22ab0a74da85b410290e84fc7eeff9f08-`pp9|6mX-sy,_ڕd3(yLT^鳛{EZ>$TVPc\|+Sf@@?oΓ d7\+ē\u.=5 ԛs♟d%j9y#vɝGk"+_kW~ JJ|FscPTMڬ/3َ틂8WHm`LE ̚au-2˳t[`zW[::!UF̱.+h>p@?d   R .L bs      *4PX   (89@:>@FGHI X$Y0\H]P^lbxc!d{efluvw0x8y@zXhlrClibipq01.8.71.1Library to interface with the (old) ip_queue kernel mechanismThe Netfilter project provides a mechanism (ip_queue) for passing packets out of the stack for queueing to userspace, then receiving these packets back into the kernel with a verdict specifying what to do with the packets (such as ACCEPT or DROP). These packets may also be modified in userspace prior to reinjection back into the kernel. ip_queue/libipq is obsoleted by nf_queue/libnetfilter_queue!`psheep66)SUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND Artistic-2.0https://www.suse.com/System/Librarieshttps://netfilter.org/projects/iptables/linuxx86_64)ȡ`p`p98e32ebf76a209cf7dce02d0a49882b8fa9cdc87aec9c248bcb4ce2f9781d1cdlibipq.so.0.0.0rootrootrootrootiptables-1.8.7-1.1.src.rpmlibipq.so.0()(64bit)libipq0libipq0(x86-64)@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1`_@^א]]@]rJ@\"\9\[[ @[[s[CN@[@ZkZZu@YK@X6@Vs@VRjengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dekstreitova@suse.comkstreitova@suse.comjengelh@inai.dejengelh@inai.dekstreitova@suse.comjengelh@inai.dejengelh@inai.deastieger@suse.commchandras@suse.dejengelh@inai.dekukuk@suse.dematthias.gerstner@suse.commatthias.gerstner@suse.comjengelh@inai.dematthias.gerstner@suse.comjengelh@inai.dejengelh@inai.dejengelh@inai.de- Update to release 1.8.7 * iptables-nft: * Improved performance when matching on IP/MAC address prefixes if the prefix is byte-aligned. In ideal cases, this doubles packet processing performance. * Dump user-defined chains in lexical order. This way ruleset dumps become stable and easily comparable. * Avoid pointless table/chain creation. For instance, `iptables-nft -L` no longer creates missing base-chains.- Update to release 1.8.6 * iptables-nft had pointlessly added "bitwise" expressions to each IP address match, needlessly slowing down run-time performance (by 50% in worst cases). * iptables-nft-restore: Support basechain policy value of "-" (indicating to not change the chain's policy). * nft-translte: Fix translation of ICMP type "any" match.- Update to release 1.8.5 * IDLETIMER: Add alarm timer option * nft: CT: add translation for NOTRACK - Drop iptables-apply-mktemp-fix.patch (seemingly applied)- Update to release 1.8.4 * Fix for wrong counter format in `ebtables-nft-save -c` output. * Print typical iptables-save comments in arptables- and ebtables-save, too. * xt_owner: add --suppl-groups option * Remove support for /etc/xtables.conf * Restore support for "-4" and "-6" options in rule lines.- Add Conflicts with iptables-nft = 1.6.2 as during the update to iptables 1.8 ip6tables-restore-translate, ip6tables-translate, iptables-restore-translate and iptables-translate were moved from iptables-nft subpackage (now iptables-backend-nft) to the main package. So we need to add a conflict here otherwise we hit file conflicts error during the update.- add missing Provides/Obsoletes for the renamed package iptables-backend-nft (was iptables-nft)- Update to new upstream release 1.8.3 * ebtables: Fix rule listing with counters * ebtables-nft: Support user-defined chain policies - Remove 0001-include-extend-the-headers-conflict-workaround-to-in.patch 0001-include-fix-build-with-kernel-headers-before-4.2.patch (upstreamed)- Add 0001-include-fix-build-with-kernel-headers-before-4.2.patch, 0001-include-extend-the-headers-conflict-workaround-to-in.patch to fix build with older linux-glibc-devel. [boo#1132821]- Add iptables-1.8.2-dont_read_garbage.patch that fixes a situation where 'iptables -L' reads garbage from the struct as the kernel never filled it in the bugged case. This can lead to issues like mapping a few TiB of memory [bsc#1106751].- Update to new upstream release 1.8.2 * Fix incorrect handling of various targets and options in iptables-nft,ebtables-nft,arptables-nft.- Update to new upstream release 1.8.1 * New cgroup match revision with reduced memory footprint- note build-time dependency on libnftnl >= 1.1.1- Add missing update-alternatives dependency to Requires(post) section. If this is missing the package fails to install properly when it is used as build dependency.- Update to new upstream release 1.8.0 and snapshot 1.8.0.g75 * The ipv6 "srh" match can now match previous/next/last sid * CONNMARK target now supports bit-shifting for restore,set and save-mark. * DNAT now supports shifted portmap ranges. * iptables now comes in two backends: legacy and nft.- Use %license instead of %doc [bsc#1082318]- Fix ethertypes ownership, should be %exclude, not %ghost.- Resolve conflict with ebtables and obtain ethertypes from new netcfg minor version. FATE#320520- Update to new upstream release 1.6.2 * add support for the "srh" match * add randomize-full for the "MASQUERADE" target * add rate match mode to the "hashlimit" match- Add iptables-batch-lock.patch: Fix a locking issue of iptables-batch which can cause it to spuriously fail when other programs modify the iptables rules in parallel (bnc#1045130). This can especially affect SuSEfirewall2 during startup.- Update to new upstream release 1.6.1 * add support for hashlimit rev 2 for higher pps rates * add support for cgroup2 path matching * translation program for nft- Update to final release 1.6.0 * Only a build fix, no new significant changes.- Update to new snapshot v1.4.21-367-g9763347 [1.6.0~] * -m ah/esp/rt: restore matching "any SPI id" by default (they unexpectedly defaulted to --spi 0 rather than --spi ALL) * -m cgroup: new module * -m dst: make ! --dst-len work * -m ipcomp: new module * -m socket: add --restore-skmark option * -j CT: add support for new zone options * -j REJECT: add missing ICMPv6 codes * -j TEE: make it possible to delete rules with -D ... -j * -j SNAT/DNAT: add randomize-full support/sbin/ldconfig/sbin/ldconfigsheep66 16179571501.8.7-1.11.8.7-1.1libipq.so.0libipq.so.0.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/72499241369ed9e387d77110c1a200d9-iptablescpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ae4daa25fc9babb7698aa1792e95b48cb150f1e9, strippedPRRRRR׷2L܄<؆utf-87427cb9067c4f18709acb5108f7307d63d57daf214b917d50af2ed19b8e699c0?7zXZ !t/+g ] cr$x#ỨnC4UUҁն ˱ U8T4|֞R~XdU'sS.ƭ#Uv.i/CIl-w:#]TOy̩ݭ]zN1b\|Hׂ+ːͮBo]B@4eˍPQ.,deQ·H8L)&s$g/$50Hߤ E3>p̍?de_@+mA,McjVUn2\̺$J:&j" uhwgv Liu6jm[ 6(BsaL$Q>ޣ'ng5 5S' jh՗wWBE}8ۿR:mYf>OZ&K6cOu1) w0W~}/c$q6N=k$Z(܊@t2:]ƿdZ YT՘ۖH@pCyU4Rve6*L]ED_Hѥl"vcXKfiq~o.܁*]AC ZjEp 5Gd'Au 6^֛$tu=l1{t_Itdwjb\j)AON]L- uRjCA0j+4/='5ۇi z6#thujH7pn9 uvtS<Њ_)aUC C+|hzl#G/eyA!Zp#=O2j5!gq:]]E'5XM\d7Swy<$;ߢղi)f>YM7t)Dv\[Lm'WKSO9d f %( r9ۖ-i8JtbGs=X0mQE0`C =B6{M |j|u*`؊xDbKoTtE=|ξZOY}a’Zxf䬢QsaDƙUY1lݷ :5>6*ъwTɐˈw qh3wE[V%aVj@'=LuugGc쏪wUu^KL6_RrKcO'9+}.ϙO41 e;Xh}DC6XFOyTl_! 36C͡&0XPݡq;g '?5Q|A5F cAgl66m}LJVV/vیC4ADNڬYY懍b'b'K0_/o6W Kh0up;R+Mě'mf@ [G:gil[8@z8duEf2m7X#( LYK9AÉM ? 0ҝi4ΐc6ȲݯJH!ǘ|xO,?aKV]Ur8F^L@PIZp l[G;<Sȃ 7WEG`㵶q;inR1lbr9xT3f2>~)d*2$Ia(vtBoti48K:jXWV*c T;}QG1Vl}d/n؏0iVҕeEy)K qRHȠve*"SWfn2m$e "0oQv &:囍fuŊX<<*_hL=cн}Fjg]sK\E|@vL(զcK3&Nq+IQg6F՜{*;ަU3(N9 ΍Ti3: ~0`l:/LE@ }HZƴ*döD3C;J/7u]>ZЙӍ"X*,r. cKMdf`|1]oV# @. mTUrۗm ԐƦcj`/xT n[$!͋}O{``{0בW8f[jh M(g3@tVsW 1C~, v!Hâ&iyY0#w$=/qpF+VL.3omW?̕4wqu2URh%$syW ޅV9% YZ