nftables-devel-0.9.8-150300.3.3.1 >
A b{_p9|uv;P /ZM>'mu1#7̫5`(PdAdK}m(nM읪7#ڋ_!ZU h Ba/^DKQ;C0(@ ūqba|j$tJ*8 vBBGP2խ ӊ I( ?Xi{y)a["Ss5]0F{s?7`$XF$LKudC
3y~hMU@>lvNʴwT 0c338c632f4c683501e9a4158d85e890f7ce356d 8abde718e2c58861568d364dc4e4a8960cea9bf6b0ba2d7bcacf905ee37527f5 B b{_p9| ݶSYpi2&2,3^ d" ,xR#h, W㏼g!1whF˦]&$ pٟYx<08x f Y k ֫T ?p ]+6xpg:"({ s@K<ܺĎ7yt8[ֆ9Ao)7aE [#=>i\QkYRPaL%' B;!hCN&`1r39Rq/a !L > p > & ? & d $ ^
. ; Q q
$ H ` < ( _ 8 h 9 : N F " G " H " I " X " Y " \ #$ ] #< ^ # b $ c $ d %3 e %8 f %; l %= u %P v %h w & x & y &8 z &@ &P &T &Z & C nftables-devel 0.9.8 150300.3.3.1 Development files for the nftables command line interface libnftables is the nftables command line interface placed into a
library.
This package contains the header files for the library. b{_psheep25 PSUSE Linux Enterprise 15 SUSE LLC GPL-2.0-only https://www.suse.com/ Development/Libraries/C and C++ https://netfilter.org/projects/nftables/ linux x86_64
6 AA큤 b{_mb{_mb{_mb{_mb{_nb{_n 326da31e471a394fc3bcabed2678284caad2a06e0631db51aad4bbe1c66452e6 193e9f84b975fa8c908af297bf45403737f6f12702ad0eacd7edc0fe92d01276 585a01a0e39c1685e655bf4945b6a06f4cd9904af71612b74f9d8abe738f7062 libnftables.so.1.0.0 root root root root root root root root root root root root nftables-0.9.8-150300.3.3.1.src.rpm nftables-devel nftables-devel(x86-64) pkgconfig(libnftables) @
/usr/bin/pkg-config libnftables1 rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 0.9.8 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 bo`_ ^@^ۅ@^@^@]7@]N@]Z@\C@[@ZZ@Z@Zu@Z]@YXY @WP U@U`kT matthias.gerstner@suse.com jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de stefan.bruens@rwth-aachen.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de mrueckert@suse.de jengelh@inai.de - add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
crashes that could occur e.g. in firewalld (bsc#1197606). - Update to release 0.9.8
* Complete support for matching ICMP header content fields.
* Added raw tcp option match support.
* Added ability to check for the presence of any tcp option.
* Support for rejecting traffic from the ingress chain. - Update to release 0.9.7
* Support for implicit chains
* Support for ingress inet chains
* Support for reject from prerouting chain
* Support for --terse option in json
* Support for the reset command with json - Update to release 0.9.6
* Fix two ASAN runtime errors - Update to release 0.9.5
* Support for set counters.
* Support for restoring set element counters via nft -f.
* Counter support for flowtables.
* typeof concatenations support for sets.
* Support for concatenated ranges in anonymous sets.
* Allow to reject packets with 802.1q from the bridge family.
* Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently) - Add anonset-crashfix.patch [boo#1171321] - Update to release 0.9.4
* Add a helper for concat expression handling.
* Add "typeof" build/parse/print support. - Add json, python [boo#1158723] - Update to release 0.9.3
* meta: Introduce new conditions "time", "day" and "hour".
* src: add ability to set/get secmarks to/from connection.
* flowtable: add support for named flowtable listing.
* flowtable: add support for delete command by handle.
* json: add support for element deletion.
* Add `-T` as the short option for `--numeric-time`.
* meta: add ibrpvid and ibrvproto support - Update to new upstream release 0.9.2
* Transport header port matching, e.g. "th dport 53"
* Support for matching on IPv4 options
* Support for synproxy - Remove unused dblatex BuildRequires, only needed for the optional
and disabled PDF generation (same contents as shipped manpage). - Update to new upstream release 0.9.0
* Support to check if packet matches an existing socket.
* Support to limit number of active connections by arbitrary
criteria, such as ip addresses, networks, conntrack zones or
any combination thereof.
* Added support for "audit" logging. - Update to new upstream release 0.8.5
* support to add/insert a rule at a given index position
* meter statement now supports a configureable upper max size
* timeouts for sets can now be specified in milliseconds
* re-add iptables-like empty skeleton rulesets - Update to new upstream release 0.8.4
* Support to match IPv6 segment routing headers.
* New "meta ibrname" and "meta obrname" arguments to match the
name of the logical bridge a packet is passing through.
These new names replace the old (misnamed) "ibriport"/"obriport".
* `nft -a` will now show handle identifier for all objects,
including tables and chains.
* nft can now delete objects by their handle number.
* Support to update maps from the ruleset (packet path).
* the "--echo" option now prints handle id for tables and
object too.
* `nft -f -` will now read from standard input
* Support for flow tables, cf. man page or
https://lwn.net/Articles/738214/ . - Update to new upstream release 0.8.3
* raw payload support to match headers that do not yet have
received a mnemonic. - Update to new upstream release 0.8.2
* add secpath support - Update to new upstream release 0.8.1
* This release deprecates the "flow table" syntax in favor
of "meter". - Update to new upstream release 0.8
* This release contains new features available up to the
(upcoming) Linux 4.14 kernel release:
* Support for stateful objects, these objects are uniquely
identified by a user-defined name, you can refer to them from
rules, and there is a well established interface to operate
with them.
* Sort set elements when listing them, from lower to largest.
* TCP option matching and mangling support. This includes TCP
maximum segment size mangling.
* Add new "-s" option for listings without stateful information.
* Add new -c/--check option for nft, to tests if your ruleset
loads fine, into the kernel, this is a dry run mode.
* Connection tracking helper support.
* Add --echo option, to print the handle that the kernel
allocates to uniquely identify rules.
* Conntrack zone support
* Symmetric hash support
* Add support to include directories from nft natives scripts,
files are loaded in alphanumerical order.
* Allow to check if IPv6 extension header or TCP option exists
or is missing.
* Extend quota support to display used bytes.
* Add ct average matching, to match average bytes per packet a
connection has transferred so far, to map the existing
feature available in the iptables connbytes match.
* Allow to flush maps and flow tables.
* Allow to embed set definition into an existing set.
* Conntrack event filtering support via rule. - Update to new upstream release 0.7
* Add new fib expression, which can be used to obtain the
output interface from the route table based on either source
or destination address of a packet.
* Support hashing of any arbitrary key combination, eg.
* Add number generation support. Useful for round-robin packet
mark setting.
* Add quota support, eg.
* Introduce routing expression, for routing related data with
support for nexthop
* Notrack support, to explicitly skip connection tracking for
matching packets.
* Support to set non-byte bound packet header fields, including
checksum adjustment.
* Add 'create set' and 'create element' commands.
* Allow to use variable reference for set element definitions.
* Allow to use variable definitions from element commands.
* Add support to flush set. You can use this new command to
remove all existing elements in a set.
* Inverted set lookups.
* Honor absolute and relative paths via include file, where:
* Support log flags, to enable logging TCP sequence and options.
* tc classid parser support, eg.
* Allow numeric connlabels, so if connlabel still works with
undefined labels. - Update to new upstream release 0.6
* Rules may be replaced now
* Flow table support (requires Linux >= 4.3)
* Support for tracing
* Ratelimiting now supports units like bytes/second.
* Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv & RtSol - Update to new upstream release 0.5
* Support combinations of two or more selectors to build a tuple
* Timeout support for sets
* Dormant flag for tables
* Default chain policy specifiable on creation - set the url to the project page
- pass --disable-silent-rules to configure to allow gcc post build
check to work - Update to new upstream release 0.4
* Since Linux 3.18: support for global ruleset operations
* Since 3.17: full logging support for all the families,
including nfnetlink_log
* 3.16: automatic selection of the optimal set implementation
* 3.14: reject support for ip, ip6 and inet
* 3.18: reject support for bridge, and reject icmpx abstraction
* 3.18: masquerade support
* 3.19: redirect support
* Extend meta to support pkttype, cpu and devgroup matching. sheep25 1652252528 0.9.8-150300.3.3.1 0.9.8-150300.3.3.1 0.9.8 nftables nftables libnftables.h libnftables.so libnftables.pc libnftables.3.gz /usr/include/ /usr/include/nftables/ /usr/include/nftables/nftables/ /usr/lib64/ /usr/lib64/pkgconfig/ /usr/share/man/man3/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:24179/SUSE_SLE-15-SP3_Update/66ac1bca1b33139dd80ec031930f1675-nftables.SUSE_SLE-15-SP3_Update cpio xz 5 x86_64-suse-linux directory C source, ASCII text pkgconfig file troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) P R wc} utf-8 a60ccf8713791f8715e4e836d911e4ce2c85fdf5ca5f3ba9368868ba91439422 ? 7zXZ
! t/!K]
crt:bLL
%l2EBLq4 LFƖ8]O"20UTzaB UVGF)EF5-Icw k +%̦67p6 חB{
wfWo4Qj!+spFPț1mG8YGэ^GKd
fF>>J=>78oP!1rŤb6bM\}m|H0h^zwdl-ua]kbwʘ ez f
D&CJ+mzRI/GԧaΊI8l/թN.85w<_5}yi`-qC3U< Ȉqc/]:轷=; N
5$\rw ] $CRKda ̡t sP-^C Zc^ LV! ^ SuZ|%_vh'i$ݙԑf,.`-0mRAέd63L'r 6%Kkc C '"x;mq+qt)] OQ)@t
w
aO| ڈy{{%FUQZ_W4)/D6FaTIӣ\$@}xXzBCȥW
?@XHpI'5xU?dvj^ͺ `c Hy,j 5 ת=k빹رY FScH1gn 2Hӳ́=XF` bj0Dy3 "znDCC~YЃC;? kJ F[eK#ba
5ܾ Mq~OHp1C@~<1A/QOc#rPegIr&o1' Rjǿ{/ޑpbwʴCH
3gOueF@W[v>+ZqۂUo-&!㰚=rP
(5#Ow/Ջ1t8T7ZPvh2NPUXMA" /q7g|F1ҙOIg jx$l)Ȫ䔎AZ#¶@JRF+&DV6.X6L(X}AK\(GZh?&y5[='߫ c}f35H lanwE DBD2:\a&oSwZ>=_;H{ّ?-G pDνVf{
[w&&n5; (ܙ$7H/ ?+)/OQ)R+sB'}u;}_
a!l[DʛFFDBG!l]\ԙSx EqF0v`zutuxr` }ZnXNa~S:e2I(hmHF~FU* I;QjzEM} Bc- qH(r!XίlkÐ@)#l+nyPtOCIĹ`+zbuw;kf=gV`k>e`mb0Gf}8"܅|n8Ï9ͷ55ArUD?y٬[b0b Q/?T\LDJtUm65J]~ &d/Ft|H^@ 6oo
vNOX@jy_ U9.mɁ)gZvE<@t#=n 7!(: /ﾜ@Or
a1$ C`iKhxwВF=8C(1HRp,RJ(;:s=u1b\[_4ӑ:Q &:&*qW"EZQ H]CRʘg"H,\JxyJMŇOÏZ+
If~Xtv+ kH<*Wq='b SsAALCʷ?! UCa8 Rty] l yY_Wq=Ly;?([
{
c^_"NZrБKb Z 7ZC9st|XXq6 # m\AcB P0_ Qu%,' k\Vtx ؍c& I/My-Z{[r].20mR Ib ;"P/9MPwp4ɢ?8Љ>'4ztW\K3\bTD[ L őg:hiBƒ䭓h! `skבx
$J,.3Ĝc3K4y7@]wvok TSQ% 9m3x;\܁ YhI ڷ*3 q{jY%`$E)w:ty '#ya:u'Xknݪ!-(!-
Ox7kF&5Q]j?in|3T"Kd&k I 8(灘7h)kD`tb"%݀)&&2 'tޡzPTKxGJrB
podR4&с H<+ !('`E`5@g=ypIC
G"7W Ɠ,YMŇ QU"e
wju,
2Ħ]bm5꺒)8\)Fe4t?yo"o췾J @.\Ea5EVgNdH4[C~KSJ]#-.qhE]h 5YE,:G@f~D" hj^44u|Du}Լ-0x m$ 'O:*ü*1֘']l_}C\Q"*Tpwq & ѣ7 -E!0{$4F^c ߲H ?~p?3Y#ی£yP9ϻ!89 51Ru_/A faBqlvī" b5X:HzZZM$n ,Ԥ
֍ ߕ!&Y}EM
a#:fq|m0 =.4
-OU%thl [ 3 Wj%f%l[Mxx/"4LÆ>Zi
)4` GO;- ,kX
wԺqYAj{CŘ!`E#6hμ la[m@N#&2u ^ Rݛ7 #쵛>uy^]Hu1'Ʃqt 8>
^o <^ 3 w fMމ6%SnSŦg«x .B c
YZ