nftables-devel-0.9.8-150300.3.6.1 >  A db'p9|1.pP#A=N0d+ݭU&ubzfFj2鋇Bn_ d"In4A3GELXI9MQ;_NYLoyM ..p EO)J1i9&9H]EȔH׌W._.vVuiVV{4bm =&34Rj_1=7K 0[|Uk]uRXC"e627408560075e26524abd08a9e649b4e3e96fff3737c4ab57e1553f1334b0d620211138fb979683d9e529fe85861f9770960b06Cdb'p9|,< JE_$ZTZcyRy镣1ted2B us_d gq *4{p!D0& g[c1 =' Ub@ɽg^Mŧ=E_f<05!qRu+qgpsm23[jJa腙HWXήפ7Is TJJ4eeGC!L>p>'?'d $ ^ .; Qq     $H`<(_8h9:mF#G#H#I#X#Y#\$ ]$8^$b%c%d&/e&4f&7l&9u&Lv&dw'x'y'4z'<'L'P'V'Cnftables-devel0.9.8150300.3.6.1Development files for the nftables command line interfacelibnftables is the nftables command line interface placed into a library. This package contains the header files for the library.db'sheep67PSUSE Linux Enterprise 15SUSE LLC GPL-2.0-onlyhttps://www.suse.com/Development/Libraries/C and C++https://netfilter.org/projects/nftables/linuxx86_64 6AA큤db'db'db'db'db'db'326da31e471a394fc3bcabed2678284caad2a06e0631db51aad4bbe1c66452e6193e9f84b975fa8c908af297bf45403737f6f12702ad0eacd7edc0fe92d01276585a01a0e39c1685e655bf4945b6a06f4cd9904af71612b74f9d8abe738f7062libnftables.so.1.0.0rootrootrootrootrootrootrootrootrootrootrootrootnftables-0.9.8-150300.3.6.1.src.rpmnftables-develnftables-devel(x86-64)pkgconfig(libnftables)@    /usr/bin/pkg-configlibnftables1rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)0.9.83.0.4-14.6.0-14.0-15.2-14.14.3dGbo`_ ^@^ۅ@^@^@]7@]N@]Z@\C@[@ZZ@Z@Zu@Z]@YXY@WPU@U`kTmatthias.gerstner@suse.commatthias.gerstner@suse.comjengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.destefan.bruens@rwth-aachen.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.demrueckert@suse.dejengelh@inai.de- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this fixes a crash in nftables if layer2 reject rules are processed (e.g. Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare crashes that could occur e.g. in firewalld (bsc#1197606).- Update to release 0.9.8 * Complete support for matching ICMP header content fields. * Added raw tcp option match support. * Added ability to check for the presence of any tcp option. * Support for rejecting traffic from the ingress chain.- Update to release 0.9.7 * Support for implicit chains * Support for ingress inet chains * Support for reject from prerouting chain * Support for --terse option in json * Support for the reset command with json- Update to release 0.9.6 * Fix two ASAN runtime errors- Update to release 0.9.5 * Support for set counters. * Support for restoring set element counters via nft -f. * Counter support for flowtables. * typeof concatenations support for sets. * Support for concatenated ranges in anonymous sets. * Allow to reject packets with 802.1q from the bridge family. * Support for matching on the conntrack ID. - Drop anonset-crashfix.patch (upstream solved differently)- Add anonset-crashfix.patch [boo#1171321]- Update to release 0.9.4 * Add a helper for concat expression handling. * Add "typeof" build/parse/print support.- Add json, python [boo#1158723]- Update to release 0.9.3 * meta: Introduce new conditions "time", "day" and "hour". * src: add ability to set/get secmarks to/from connection. * flowtable: add support for named flowtable listing. * flowtable: add support for delete command by handle. * json: add support for element deletion. * Add `-T` as the short option for `--numeric-time`. * meta: add ibrpvid and ibrvproto support- Update to new upstream release 0.9.2 * Transport header port matching, e.g. "th dport 53" * Support for matching on IPv4 options * Support for synproxy- Remove unused dblatex BuildRequires, only needed for the optional and disabled PDF generation (same contents as shipped manpage).- Update to new upstream release 0.9.0 * Support to check if packet matches an existing socket. * Support to limit number of active connections by arbitrary criteria, such as ip addresses, networks, conntrack zones or any combination thereof. * Added support for "audit" logging.- Update to new upstream release 0.8.5 * support to add/insert a rule at a given index position * meter statement now supports a configureable upper max size * timeouts for sets can now be specified in milliseconds * re-add iptables-like empty skeleton rulesets- Update to new upstream release 0.8.4 * Support to match IPv6 segment routing headers. * New "meta ibrname" and "meta obrname" arguments to match the name of the logical bridge a packet is passing through. These new names replace the old (misnamed) "ibriport"/"obriport". * `nft -a` will now show handle identifier for all objects, including tables and chains. * nft can now delete objects by their handle number. * Support to update maps from the ruleset (packet path). * the "--echo" option now prints handle id for tables and object too. * `nft -f -` will now read from standard input * Support for flow tables, cf. man page or https://lwn.net/Articles/738214/ .- Update to new upstream release 0.8.3 * raw payload support to match headers that do not yet have received a mnemonic.- Update to new upstream release 0.8.2 * add secpath support- Update to new upstream release 0.8.1 * This release deprecates the "flow table" syntax in favor of "meter".- Update to new upstream release 0.8 * This release contains new features available up to the (upcoming) Linux 4.14 kernel release: * Support for stateful objects, these objects are uniquely identified by a user-defined name, you can refer to them from rules, and there is a well established interface to operate with them. * Sort set elements when listing them, from lower to largest. * TCP option matching and mangling support. This includes TCP maximum segment size mangling. * Add new "-s" option for listings without stateful information. * Add new -c/--check option for nft, to tests if your ruleset loads fine, into the kernel, this is a dry run mode. * Connection tracking helper support. * Add --echo option, to print the handle that the kernel allocates to uniquely identify rules. * Conntrack zone support * Symmetric hash support * Add support to include directories from nft natives scripts, files are loaded in alphanumerical order. * Allow to check if IPv6 extension header or TCP option exists or is missing. * Extend quota support to display used bytes. * Add ct average matching, to match average bytes per packet a connection has transferred so far, to map the existing feature available in the iptables connbytes match. * Allow to flush maps and flow tables. * Allow to embed set definition into an existing set. * Conntrack event filtering support via rule.- Update to new upstream release 0.7 * Add new fib expression, which can be used to obtain the output interface from the route table based on either source or destination address of a packet. * Support hashing of any arbitrary key combination, eg. * Add number generation support. Useful for round-robin packet mark setting. * Add quota support, eg. * Introduce routing expression, for routing related data with support for nexthop * Notrack support, to explicitly skip connection tracking for matching packets. * Support to set non-byte bound packet header fields, including checksum adjustment. * Add 'create set' and 'create element' commands. * Allow to use variable reference for set element definitions. * Allow to use variable definitions from element commands. * Add support to flush set. You can use this new command to remove all existing elements in a set. * Inverted set lookups. * Honor absolute and relative paths via include file, where: * Support log flags, to enable logging TCP sequence and options. * tc classid parser support, eg. * Allow numeric connlabels, so if connlabel still works with undefined labels.- Update to new upstream release 0.6 * Rules may be replaced now * Flow table support (requires Linux >= 4.3) * Support for tracing * Ratelimiting now supports units like bytes/second. * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv & RtSol- Update to new upstream release 0.5 * Support combinations of two or more selectors to build a tuple * Timeout support for sets * Dormant flag for tables * Default chain policy specifiable on creation- set the url to the project page - pass --disable-silent-rules to configure to allow gcc post build check to work- Update to new upstream release 0.4 * Since Linux 3.18: support for global ruleset operations * Since 3.17: full logging support for all the families, including nfnetlink_log * 3.16: automatic selection of the optimal set implementation * 3.14: reject support for ip, ip6 and inet * 3.18: reject support for bridge, and reject icmpx abstraction * 3.18: masquerade support * 3.19: redirect support * Extend meta to support pkttype, cpu and devgroup matching.sheep67 16841542460.9.8-150300.3.6.10.9.8-150300.3.6.10.9.8nftablesnftableslibnftables.hlibnftables.solibnftables.pclibnftables.3.gz/usr/include//usr/include/nftables//usr/include/nftables/nftables//usr/lib64//usr/lib64/pkgconfig//usr/share/man/man3/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:28999/SUSE_SLE-15-SP3_Update/ed4025453dccbe5250bf320898c5bdb1-nftables.SUSE_SLE-15-SP3_Updatecpioxz5x86_64-suse-linuxdirectoryC source, ASCII textpkgconfig filetroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)PRxWR uZ4PFutf-891d225bf490b6c6e6dace272b27e2ee81c1e72a6431168fe1a1dabfaf9e1f664? 7zXZ !t/!K] crt:bLL ` XJrMM_hE ȒrzHYT0Um)*+ߕy)OPNy OlgĢ}]ًYq+ＰNqUůJP32(DYwe51dAci 'xWj/"-Cfv ` s\c!j8{IبeC׎7e1AQ`E" )P;Uӝl1֞sr׾ҍLܦ|$dgaV,4)<ߥy/Ur|$;(4BYi ]m"TyZaA~ƿ yPg4줾Mj@B1GG3gx/KpC~Uj3ʴBM-2h ysn⁖Ezr"Q=uEKPk}#"aU6G܉P/K%qF?#g^߻PB->r\i!J%,F&MW2D`vlu%l_8; |TFs,QbYM8iQv;KVg: F<OCQ4zSX]Os2b C( ǖ׷&*h1F4f(!+vݞ@D/'X`t=W UZ12wї ?u8"kj@\$AŽDHe k2d!DV mL1h ?Ic2q3ky 4|48 d\_=i t)ꢟJ,DG7_fx^%&؝@:o(:jШ)ܮfdrҖ U ƥ #YGX^RLZ !r`-W݌aY'gSz.n abK:ךU2ܸZ?5MPG $K"(Bx)=$ЗdGHKW9S̶^Ε|uv]GWQV#;elS%K-n}p+kBhw7X#9|@^Pcؠ)|?^֪c^*m ҩv [U:_/U.PB>=Uť1vUWrcmc;x?IWK?J45@`M?#zrN5Kh cRrXIU㊝ye\SIfڂ׏1K޵cw*b&!b#}aFr> ^|Yz+#a {6T'xZ5Ve`ofr&˒4$rlH湓xvtT' і3F]r[`^['COAad%Ca LK*U6N/pz-=5\n^tǩb1,e%ژu+;R ZojUlHdpR)Ti&o>]FT/uwl"B;Z.7b$08ߵ.n2O$yϚLK^>j24̳r{S!Ԙp'>tT>yʮ`7ƪ ګbwcKO AhJ /R971pns3r:/Iz ᆻLXU|\ik>akǓue,BMnE/ 9ʗHQO |2$Xcmp=)JsFd{ d AX`uuXWj,9Vq# = 4-70b2l`Rĵ]>f"Yqm0 MKEux@>h_Ś,[uI!g&vK(vL[#CԜ*8` 'ۇY&0;FLDMYo]K(K^,Dd0hҵ?HxY+ q12w "=־$q֮.V1HK-}WP(FVCj*avl2ۗ<57xcir3cҬչnqU@ζېiYS~7޼m H(uZ @u) 3`K,$cK]?IO\AmF8a9,7Jqۜ]GpG3DXz}[DϹӁf0*Ό:&FؒjĢK **EoljX%Q2pX>LnRE]DVA+ᬠR3M%wiz yX|ҤeB˯boh,7{w.go^b/@odʟUXdz6jш0#ЍV Jȕ}8٪]@Uxuź4AArFs]# qΫo6*CΤ@Ǥ<8p%Nc_52[kk00úIVvbY3㖯_d v =yzoFA8Qjs.PbgI3PLI-1t}Pn8ͫ=7<D{LZZj}PMh%nNy*Tf,6G3،@'=nx]+m vP=A@k2# h-x³ݽϹ_hUS,?Ʒ[htoG3OCD'*Z})9C7stc޾ Ney~s6ݤ_I'$o/Zᐔ{xvhMZ)p^M-N'}yR?{uwelxȩ~ .h?#.-- 6koˊ򗥢"[RW]qCe@#&SZfDҬêF;H#ETS5-_Dn԰]7IO63_q,Љvy8&N&g夷Y\r[u DL8U>Gy[} m\p2 7 %:fkY=An#J|u^\p#/C-0?А +ͦ*:)uk(ٛS=z4lǶnJZ]&Uh -}tGdR)D7G{9[:ڙ5u2xp7bA8H^αexL W=o츟@&L]C6!s83ټJQlE4q1>P*OVZOG\rpyh$BRRU zv%uϘR n*8!a3EK!^Sz(\=(͓7k+{_2=&-KЛ/+BqTS!/71u;hmtcWQ`4Oˎ /D(T\l~`vXf K e]Jc d4v*/O]z]٬͍rSu밊т25jwt.XX3p9'}TqG)9oOZ  T}3=t9 +` RW?:2QAVV2a[P2v]ikN m:Cz^wAӧ]Ǘ?e8 =\*Eb\nL(No\.B YZ