python3-nftables-0.9.8-150300.3.3.1 >  A b{`Gp9|,UH(%UޢG|ȇHIF'CS꿜1D :vӮ 5+hרݨLϗ]j) @,kc7뇴[&dӲI \ Jj06 QJ_lFER{@4W^D BfV "7 8_2G7M)!:*PWd[e)yNt0M)V6d1b508bdf552f879086d24fa0dc3fb743eff286e1ce3cfe07062525d2f1a90d7ab0341470c2218cdd74eb46c807becf4f48de472D0b{`Gp9|u;z?V!۔ +Vvx؉ [0n$a;`̒lu og짢xܸx{քjh[&IjdIE.doV"Qt/&-vt^S-7s_w+Y ީЭ̄$Az{sl?\5Cpeu.KLx -#cdy488̮rU nFq?s"+bvWv$x,>p>'?'d & Ddhtx !,L \ l   <d(89:F"G"H#I#4X#<Y#D\#l]#^$b$c%>d%e%f%l%u%v&w&Tx&ty&z&&&&'Cpython3-nftables0.9.8150300.3.3.1Python interface for nftablesA Python module for nftables.b{_ibs-arm-2rASUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/Development/Languages/Pythonhttps://netfilter.org/projects/nftables/linuxaarch64o5n8YA큤A큤b{_b{_` eb{_b{_b{_` e` e008fdafe301a4865af9a6fac1b3b3033fb1136e0f1d4ac14d309e9e6cecfa569311e5687d5aff2f97900bca92c7d768d1cb5711f31f0fb13816dba22eb3b633716a2d69c7927a962598af96332ce123d2a67dc04375481d813cab8def4fd9700821affbf7b2e9cc8cd6a0dfd228a66eb13cbc62670a67488098c8c11463dcb09ceaa498a540861c56992f2d709dc41f0e807ada913bfb403ce72c20d47049b49c0f3ea8eba4398c730990b1d25fd82f86316ab606fee8e6ed71151ceb278a870rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootnftables-0.9.8-150300.3.3.1.src.rpmpython3-nftablespython3-nftables(aarch-64)@    python(abi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.63.0.4-14.6.0-14.0-15.2-14.14.3bo`_ ^@^ۅ@^@^@]7@]N@]Z@\C@[@ZZ@Z@Zu@Z]@YXY@WPU@U`kTmatthias.gerstner@suse.comjengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.destefan.bruens@rwth-aachen.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.demrueckert@suse.dejengelh@inai.de- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare crashes that could occur e.g. in firewalld (bsc#1197606).- Update to release 0.9.8 * Complete support for matching ICMP header content fields. * Added raw tcp option match support. * Added ability to check for the presence of any tcp option. * Support for rejecting traffic from the ingress chain.- Update to release 0.9.7 * Support for implicit chains * Support for ingress inet chains * Support for reject from prerouting chain * Support for --terse option in json * Support for the reset command with json- Update to release 0.9.6 * Fix two ASAN runtime errors- Update to release 0.9.5 * Support for set counters. * Support for restoring set element counters via nft -f. * Counter support for flowtables. * typeof concatenations support for sets. * Support for concatenated ranges in anonymous sets. * Allow to reject packets with 802.1q from the bridge family. * Support for matching on the conntrack ID. - Drop anonset-crashfix.patch (upstream solved differently)- Add anonset-crashfix.patch [boo#1171321]- Update to release 0.9.4 * Add a helper for concat expression handling. * Add "typeof" build/parse/print support.- Add json, python [boo#1158723]- Update to release 0.9.3 * meta: Introduce new conditions "time", "day" and "hour". * src: add ability to set/get secmarks to/from connection. * flowtable: add support for named flowtable listing. * flowtable: add support for delete command by handle. * json: add support for element deletion. * Add `-T` as the short option for `--numeric-time`. * meta: add ibrpvid and ibrvproto support- Update to new upstream release 0.9.2 * Transport header port matching, e.g. "th dport 53" * Support for matching on IPv4 options * Support for synproxy- Remove unused dblatex BuildRequires, only needed for the optional and disabled PDF generation (same contents as shipped manpage).- Update to new upstream release 0.9.0 * Support to check if packet matches an existing socket. * Support to limit number of active connections by arbitrary criteria, such as ip addresses, networks, conntrack zones or any combination thereof. * Added support for "audit" logging.- Update to new upstream release 0.8.5 * support to add/insert a rule at a given index position * meter statement now supports a configureable upper max size * timeouts for sets can now be specified in milliseconds * re-add iptables-like empty skeleton rulesets- Update to new upstream release 0.8.4 * Support to match IPv6 segment routing headers. * New "meta ibrname" and "meta obrname" arguments to match the name of the logical bridge a packet is passing through. These new names replace the old (misnamed) "ibriport"/"obriport". * `nft -a` will now show handle identifier for all objects, including tables and chains. * nft can now delete objects by their handle number. * Support to update maps from the ruleset (packet path). * the "--echo" option now prints handle id for tables and object too. * `nft -f -` will now read from standard input * Support for flow tables, cf. man page or https://lwn.net/Articles/738214/ .- Update to new upstream release 0.8.3 * raw payload support to match headers that do not yet have received a mnemonic.- Update to new upstream release 0.8.2 * add secpath support- Update to new upstream release 0.8.1 * This release deprecates the "flow table" syntax in favor of "meter".- Update to new upstream release 0.8 * This release contains new features available up to the (upcoming) Linux 4.14 kernel release: * Support for stateful objects, these objects are uniquely identified by a user-defined name, you can refer to them from rules, and there is a well established interface to operate with them. * Sort set elements when listing them, from lower to largest. * TCP option matching and mangling support. This includes TCP maximum segment size mangling. * Add new "-s" option for listings without stateful information. * Add new -c/--check option for nft, to tests if your ruleset loads fine, into the kernel, this is a dry run mode. * Connection tracking helper support. * Add --echo option, to print the handle that the kernel allocates to uniquely identify rules. * Conntrack zone support * Symmetric hash support * Add support to include directories from nft natives scripts, files are loaded in alphanumerical order. * Allow to check if IPv6 extension header or TCP option exists or is missing. * Extend quota support to display used bytes. * Add ct average matching, to match average bytes per packet a connection has transferred so far, to map the existing feature available in the iptables connbytes match. * Allow to flush maps and flow tables. * Allow to embed set definition into an existing set. * Conntrack event filtering support via rule.- Update to new upstream release 0.7 * Add new fib expression, which can be used to obtain the output interface from the route table based on either source or destination address of a packet. * Support hashing of any arbitrary key combination, eg. * Add number generation support. Useful for round-robin packet mark setting. * Add quota support, eg. * Introduce routing expression, for routing related data with support for nexthop * Notrack support, to explicitly skip connection tracking for matching packets. * Support to set non-byte bound packet header fields, including checksum adjustment. * Add 'create set' and 'create element' commands. * Allow to use variable reference for set element definitions. * Allow to use variable definitions from element commands. * Add support to flush set. You can use this new command to remove all existing elements in a set. * Inverted set lookups. * Honor absolute and relative paths via include file, where: * Support log flags, to enable logging TCP sequence and options. * tc classid parser support, eg. * Allow numeric connlabels, so if connlabel still works with undefined labels.- Update to new upstream release 0.6 * Rules may be replaced now * Flow table support (requires Linux >= 4.3) * Support for tracing * Ratelimiting now supports units like bytes/second. * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv & RtSol- Update to new upstream release 0.5 * Support combinations of two or more selectors to build a tuple * Timeout support for sets * Dormant flag for tables * Default chain policy specifiable on creation- set the url to the project page - pass --disable-silent-rules to configure to allow gcc post build check to work- Update to new upstream release 0.4 * Since Linux 3.18: support for global ruleset operations * Since 3.17: full logging support for all the families, including nfnetlink_log * 3.16: automatic selection of the optimal set implementation * 3.14: reject support for ip, ip6 and inet * 3.18: reject support for bridge, and reject icmpx abstraction * 3.18: masquerade support * 3.19: redirect support * Extend meta to support pkttype, cpu and devgroup matching.ibs-arm-2 16522526250.9.8-150300.3.3.10.9.8-150300.3.3.1nftablesnftables-0.1-py3.6.egg-info__init__.py__pycache____init__.cpython-36.pycnftables.cpython-36.pycnftables.pyschema.json/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/nftables//usr/lib/python3.6/site-packages/nftables/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:24179/SUSE_SLE-15-SP3_Update/66ac1bca1b33139dd80ec031930f1675-nftables.SUSE_SLE-15-SP3_Updatecpioxz5aarch64-suse-linuxdirectoryASCII textPython script, ASCII text executablepython 3.6 byte-compiledRRRR&-'[,wIutf-89949a98d5d3035398099e6672cb146b709fde6208c5074b18508b0c28d6f5566? 7zXZ !t/x+] crt:bLL %l:?e!:r /fWm-n%s}3X!> J{sA,ov' ]W1qDzT2$ǨDgk5wS\ɰgԼ$$h{m'Ϋ 7]/=KMHL 3ڒ@|LI:L\SNB ݎmgd~*C;o^GdpU?x Q>rI&( 8Uσ] wOY*i^V 6CC^L20Eœ}AFz vb̀aRhy} tr U8AB"uRt"R_p+W^9VR. `(&#a']@d}%o=Z  I^{ô,mֱvo5;a+wq/XށphAZMYs77dfE3 W%DU1Q`7~tyF<ڄ[ qkCL1Wfrܼ= ማ&d7gkuѷӫm~j!a4>Ql~IH& c+5H͵_XVM痖bq*6_ g;GXs aH>%M)ڦ+ͬt"?ZbqEɋG]}0{^a׸S&&F8G=IckQir2M(E  _Rk,U}kRBd|-+`U >kawT 7>O8KJkbYԄbL{La N\:Z@ԅ3Q [DCntr;7Venx{^V*C'9>rI;%9i&`pva!dĩde=/8q~ZVQtz(g9PIf&:f71wY  ^+!͊iQaZ=ɵVU)c)O⯴#DT 6hWt΋wKV æ^yU^TǮ{XGnr/ j|.&f ދ|rwﯵKGTLG<*]GM% oŽ#t/whռ xʰ_hOH`u^LlrY1sMMDƜ3 )qR\+t~ &IHZ*6tIj2O+杓Nw?e%#$ˮ*+pvv剌go% D-{ﺌW{.I)zd͙Gohkc_FT5M];.YH=_SFyG$o6UCM@"}/USdʯCRُ}@<$LT1 +o Ĕ{KZR`T܁B[,bOޣŦ%(zq s5eOw |Ja5V͈y[⓪,:P4fg24R6Ϙ@J7ܡUv:7_1)1~&wVelx%t{sN66:obakN&̬Ž:P7P/i1– 4rC2$8Hie_=+~I2ug|J,%-u;W^5Y^_e7vʼnkcFw 8Qj9F<I 1lnnv3™-%/Q7]X"}f5] S2{2$,cE3,σ1aD&JMlbhٌ7Nf!v{I!;i3j2y0 I]C inO;Ν?y'R3~]:F6țf03l(+l:]<`[^,cAxo9&xT#Eߚ,%O$JBrSlc2{Ȃ3S!dD\-}YJ F3{#X8,׸$#kh^6OC@&:[wHZ#݊GH dn8b$ oPP" Nt_zJ&(c+UݺxFWt^6|W@V0XJ=gT[]܂J4dj(7Cd3U_:II6R{Cpn:3xJu 6ÉOe_CnnNGOMS:ZY&Qe) (Fdg[ y(̦aWPIa_se%az8:w`K)fOg]B8nuBα-ʔ{-' Tk^8qڴQ-gB7c3Sm(h,X&T`Q&iJGgZݦgZMuazJ V}@*,P(_iB, Ua0 ڟi7L"Mޕl\ƾuc&?QH?F[U3=VM^uɛ8&of2+rK*i{xL7 -,Q~7:VMRt"b37UtIϐ,D/&!ЬԱ2qa[LGlߕdG\Z ( !ϧSSGy?6PնxQ1M%6[(~m(~;UQ=:uFfˆuŧ KL!TfG{QbDfU*(PHI?tJrG"*u>_&;(;&jx~W ^grO)䘡wtL  yvLREKB+0%hȷA@PNLȐKLpk"BDtT5su󏴦Ie`NC ;b'_ZwFӢ_Ta@-0C'CX*|8❱ PřY({N]hdGM8ܽzGtw9@1svwIo[?!3FCJ>:XT^/b)I4WحJɤ)c)+aD*[1p&%kAwmŏ*U/#.'F4q *#_X6ԟ)$nGtɪGּ:( 0bL22LtytFmBQJI`}]'˟[m; M{oEֺ=\@qF,P[lrQ`FvH$b]WB~ qYiq+*]h :݃aw؛!P#w7w#H2Ya)lZ˫?a'\Qw5xoLZ.hЬ[^O4aSHD4CG^0}@|B/&JZb*cS#W:ԣ =-N2R6T )vE72SFA!S^b_S/eE.~ Ppa4gE|4w7Uo%!+mgAzE+Q5CprP t_!̈́4E[̖?Ei=,sAT6/š,0],qmmr@!$Ŗt.^.Lx}EP#㑅dlOOM5cdç yMW+2ۼ(O02:3x*c32bރR9 m孀b\*E"AVOFJА>;*<I4[\gjgw' ABR^TnƝbTyk`"-+OozFB.` & T l.77N=mjQ4^kZC_~ /\;g eNtSp]^Lk|ryb7T~~lp?&cͱ&;9|HERVpX1;CWY =9ax C!Cf^̍ By||#J% ՝+"pQ&e0ov b36{L+I}ƥMjMS,:֪ׄ7'F%Zrʯ]-b(є6" ^BŽO;E?#ikj!A$w W=YSc_YJcf@oҎ6 u0'mM8nj:adݨU[BǠl u%#7.k#E{ fcSa4A9.Boe{r4cz0!G`H@( r]R'eB<$V /~72~"xQ=>,=8),+E+`\H fp4׍:{i22G*ˮ[e1=ΛtvAHgOS0 8'sKsd*Yi/ ~ILX2Łu$抖4a`l8h; Cy>TL;N<}4TRen1)^ZZ{\ղ_kj8Y"7$X4bt -u ̌X(j[^R$57 Po$!fཌྷ1&Tjxɽ5:;j]ToZ O? PCn7K}XQc{[rblFU. >f_%ecڙc)dE0u\g `V`qP44 R(PĽ˙z|IUX30ڑ:9[>Aնz}\0,a(sg߻>g SV볖uiQ]- F\*80eQ!,PqXn7xSe-3Q+;^ # R2inl{}]a=l>h$f׳Yw#GN21Q2σ