nftables-devel-0.9.8-150300.3.3.1 >  A b{_p9|ZgcBF-/Lef`nn9jw~FspSoJCw%xz8xKu9ObM(qvm7kQ ->S⬒D'DQ&+9nwpUš# aE;Po3M:XAo+ERWqw 8S>nil 2we7kD&]MI3[%3)A6ל*44e4ae219c024e7db68be4f36432d3314be1578b1d2f68fa0aa0c13c30fc9fe79d1e33e4d4c198a65742efa6517902cda52e343aBb{_p9|Qk>W6Y@|I`]n#Am(OŏƑ|CΓ4b\DjV= ?/l.|Tǒ לZ95frum-wTTN >8g̭ūҵOTN frԤ[wUszpp>&?&d $ ^2? Uu      (Ld@(c8l9:RF"G"H"I"X"Y"\#(]#@^#b$ c$d%7e%<f%?l%Au%Tv%lw& x&$y&<z&D&T&X&^&Cnftables-devel0.9.8150300.3.3.1Development files for the nftables command line interfacelibnftables is the nftables command line interface placed into a library. This package contains the header files for the library.b{_s390zl36PSUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/Development/Libraries/C and C++https://netfilter.org/projects/nftables/linuxs390x 6AA큤b{_b{_b{_b{_b{_b{_326da31e471a394fc3bcabed2678284caad2a06e0631db51aad4bbe1c66452e6193e9f84b975fa8c908af297bf45403737f6f12702ad0eacd7edc0fe92d01276585a01a0e39c1685e655bf4945b6a06f4cd9904af71612b74f9d8abe738f7062libnftables.so.1.0.0rootrootrootrootrootrootrootrootrootrootrootrootnftables-0.9.8-150300.3.3.1.src.rpmnftables-develnftables-devel(s390-64)pkgconfig(libnftables)@    /usr/bin/pkg-configlibnftables1rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)0.9.83.0.4-14.6.0-14.0-15.2-14.14.3bo`_ ^@^ۅ@^@^@]7@]N@]Z@\C@[@ZZ@Z@Zu@Z]@YXY@WPU@U`kTmatthias.gerstner@suse.comjengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.destefan.bruens@rwth-aachen.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.demrueckert@suse.dejengelh@inai.de- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare crashes that could occur e.g. in firewalld (bsc#1197606).- Update to release 0.9.8 * Complete support for matching ICMP header content fields. * Added raw tcp option match support. * Added ability to check for the presence of any tcp option. * Support for rejecting traffic from the ingress chain.- Update to release 0.9.7 * Support for implicit chains * Support for ingress inet chains * Support for reject from prerouting chain * Support for --terse option in json * Support for the reset command with json- Update to release 0.9.6 * Fix two ASAN runtime errors- Update to release 0.9.5 * Support for set counters. * Support for restoring set element counters via nft -f. * Counter support for flowtables. * typeof concatenations support for sets. * Support for concatenated ranges in anonymous sets. * Allow to reject packets with 802.1q from the bridge family. * Support for matching on the conntrack ID. - Drop anonset-crashfix.patch (upstream solved differently)- Add anonset-crashfix.patch [boo#1171321]- Update to release 0.9.4 * Add a helper for concat expression handling. * Add "typeof" build/parse/print support.- Add json, python [boo#1158723]- Update to release 0.9.3 * meta: Introduce new conditions "time", "day" and "hour". * src: add ability to set/get secmarks to/from connection. * flowtable: add support for named flowtable listing. * flowtable: add support for delete command by handle. * json: add support for element deletion. * Add `-T` as the short option for `--numeric-time`. * meta: add ibrpvid and ibrvproto support- Update to new upstream release 0.9.2 * Transport header port matching, e.g. "th dport 53" * Support for matching on IPv4 options * Support for synproxy- Remove unused dblatex BuildRequires, only needed for the optional and disabled PDF generation (same contents as shipped manpage).- Update to new upstream release 0.9.0 * Support to check if packet matches an existing socket. * Support to limit number of active connections by arbitrary criteria, such as ip addresses, networks, conntrack zones or any combination thereof. * Added support for "audit" logging.- Update to new upstream release 0.8.5 * support to add/insert a rule at a given index position * meter statement now supports a configureable upper max size * timeouts for sets can now be specified in milliseconds * re-add iptables-like empty skeleton rulesets- Update to new upstream release 0.8.4 * Support to match IPv6 segment routing headers. * New "meta ibrname" and "meta obrname" arguments to match the name of the logical bridge a packet is passing through. These new names replace the old (misnamed) "ibriport"/"obriport". * `nft -a` will now show handle identifier for all objects, including tables and chains. * nft can now delete objects by their handle number. * Support to update maps from the ruleset (packet path). * the "--echo" option now prints handle id for tables and object too. * `nft -f -` will now read from standard input * Support for flow tables, cf. man page or https://lwn.net/Articles/738214/ .- Update to new upstream release 0.8.3 * raw payload support to match headers that do not yet have received a mnemonic.- Update to new upstream release 0.8.2 * add secpath support- Update to new upstream release 0.8.1 * This release deprecates the "flow table" syntax in favor of "meter".- Update to new upstream release 0.8 * This release contains new features available up to the (upcoming) Linux 4.14 kernel release: * Support for stateful objects, these objects are uniquely identified by a user-defined name, you can refer to them from rules, and there is a well established interface to operate with them. * Sort set elements when listing them, from lower to largest. * TCP option matching and mangling support. This includes TCP maximum segment size mangling. * Add new "-s" option for listings without stateful information. * Add new -c/--check option for nft, to tests if your ruleset loads fine, into the kernel, this is a dry run mode. * Connection tracking helper support. * Add --echo option, to print the handle that the kernel allocates to uniquely identify rules. * Conntrack zone support * Symmetric hash support * Add support to include directories from nft natives scripts, files are loaded in alphanumerical order. * Allow to check if IPv6 extension header or TCP option exists or is missing. * Extend quota support to display used bytes. * Add ct average matching, to match average bytes per packet a connection has transferred so far, to map the existing feature available in the iptables connbytes match. * Allow to flush maps and flow tables. * Allow to embed set definition into an existing set. * Conntrack event filtering support via rule.- Update to new upstream release 0.7 * Add new fib expression, which can be used to obtain the output interface from the route table based on either source or destination address of a packet. * Support hashing of any arbitrary key combination, eg. * Add number generation support. Useful for round-robin packet mark setting. * Add quota support, eg. * Introduce routing expression, for routing related data with support for nexthop * Notrack support, to explicitly skip connection tracking for matching packets. * Support to set non-byte bound packet header fields, including checksum adjustment. * Add 'create set' and 'create element' commands. * Allow to use variable reference for set element definitions. * Allow to use variable definitions from element commands. * Add support to flush set. You can use this new command to remove all existing elements in a set. * Inverted set lookups. * Honor absolute and relative paths via include file, where: * Support log flags, to enable logging TCP sequence and options. * tc classid parser support, eg. * Allow numeric connlabels, so if connlabel still works with undefined labels.- Update to new upstream release 0.6 * Rules may be replaced now * Flow table support (requires Linux >= 4.3) * Support for tracing * Ratelimiting now supports units like bytes/second. * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv & RtSol- Update to new upstream release 0.5 * Support combinations of two or more selectors to build a tuple * Timeout support for sets * Dormant flag for tables * Default chain policy specifiable on creation- set the url to the project page - pass --disable-silent-rules to configure to allow gcc post build check to work- Update to new upstream release 0.4 * Since Linux 3.18: support for global ruleset operations * Since 3.17: full logging support for all the families, including nfnetlink_log * 3.16: automatic selection of the optimal set implementation * 3.14: reject support for ip, ip6 and inet * 3.18: reject support for bridge, and reject icmpx abstraction * 3.18: masquerade support * 3.19: redirect support * Extend meta to support pkttype, cpu and devgroup matching.s390zl36 16522525740.9.8-150300.3.3.10.9.8-150300.3.3.10.9.8nftablesnftableslibnftables.hlibnftables.solibnftables.pclibnftables.3.gz/usr/include//usr/include/nftables//usr/include/nftables/nftables//usr/lib64//usr/lib64/pkgconfig//usr/share/man/man3/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:24179/SUSE_SLE-15-SP3_Update/66ac1bca1b33139dd80ec031930f1675-nftables.SUSE_SLE-15-SP3_Updatecpioxz5s390x-suse-linuxdirectoryC source, ASCII textpkgconfig filetroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)PRp|} ^/Outf-81c84fdf67a7ab5ac4f2269530dcb8583c33f1e252ac09ff48d0fecd5b715d8db? 7zXZ !t/!K] crt:bLL %l3ЪѓRIO@2?=CYa}U{,fs` I7t^R%ڣlEƨ.K_DžFѹ,gP>Zulx.*OՀ!M8e? ;wn=VЫ-֡ gvdƼQ̫cEX2DHO|qcʲ$ȹ|n]f]=Jֈh5liB`yS=Ŝ:c1uЂtȹ9,Qj}@'Dٽl"ZdPf 1Wݾc3fLj=9<= 0M\v7R<1uwҳ?oYM#!eX6isMIAP}xT3VPS];q'Vj[ W t|NKmERoӅ!_+đrm WUTAٖ>.V]VHiTQ¯?ψ䏊vTVoVA'r2a}(Xz}R/n[888=UxGwZtoV_LCv@ 'u3?%g%+(a?fK6k3axu.scbF_v^UT!Wi@^{WCe|N # %~1J^SˤPAMF,s|@[J.L2QydJj (췪bR"#Z?7Cr1UgY#2Onť XFx7wR-2O8JLwJ1_O.ٶ)>k“rh%m>7mh*4ImŦ&Cu%U7o2Dͦ-?J~mX6+QεMϕ$샟+ZݸܓI\zڀCZ*})^bg'p?j~|⭟6[SA|Tq눜k zLOBFq]2Rv"+]9f2CR:d nO#}2 s!z p2ة㊖v]K< άLjMtLNh"Q2jٴ$x IYme':swjqڞZ{mm2ޘݐBm~s*%cA(k>"lx euyQ;?bVz`) Rn+9|b/:3b,X4 vB87RKAxTl}O4J!iǽe#kl=6IO-}m,n䟏C)%l[8ݣύAplKN{|e (k%;hlrMVZ?B娿L~|0;58(*âxT YP"~С{gn/jα dZT8ܗ!.vCQA1~tlD(6#q)^5w6CNۨoX[Fk LY_JnBo*T^ i 90{ }jJa0 {Y8;>-"%ݣ>r,|˱/r[lLj7vk "d4b,"^WN%h(oWJvag펀NYUBE|?hxcOHp4yX?/ߞFy{_1m`ipJ@7!PBkU°W0$:0`b z7^Ac*N~r8%UneI`}wF|[%a?{H"QS!A͹ݨj}sRf l3S_-Kx0:'1ʀʳ7 "z8S{ I1uE?hR,;J޳3bx<}ͬ6'.NmS M@_l#WˀMFGWעc;ddU yvL$FuCŐ0K4=)5.'Y1-fg[$=.tQ)ŋs5 }y&3B;0in&*x KV/?LB+Tlw{BA֬Х[]?CsOp#BW,4K 篊 Gb(2^&q&x|XqVy?8׵nzE G"-Ui3.#DMW љO1 n}0abOhV`G!7Bn&1 3MĪ]`H5yL oZZzn_s=?kvt,Gn?,JOd0r`Ѱu|tvA8u QJcĮ ~xbJ)yă94ueɋϲj+5Wp Oܛ7-7q?&Ub}jBRaZdJF< ׆A0y>4jf eo:5PqDܸ%iуQpГFX7&OoNKkOYߚ~Ȓh}[[k'%$><t2Pg'T  ;L XtV QW8{o'g}mV:Ş*RХr(@[7=8_"$Q DQNtdW7Q7r+[[NyI&l~`lwJ&w>{Vȣx`JcPsWwdI:+X2tؼS屮3n ]{TU7QBhvʨ *c6j3 lLޕdnkԳ ;'g,}Y? eu?:`YQ j [7IY!oʗLx=[*>`ct;U4>w͛wKXN~]?jqn `X%nB-2Z/瑒5I/L:y|]|Vq񮑊:iJ9}ZvTMnV @Ap64敭ev-' u1*M #T ڵ:6 ߞ} AEœC]+G-W9(L_M7U$49\8#B i]< IU3rBTJTbMk qD=vRzf'5&"=oRDUZ ϖx/TKp'e>ݷ c#˄H0: w0VMSUcsAQWiVF*K(8Di<ɨa[EߩhA[#a8F1xS,MU@z9.!{i&_/+gzhgot䬀xO =Y:XJ4v≣Mn͎/W qҤ7#HЙ.?HU?qDL?Ϗ} HD`FLCBJ[_pbwa՚r޲~}^ZDAIo ?Tt/2&(z_$ gt&dh8)a#p3x*þ +=I)RŤVmP[)PR{ ?pE{0Y*΋$a5eSJgr,F5mfyߖjfuqԎ6c` (-JU23ɠ46]ÏoNؚΣuO,H15x,F,2L@u`i2Px1 >?-}p*{--Dx m?p"*ZA9@ܐX/(#z I"_KrALN{_V>,L1 xJ!(rX җ|4\E~"CV=]g̋`ytvB $gMѳb!GlMN