python3-nftables-0.9.8-150300.3.6.1 >  A db(%p9|S^ose4rBQbQ bEؾ$op>(?'d & Ddhtx !(H X h   8` {(89:F#G#H$ I$,X$4Y$<\$d]$^% b%c&6d&e&f&l&u&v&w'Hx'hy'z'''''Cpython3-nftables0.9.8150300.3.6.1Python interface for nftablesA Python module for nftables.db(s390zp36r=SUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/Development/Languages/Pythonhttps://netfilter.org/projects/nftables/linuxs390xo5l8YA큤A큤db(db(` edb(db(db(` e` e008fdafe301a4865af9a6fac1b3b3033fb1136e0f1d4ac14d309e9e6cecfa569311e5687d5aff2f97900bca92c7d768d1cb5711f31f0fb13816dba22eb3b63371f55b99031006f7b2ec40537cd1aa6a3cef0ddc8bc4dec4433f5f2a3b1059f8ba06e79a44c19ad19d73fe56fd1b5e2059d605cd63c7172bb4486b0ac992f0b5eceaa498a540861c56992f2d709dc41f0e807ada913bfb403ce72c20d47049b49c0f3ea8eba4398c730990b1d25fd82f86316ab606fee8e6ed71151ceb278a870rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootnftables-0.9.8-150300.3.6.1.src.rpmpython3-nftablespython3-nftables(s390-64)@    python(abi)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.63.0.4-14.6.0-14.0-15.2-14.14.3dGbo`_ ^@^ۅ@^@^@]7@]N@]Z@\C@[@ZZ@Z@Zu@Z]@YXY@WPU@U`kTmatthias.gerstner@suse.commatthias.gerstner@suse.comjengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.destefan.bruens@rwth-aachen.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.demrueckert@suse.dejengelh@inai.de- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this fixes a crash in nftables if layer2 reject rules are processed (e.g. Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare crashes that could occur e.g. in firewalld (bsc#1197606).- Update to release 0.9.8 * Complete support for matching ICMP header content fields. * Added raw tcp option match support. * Added ability to check for the presence of any tcp option. * Support for rejecting traffic from the ingress chain.- Update to release 0.9.7 * Support for implicit chains * Support for ingress inet chains * Support for reject from prerouting chain * Support for --terse option in json * Support for the reset command with json- Update to release 0.9.6 * Fix two ASAN runtime errors- Update to release 0.9.5 * Support for set counters. * Support for restoring set element counters via nft -f. * Counter support for flowtables. * typeof concatenations support for sets. * Support for concatenated ranges in anonymous sets. * Allow to reject packets with 802.1q from the bridge family. * Support for matching on the conntrack ID. - Drop anonset-crashfix.patch (upstream solved differently)- Add anonset-crashfix.patch [boo#1171321]- Update to release 0.9.4 * Add a helper for concat expression handling. * Add "typeof" build/parse/print support.- Add json, python [boo#1158723]- Update to release 0.9.3 * meta: Introduce new conditions "time", "day" and "hour". * src: add ability to set/get secmarks to/from connection. * flowtable: add support for named flowtable listing. * flowtable: add support for delete command by handle. * json: add support for element deletion. * Add `-T` as the short option for `--numeric-time`. * meta: add ibrpvid and ibrvproto support- Update to new upstream release 0.9.2 * Transport header port matching, e.g. "th dport 53" * Support for matching on IPv4 options * Support for synproxy- Remove unused dblatex BuildRequires, only needed for the optional and disabled PDF generation (same contents as shipped manpage).- Update to new upstream release 0.9.0 * Support to check if packet matches an existing socket. * Support to limit number of active connections by arbitrary criteria, such as ip addresses, networks, conntrack zones or any combination thereof. * Added support for "audit" logging.- Update to new upstream release 0.8.5 * support to add/insert a rule at a given index position * meter statement now supports a configureable upper max size * timeouts for sets can now be specified in milliseconds * re-add iptables-like empty skeleton rulesets- Update to new upstream release 0.8.4 * Support to match IPv6 segment routing headers. * New "meta ibrname" and "meta obrname" arguments to match the name of the logical bridge a packet is passing through. These new names replace the old (misnamed) "ibriport"/"obriport". * `nft -a` will now show handle identifier for all objects, including tables and chains. * nft can now delete objects by their handle number. * Support to update maps from the ruleset (packet path). * the "--echo" option now prints handle id for tables and object too. * `nft -f -` will now read from standard input * Support for flow tables, cf. man page or https://lwn.net/Articles/738214/ .- Update to new upstream release 0.8.3 * raw payload support to match headers that do not yet have received a mnemonic.- Update to new upstream release 0.8.2 * add secpath support- Update to new upstream release 0.8.1 * This release deprecates the "flow table" syntax in favor of "meter".- Update to new upstream release 0.8 * This release contains new features available up to the (upcoming) Linux 4.14 kernel release: * Support for stateful objects, these objects are uniquely identified by a user-defined name, you can refer to them from rules, and there is a well established interface to operate with them. * Sort set elements when listing them, from lower to largest. * TCP option matching and mangling support. This includes TCP maximum segment size mangling. * Add new "-s" option for listings without stateful information. * Add new -c/--check option for nft, to tests if your ruleset loads fine, into the kernel, this is a dry run mode. * Connection tracking helper support. * Add --echo option, to print the handle that the kernel allocates to uniquely identify rules. * Conntrack zone support * Symmetric hash support * Add support to include directories from nft natives scripts, files are loaded in alphanumerical order. * Allow to check if IPv6 extension header or TCP option exists or is missing. * Extend quota support to display used bytes. * Add ct average matching, to match average bytes per packet a connection has transferred so far, to map the existing feature available in the iptables connbytes match. * Allow to flush maps and flow tables. * Allow to embed set definition into an existing set. * Conntrack event filtering support via rule.- Update to new upstream release 0.7 * Add new fib expression, which can be used to obtain the output interface from the route table based on either source or destination address of a packet. * Support hashing of any arbitrary key combination, eg. * Add number generation support. Useful for round-robin packet mark setting. * Add quota support, eg. * Introduce routing expression, for routing related data with support for nexthop * Notrack support, to explicitly skip connection tracking for matching packets. * Support to set non-byte bound packet header fields, including checksum adjustment. * Add 'create set' and 'create element' commands. * Allow to use variable reference for set element definitions. * Allow to use variable definitions from element commands. * Add support to flush set. You can use this new command to remove all existing elements in a set. * Inverted set lookups. * Honor absolute and relative paths via include file, where: * Support log flags, to enable logging TCP sequence and options. * tc classid parser support, eg. * Allow numeric connlabels, so if connlabel still works with undefined labels.- Update to new upstream release 0.6 * Rules may be replaced now * Flow table support (requires Linux >= 4.3) * Support for tracing * Ratelimiting now supports units like bytes/second. * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv & RtSol- Update to new upstream release 0.5 * Support combinations of two or more selectors to build a tuple * Timeout support for sets * Dormant flag for tables * Default chain policy specifiable on creation- set the url to the project page - pass --disable-silent-rules to configure to allow gcc post build check to work- Update to new upstream release 0.4 * Since Linux 3.18: support for global ruleset operations * Since 3.17: full logging support for all the families, including nfnetlink_log * 3.16: automatic selection of the optimal set implementation * 3.14: reject support for ip, ip6 and inet * 3.18: reject support for bridge, and reject icmpx abstraction * 3.18: masquerade support * 3.19: redirect support * Extend meta to support pkttype, cpu and devgroup matching.s390zp36 16841545240.9.8-150300.3.6.10.9.8-150300.3.6.1nftablesnftables-0.1-py3.6.egg-info__init__.py__pycache____init__.cpython-36.pycnftables.cpython-36.pycnftables.pyschema.json/usr/lib/python3.6/site-packages//usr/lib/python3.6/site-packages/nftables//usr/lib/python3.6/site-packages/nftables/__pycache__/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:28999/SUSE_SLE-15-SP3_Update/ed4025453dccbe5250bf320898c5bdb1-nftables.SUSE_SLE-15-SP3_Updatecpioxz5s390x-suse-linuxdirectoryASCII textPython script, ASCII text executablepython 3.6 byte-compiledRRRR*zx 厁=utf-86db1213803510be13a5f1c65de42c1318f3a9fa1fdbb8addeb9baf543afc639a? 7zXZ !t/x'] crt:bLL ` o)C\" vIf#ui?xIdiUc~Z9BS"@3Wh_![tb8d [UW=ҧϺ~,G$깚/}bZ$%J!Ϻt2?ҭrs1 Zm9$[)9 :GEw[V [(~`Xv|5k(SdZMf@ҫ=[d0I?9#Hض! 'B`z@(@@yA`g%(\*Ь$Sy,mT*.#+b,Ow]vݝQmz9Ul*CP!#Će۹W3_=ոd܌=5rjkq,Ȫ:'qk f8 !Q&5^Kj:{/+N~]vj,5bN:&Գvy`ƞ+9 a&Kc#zzE*/P,_h8G$Ќ\f+(6mI\P.DȶPؖ35o<]I".4)GnҹSd"pM~tN?jxDMdvtޮjx;yu9O]<0Jӭ x)T|5S+M Y9QP܇9?)efqNGVx-XTү|E:0/ݺѝ{[L}Eh+{pGiR}~'cW-Cɵж( .hoż[(MM_JC4 U#(o>}[f^q 7 i<2O`Q5?}E|{0Gi;PaHǿoWne͓#1Kq*GPLƧ1Lǡi=6>c*<.k;O\Q䲅DO&R9TA 8#YN5o+I!ilP"wHCY=i* [åo2 .cx2G"_qqx7a~WQ9}EsLgw Cf5x}5~FX?g#˔OoA/^ƈzAs3xTՕgM|l1= m* F?R]2}|"Y-CD(s^1 0Si7ρzC1WPƍ' ZcrR{FڊMaX9j> a3+9e>&ٸN$'/CD۔@T  EL_HyًѢJ&\&q Pt~5۩_x?%HIX_ ˸}MMk،HJx3@Y~aGӄ!,)d(tr"P [z #`nS>3af0*jtsybgL/WKX~l;%@i:XA5VY;Zmgks`I͘2DF(s;_ʌQsquQni/3#|]YX }@-ѥo+lvQ!;)D,!ӛ"(~[_:47>n3>ppu yo##eXSy"5h(i5BAE aebQ[$Mbq pP چ3`XtxtK ;-<1P)pTsBX*- k~%/\pFzxgadb@4tŽZ*E[0?"E/j8+?*3}x7Ńgpў:>P-m9T}%EaHֶD_w_P(ZϑEzFr a90D`*SuyL9Na=wi/>3ȦTPCSvgErLJq$+P` -^9%V¹ {./8Lly}ȭXupB/c#}33 p94 Q": -6ޯS[k::b"E :#S,M;?rj*:46T:tub7Mұg)3R\׼K9kb)8~RqQ#!3hvZCDRk WO-q-q3.=MR<ڨRYjA4b\Bฯ2qhgǛ|0h _O/,Sq'il-\^ Cg]0Gr~?CsPW/JsªNk32xމ2|Ths\ }s-2=u`Y4WQm9+ao7Kl 1':f8,U;s!U\Jqx߳ v 2#?Z5fYIRߢLc;c]>NuK*~B2WiHQf`Fa$AL˟yMPUm^ "7֋?5PϚR!&@|x.̉hPɕ#z);JJyKjoZߵn]H4tdACx`݁2/| [;=d83Xh~ܔZ2 UXUG+@K8ticͭlQ%yҩ; kT#"j/Vrv@Ll_3yȇj5{>$XrzAh歠(7:A-׸3CN)<@Y}oL_|4%!L'^_1-#"v~He`Kt <ݦ6+M 3QaՏ4*)J\j.vjJڈx3@}zwp^WAu3߄ۏ Ua㿵Rw7ȕ(ڧC]:axVSd٘\q> j5kt+8pT$V% ۧ}s Q+NhCZ$%`vZSNdqrʸ#ȧgTpB1=+ T%eUANl07jmʾivQ$xPMsNz 8긶,j틆vcd1Wꙁgxr #YƨhTS2tu J[)n9rj ~gւP{kDC / &DO^e-" ɢIr`,pL)covڎ{ 6 Jpefy-*|QS}>@ۨtQmaBGU3[Sr]u{Ͱ-ʴ۸km`sz8SL@ ^4bo&Hu;3(6|{Jg,YKHoSAD&ow[?tާM&] -J+X+lQHڔ䞳Q`:ΥZ#!|GW_Dm5˭ y`>yepsuuR)r< 됗s^`o}V_8$ 0ǎJkQ0#[f6*"?^l!寉dnU՛Cz|W7 4kE"OVIb]9MہS/[zsXbjET&إSn[<-㍸4c߶ cUz~Zn ̭k~RBq7AF{fp q{*J9e^ԩ c&:WQ[![8_m ؟r<es8p35H5O~;ټ ں=g"me]TgQZ/B{wO%Tb Uvy6+DPEI\nMBqRyMYYh9Ε#OaCz *h%|o#"̂, ,䝾%A{BfSҙYq#7ӷ tm.vEVK-^^^;