Sync from SUSE:SLFO:Main nftables revision 1b451e0a95ff95804a3c101bcf911a3a
This commit is contained in:
commit
5f01a038a1
23
.gitattributes
vendored
Normal file
23
.gitattributes
vendored
Normal file
@ -0,0 +1,23 @@
|
|||||||
|
## Default LFS
|
||||||
|
*.7z filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.bsp filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.bz2 filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.gem filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.gz filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.jar filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.lz filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.lzma filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.obscpio filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.oxt filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.pdf filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.png filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.rpm filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.tbz filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.tbz2 filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.tgz filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.ttf filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.txz filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.whl filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.xz filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.zip filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.zst filter=lfs diff=lfs merge=lfs -text
|
||||||
24
0001-Revert-py-replace-distutils-with-setuptools.patch
Normal file
24
0001-Revert-py-replace-distutils-with-setuptools.patch
Normal file
@ -0,0 +1,24 @@
|
|||||||
|
From 2125091e724c399d653790af854d9daba0218b99 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Jan Engelhardt <jengelh@inai.de>
|
||||||
|
Date: Mon, 17 Jul 2023 12:13:05 +0200
|
||||||
|
Subject: [PATCH] Revert "py: replace distutils with setuptools"
|
||||||
|
|
||||||
|
This reverts commit 1acc2fd48c755a8931fa87b8d0560b750316059f.
|
||||||
|
---
|
||||||
|
py/setup.py | 2 +-
|
||||||
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||||
|
|
||||||
|
diff --git a/py/setup.py b/py/setup.py
|
||||||
|
index 8ad73e7b..72fc8fd9 100755
|
||||||
|
--- a/py/setup.py
|
||||||
|
+++ b/py/setup.py
|
||||||
|
@@ -1,5 +1,5 @@
|
||||||
|
#!/usr/bin/env python
|
||||||
|
-from setuptools import setup
|
||||||
|
+from distutils.core import setup
|
||||||
|
from nftables import NFTABLES_VERSION
|
||||||
|
|
||||||
|
setup(name='nftables',
|
||||||
|
--
|
||||||
|
2.41.0
|
||||||
|
|
||||||
BIN
nftables-1.0.8.tar.xz
(Stored with Git LFS)
Normal file
BIN
nftables-1.0.8.tar.xz
(Stored with Git LFS)
Normal file
Binary file not shown.
BIN
nftables-1.0.8.tar.xz.sig
Normal file
BIN
nftables-1.0.8.tar.xz.sig
Normal file
Binary file not shown.
376
nftables.changes
Normal file
376
nftables.changes
Normal file
@ -0,0 +1,376 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Fri Jul 14 11:56:43 UTC 2023 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to release 1.0.8
|
||||||
|
* Support for setting meta and ct mark from other fields in
|
||||||
|
rules, e.g. set meta mark to ip dscp header field.
|
||||||
|
* Enhacements for -o/--optimize to deal with NAT statements, to
|
||||||
|
compact masquerade statements.
|
||||||
|
* Support for stateful statements in anonymous maps, such as
|
||||||
|
counters.
|
||||||
|
* Support for resetting stateful expressions in sets, maps and
|
||||||
|
elements, e.g. counters.
|
||||||
|
* broute support to short-circuit bridge logic from the bridge
|
||||||
|
prerouting hook and pass up packets to the local IP stack.
|
||||||
|
* JSON support for table and chain comments.
|
||||||
|
- Added 0001-Revert-py-replace-distutils-with-setuptools.patch
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Mon Mar 13 20:47:53 UTC 2023 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to release 1.0.7
|
||||||
|
* Support for vxlan/geneve/gre/gretap matching
|
||||||
|
* auto-merge support for partial set element deletion
|
||||||
|
* Allow for NAT mapping with concatenation and ranges
|
||||||
|
* Support for quota in sets
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed Dec 21 23:47:26 UTC 2022 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to release 1.0.6
|
||||||
|
* Fix bytecode generation for concatenation of intervals where
|
||||||
|
selectors use different byteorder datatypes, e.g. IPv4
|
||||||
|
(network byte order).
|
||||||
|
* Fix match of uncommon protocol matches with raw expressions
|
||||||
|
* Unbreak insertion of rules with intervals ("sport {
|
||||||
|
3478-3497, 16384-16387 }")
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed Aug 17 19:21:15 UTC 2022 - Dirk Müller <dmueller@suse.com>
|
||||||
|
|
||||||
|
- update to 1.0.5:
|
||||||
|
* Fixes for the -o/--optimize, run this --optimize option to automagically
|
||||||
|
compact your ruleset using sets, maps and concatenations
|
||||||
|
* Fix ethernet and vlan concatenations, eg. define a dynamic set which
|
||||||
|
is populated from the packet path
|
||||||
|
* Fix ruleset listing with interface wildcard map
|
||||||
|
* Fix several regressions in the input lexer which broke valid rulesets.
|
||||||
|
* Fix slowdown with large lists of singleton interval elements.
|
||||||
|
* Fix set automerge feature for large lists of singleton interval elements.
|
||||||
|
* Fix bogus error reporting for exact overlaps.
|
||||||
|
* Fix segfault when adding elements to invalid set.
|
||||||
|
* fix device parsing in netdev family in json.
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Jun 7 14:55:21 UTC 2022 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to release 1.0.4
|
||||||
|
* Fixed a segfault in -o/--optimize with unsupported statements.
|
||||||
|
* Bogus datatype mismatch error report in sets was fixed.
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue May 31 13:34:12 UTC 2022 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to release 1.0.3
|
||||||
|
* Support for wildcard interface name matching with sets
|
||||||
|
* Support for runtime auto-merge of set elements.
|
||||||
|
* Enhancements for the ruleset optimization -o/--optimize
|
||||||
|
option which allows to coalesce several NAT rules into map.
|
||||||
|
* Support for raw expressions in concatenations.
|
||||||
|
* Support for integer type protocol header fields in concatenations.
|
||||||
|
* Allow to reset TCP options (requires Linux kernel >= 5.18)
|
||||||
|
- Drop 0001-build-add-missing-AM_CPPFLAGS-to-examples.patch
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Feb 22 04:39:01 UTC 2022 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to release 1.0.2
|
||||||
|
* New ruleset optimization -o/--optimize option.
|
||||||
|
* Support for IP and TCP options and SCTP chunks in sets.
|
||||||
|
* Support for tcp fastopen, md5sig and mptcp options.
|
||||||
|
* MP-TCP subtype matching support.
|
||||||
|
* JSON support for flowtables.
|
||||||
|
- Add 0001-build-add-missing-AM_CPPFLAGS-to-examples.patch
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Thu Nov 18 22:15:03 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to release 1.0.1
|
||||||
|
* Reduce memory footprint when loading large sets/maps.
|
||||||
|
* Speed up reload of large sets/maps.
|
||||||
|
* Speed up listing of specific tables in large ruleset, e.g.
|
||||||
|
large ruleset with ~100k lines.
|
||||||
|
* Speed up --terse option when listing a ruleset large sets/maps.
|
||||||
|
* Print raw payload expression in hexadecimal, e.g.
|
||||||
|
"@ll,0,8 & 0x80 == 0x80"
|
||||||
|
* egress hook support (available since 5.16-rc1).
|
||||||
|
* Allow matching and update bytes at inner header/payload
|
||||||
|
offset (available since 5.16-rc1).
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Thu Aug 19 18:06:29 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to release 1.0.0
|
||||||
|
* Catch-all set element support.
|
||||||
|
* The command-line option --define is now recognized.
|
||||||
|
* Stateful expressions in maps.
|
||||||
|
* Allow combination of jhash, symhash and numgen expressions with
|
||||||
|
the queue statement.
|
||||||
|
* Allow combination of verdict maps with interval concatenations.
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue May 25 23:20:59 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to release 0.9.9
|
||||||
|
* Flowtable hardware offload support
|
||||||
|
* Support for the table owner flag.
|
||||||
|
* 802.1ad (QinQ) support
|
||||||
|
* cgroupsv2 support.
|
||||||
|
* match on SCTP packet chunks (dependent on Linux 5.14)
|
||||||
|
* Allow to use verdict in set/map typeof definitions
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Fri Jan 15 22:28:26 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to release 0.9.8
|
||||||
|
* Complete support for matching ICMP header content fields.
|
||||||
|
* Added raw tcp option match support.
|
||||||
|
* Added ability to check for the presence of any tcp option.
|
||||||
|
* Support for rejecting traffic from the ingress chain.
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Oct 27 12:08:37 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to release 0.9.7
|
||||||
|
* Support for implicit chains
|
||||||
|
* Support for ingress inet chains
|
||||||
|
* Support for reject from prerouting chain
|
||||||
|
* Support for --terse option in json
|
||||||
|
* Support for the reset command with json
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Jun 16 13:37:28 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to release 0.9.6
|
||||||
|
* Fix two ASAN runtime errors
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Sat Jun 6 12:03:35 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to release 0.9.5
|
||||||
|
* Support for set counters.
|
||||||
|
* Support for restoring set element counters via nft -f.
|
||||||
|
* Counter support for flowtables.
|
||||||
|
* typeof concatenations support for sets.
|
||||||
|
* Support for concatenated ranges in anonymous sets.
|
||||||
|
* Allow to reject packets with 802.1q from the bridge family.
|
||||||
|
* Support for matching on the conntrack ID.
|
||||||
|
- Drop anonset-crashfix.patch (upstream solved differently)
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Thu May 7 11:41:07 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Add anonset-crashfix.patch [boo#1171321]
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed Apr 1 18:48:56 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to release 0.9.4
|
||||||
|
* Add a helper for concat expression handling.
|
||||||
|
* Add "typeof" build/parse/print support.
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Mon Dec 9 09:39:52 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Add json, python [boo#1158723]
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Dec 3 09:09:28 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to release 0.9.3
|
||||||
|
* meta: Introduce new conditions "time", "day" and "hour".
|
||||||
|
* src: add ability to set/get secmarks to/from connection.
|
||||||
|
* flowtable: add support for named flowtable listing.
|
||||||
|
* flowtable: add support for delete command by handle.
|
||||||
|
* json: add support for element deletion.
|
||||||
|
* Add `-T` as the short option for `--numeric-time`.
|
||||||
|
* meta: add ibrpvid and ibrvproto support
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Mon Aug 19 12:37:45 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
|
||||||
|
|
||||||
|
- Update to new upstream release 0.9.2
|
||||||
|
* Transport header port matching, e.g. "th dport 53"
|
||||||
|
* Support for matching on IPv4 options
|
||||||
|
* Support for synproxy
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Sat Jan 19 20:53:09 UTC 2019 - Stefan Brüns <stefan.bruens@rwth-aachen.de>
|
||||||
|
|
||||||
|
- Remove unused dblatex BuildRequires, only needed for the optional
|
||||||
|
and disabled PDF generation (same contents as shipped manpage).
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Sat Jun 9 07:28:57 UTC 2018 - jengelh@inai.de
|
||||||
|
|
||||||
|
- Update to new upstream release 0.9.0
|
||||||
|
* Support to check if packet matches an existing socket.
|
||||||
|
* Support to limit number of active connections by arbitrary
|
||||||
|
criteria, such as ip addresses, networks, conntrack zones or
|
||||||
|
any combination thereof.
|
||||||
|
* Added support for "audit" logging.
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Fri May 11 07:30:10 UTC 2018 - jengelh@inai.de
|
||||||
|
|
||||||
|
- Update to new upstream release 0.8.5
|
||||||
|
* support to add/insert a rule at a given index position
|
||||||
|
* meter statement now supports a configureable upper max size
|
||||||
|
* timeouts for sets can now be specified in milliseconds
|
||||||
|
* re-add iptables-like empty skeleton rulesets
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed May 2 06:08:00 UTC 2018 - jengelh@inai.de
|
||||||
|
|
||||||
|
- Update to new upstream release 0.8.4
|
||||||
|
* Support to match IPv6 segment routing headers.
|
||||||
|
* New "meta ibrname" and "meta obrname" arguments to match the
|
||||||
|
name of the logical bridge a packet is passing through.
|
||||||
|
These new names replace the old (misnamed) "ibriport"/"obriport".
|
||||||
|
* `nft -a` will now show handle identifier for all objects,
|
||||||
|
including tables and chains.
|
||||||
|
* nft can now delete objects by their handle number.
|
||||||
|
* Support to update maps from the ruleset (packet path).
|
||||||
|
* the "--echo" option now prints handle id for tables and
|
||||||
|
object too.
|
||||||
|
* `nft -f -` will now read from standard input
|
||||||
|
* Support for flow tables, cf. man page or
|
||||||
|
https://lwn.net/Articles/738214/ .
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Sat Mar 3 22:59:01 UTC 2018 - jengelh@inai.de
|
||||||
|
|
||||||
|
- Update to new upstream release 0.8.3
|
||||||
|
* raw payload support to match headers that do not yet have
|
||||||
|
received a mnemonic.
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Sat Feb 3 14:26:36 UTC 2018 - jengelh@inai.de
|
||||||
|
|
||||||
|
- Update to new upstream release 0.8.2
|
||||||
|
* add secpath support
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Jan 16 14:16:40 UTC 2018 - jengelh@inai.de
|
||||||
|
|
||||||
|
- Update to new upstream release 0.8.1
|
||||||
|
* This release deprecates the "flow table" syntax in favor
|
||||||
|
of "meter".
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Fri Oct 13 08:39:41 UTC 2017 - jengelh@inai.de
|
||||||
|
|
||||||
|
- Update to new upstream release 0.8
|
||||||
|
* This release contains new features available up to the
|
||||||
|
(upcoming) Linux 4.14 kernel release:
|
||||||
|
* Support for stateful objects, these objects are uniquely
|
||||||
|
identified by a user-defined name, you can refer to them from
|
||||||
|
rules, and there is a well established interface to operate
|
||||||
|
with them.
|
||||||
|
* Sort set elements when listing them, from lower to largest.
|
||||||
|
* TCP option matching and mangling support. This includes TCP
|
||||||
|
maximum segment size mangling.
|
||||||
|
* Add new "-s" option for listings without stateful information.
|
||||||
|
* Add new -c/--check option for nft, to tests if your ruleset
|
||||||
|
loads fine, into the kernel, this is a dry run mode.
|
||||||
|
* Connection tracking helper support.
|
||||||
|
* Add --echo option, to print the handle that the kernel
|
||||||
|
allocates to uniquely identify rules.
|
||||||
|
* Conntrack zone support
|
||||||
|
* Symmetric hash support
|
||||||
|
* Add support to include directories from nft natives scripts,
|
||||||
|
files are loaded in alphanumerical order.
|
||||||
|
* Allow to check if IPv6 extension header or TCP option exists
|
||||||
|
or is missing.
|
||||||
|
* Extend quota support to display used bytes.
|
||||||
|
* Add ct average matching, to match average bytes per packet a
|
||||||
|
connection has transferred so far, to map the existing
|
||||||
|
feature available in the iptables connbytes match.
|
||||||
|
* Allow to flush maps and flow tables.
|
||||||
|
* Allow to embed set definition into an existing set.
|
||||||
|
* Conntrack event filtering support via rule.
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Dec 20 22:35:41 UTC 2016 - jengelh@inai.de
|
||||||
|
|
||||||
|
- Update to new upstream release 0.7
|
||||||
|
* Add new fib expression, which can be used to obtain the
|
||||||
|
output interface from the route table based on either source
|
||||||
|
or destination address of a packet.
|
||||||
|
* Support hashing of any arbitrary key combination, eg.
|
||||||
|
* Add number generation support. Useful for round-robin packet
|
||||||
|
mark setting.
|
||||||
|
* Add quota support, eg.
|
||||||
|
* Introduce routing expression, for routing related data with
|
||||||
|
support for nexthop
|
||||||
|
* Notrack support, to explicitly skip connection tracking for
|
||||||
|
matching packets.
|
||||||
|
* Support to set non-byte bound packet header fields, including
|
||||||
|
checksum adjustment.
|
||||||
|
* Add 'create set' and 'create element' commands.
|
||||||
|
* Allow to use variable reference for set element definitions.
|
||||||
|
* Allow to use variable definitions from element commands.
|
||||||
|
* Add support to flush set. You can use this new command to
|
||||||
|
remove all existing elements in a set.
|
||||||
|
* Inverted set lookups.
|
||||||
|
* Honor absolute and relative paths via include file, where:
|
||||||
|
* Support log flags, to enable logging TCP sequence and options.
|
||||||
|
* tc classid parser support, eg.
|
||||||
|
* Allow numeric connlabels, so if connlabel still works with
|
||||||
|
undefined labels.
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Thu Jun 2 18:31:23 UTC 2016 - jengelh@inai.de
|
||||||
|
|
||||||
|
- Update to new upstream release 0.6
|
||||||
|
* Rules may be replaced now
|
||||||
|
* Flow table support (requires Linux >= 4.3)
|
||||||
|
* Support for tracing
|
||||||
|
* Ratelimiting now supports units like bytes/second.
|
||||||
|
* Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv & RtSol
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Thu Sep 17 21:16:31 UTC 2015 - jengelh@inai.de
|
||||||
|
|
||||||
|
- Update to new upstream release 0.5
|
||||||
|
* Support combinations of two or more selectors to build a tuple
|
||||||
|
* Timeout support for sets
|
||||||
|
* Dormant flag for tables
|
||||||
|
* Default chain policy specifiable on creation
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Sat May 23 23:06:12 UTC 2015 - mrueckert@suse.de
|
||||||
|
|
||||||
|
- set the url to the project page
|
||||||
|
- pass --disable-silent-rules to configure to allow gcc post build
|
||||||
|
check to work
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Dec 16 01:25:00 UTC 2014 - jengelh@inai.de
|
||||||
|
|
||||||
|
- Update to new upstream release 0.4
|
||||||
|
* Since Linux 3.18: support for global ruleset operations
|
||||||
|
* Since 3.17: full logging support for all the families,
|
||||||
|
including nfnetlink_log
|
||||||
|
* 3.16: automatic selection of the optimal set implementation
|
||||||
|
* 3.14: reject support for ip, ip6 and inet
|
||||||
|
* 3.18: reject support for bridge, and reject icmpx abstraction
|
||||||
|
* 3.18: masquerade support
|
||||||
|
* 3.19: redirect support
|
||||||
|
* Extend meta to support pkttype, cpu and devgroup matching.
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Fri Jun 27 17:08:46 UTC 2014 - jengelh@inai.de
|
||||||
|
|
||||||
|
- Update to new upstream release 0.3
|
||||||
|
* More compact syntax for the queue action
|
||||||
|
* Match input and output bridge interface name through "meta
|
||||||
|
ibriport" and "meta obriport"
|
||||||
|
* netlink event monitor, to monitor ruleset events, set changes, etc.
|
||||||
|
* New transaction infrastructure - fully atomic updates for all
|
||||||
|
object available in the upcoming 3.16.
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Mon Jan 13 09:05:35 UTC 2014 - jengelh@inai.de
|
||||||
|
|
||||||
|
- Initial package for build.opensuse.org
|
||||||
64
nftables.keyring
Normal file
64
nftables.keyring
Normal file
@ -0,0 +1,64 @@
|
|||||||
|
-----BEGIN PGP PUBLIC KEY BLOCK-----
|
||||||
|
|
||||||
|
mQINBF+HdQgBEACzteJUJGtj3N6u5mcGh4Nu/9GQfwrrphZuI7jto2N6+ZoURded
|
||||||
|
660mFLnax7wgIE8ugAa085jwFWbFY3FzGutUs/kDmnqy9WneYNBLIAF3ZTFfY+oi
|
||||||
|
V1C09bBlHKDj9gSEM2TZ/qU14exKdSloqcMKSdIqLQX27w/D6WmO1crDjOKKN9F2
|
||||||
|
zjc3uLjo1gIPrY+Kdld29aI0W4gYvNLOo+ewhVC5Q6ymWOdR3eKaP2HIAt8CYf0t
|
||||||
|
Sx8ChHdBvXQITDmXoGPLTTiCHBoUzaJ/N8m4AZTuSUTr9g3jUNFmL48OrJjFPhHh
|
||||||
|
KDY0V59id5nPu4RX3fa/XW+4FNlrthA5V9dQSIPh7r7uHynDtkcCHT5m4mn0NqG3
|
||||||
|
dsUqeYQlrWKCVDTfX/WQB3Rq1tgmOssFG9kZkXcVTmis3KFP1ZAahBRB33OJgSfi
|
||||||
|
WKc/mWLMEQcljbysbJzq74Vrjg44DNK7vhAXGoR35kjj5saduxTywdb3iZhGXEsg
|
||||||
|
9zqV0uOIfMQsQJQCZTlkqvZibdB3xlRyiCwqlf1eHB2Vo7efWbRIizX2da4c5xUj
|
||||||
|
+IL1eSPmTV+52x1dYXpn/cSVKJAROtcSmwvMRyjuGOcTNtir0XHCxC5YYBow6tKR
|
||||||
|
U1hrFiulCMH80HeS+u/g4SpT4lcv+x0DlN5BfWQuN5k5ZzwKb6EQs092qQARAQAB
|
||||||
|
tCxOZXRmaWx0ZXIgQ29yZSBUZWFtIDxjb3JldGVhbUBuZXRmaWx0ZXIub3JnPokC
|
||||||
|
VAQTAQoAPhYhBDfZZKzASYHHVQD7m9Vdl4qKFCDkBQJfh3UIAhsDBQkHhM4ABQsJ
|
||||||
|
CAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJENVdl4qKFCDk0msQAJTIK8TLHw2IJDc6
|
||||||
|
+ZfUJc+znSNwskO+A4lwvb1vRY5qFV+CA2S1eUS4HGDWDT0sPKie6Nx4+FBczkWd
|
||||||
|
RA+eaKDqQeS5Vzc2f0bl74un91h7yE8O2NsVnpL166MnAAk3/ACjHsZX2PzF12F6
|
||||||
|
4stvGQFpjZRWItj0I6bvPY6CTtqVPB98a6RpdbS9kGxCCMrL3CFGDXGSjXes5KwN
|
||||||
|
IvngmVB36wjb3QgEtQIv13jrWFfiXeuieqMRyC6Z3KNYVcvis34eGxPFD9MHrK+w
|
||||||
|
bdw3KzMBJd7hMoVRl32Q13T/PX8H3pqWMqKaL41wHUswRt0IQjNZnRvRnlJ0VDFf
|
||||||
|
Wep/3dFK+uQbdABuiwCiRli5mWeOMCP+qJodP1OZSGqg0VwZWUGdCGG5+qIhngOj
|
||||||
|
QVomvJ7N4eRLU3xuPVjLoBeHzvViUPpYtWQ/YiZK5rWTJHhu88xZaysFJRaV+Uz3
|
||||||
|
wPkeqdArRRXl1Tpy+cKy7D5BZAr7OjT1wboon23IM2DJRurbaHD8blMsjZ07pbvb
|
||||||
|
4hdpiE6mqq7CYskDz2UGTaFfEW4bFnKtvKTXEnmcqc4mWcr2z9BBYouGmcFczgET
|
||||||
|
tE02XejmExXV2RPUtXfLuNIbVpuXG1qhzNuXAfm+S/68XDSFrwyK8/Dgq5ga0iIP
|
||||||
|
n8Uvz12Xu/Qde+NicogLNWF90QJ2iQIzBBABCgAdFiEEwJ2yBj8dcDS6YVKtq0ZV
|
||||||
|
oSbSkuQFAl+HdTEACgkQq0ZVoSbSkuSrmhAAi64OqYjb2ZbAJbFAPM6pijyys6Y9
|
||||||
|
o8ZyLoCRCUXNrjWkNIozTgmj5fm0ECrUXKyrB6OJhTvaRXmqLcBwWOAnP1v7wb+S
|
||||||
|
ZhEwP0n6E1mZW0t1Qt0xX8yifM5Tpvy+757OSrsuoRpXwwz4Ubuc6G4N/McoRSfU
|
||||||
|
tVUcz3sKF8hcbETD/hVZb9Qfv0ZjQxu8LiBfKfgy2Eg8yExTdO027hYqQc5q2HEp
|
||||||
|
HRjD2PMyI33V8KqffWn0AkofweOOFxg1ePV5X9M8rYP+k/2gjPkrrvnZgF/4SxDM
|
||||||
|
FATmHaIbO3zEQg+u2f1mVCZASBBN1MLth7dMOoClHBmxnQ8uapRg9GNxs7TnXmV/
|
||||||
|
diZZbqLf6i9bW/scvWEIdM8EGKpbGjdWIlgQJTIuz3seB+9zOdq9L3uTQWHnYLid
|
||||||
|
R3YkyOsBRqQvM7Gb3zYgvlPjZ+L2FeGg5rD/eeLbv+k027E0TSAgtHoSA2pVTDDK
|
||||||
|
uqCXVKfmk1I0SO83L9teBblxed07LeVaS9/uK00rWM/TM1bwogfF/4ZEsmAWznzv
|
||||||
|
Xan/QmrYNgK3C3AZ4pMX7pGCGV1w93Fw3tUzaEJeS2LlsiL5aPOF63b/DqM6W2nl
|
||||||
|
UqGjKTdVLuF+JgoRH5U2wCyHYhDFm+CaFsYUu2Jf5hTmVWOR3anBoXy6Ty8SoV8q
|
||||||
|
KxtKpmKmIdPhDe65Ag0EX4d1CAEQANJMZApYzeeLrc7Rs6fGDK4Z3ejEST+aq7vO
|
||||||
|
RT9YEppRBG1QoUDBuNodAFxIWM6SpwvN7X9AZeIML2EOjDabF5Q6RNHbwODyLDYc
|
||||||
|
wmqtWh0NNpK85fXwDgcLOQW+dPimsk3ni1crXhhjZgs6syb9yM/pDi0Tf7wzNZt0
|
||||||
|
0p736zlpQPMORfO+mFgac0FVt/GQsTdIwTBzZ36fcV3W8iPH334Sqsatp617R+z+
|
||||||
|
q2alH8Vynz12iHi2oJFtmTxhghCROPcLWz3XMKv9A7BfuZeE0k+pK7xnBKrpZzKU
|
||||||
|
k1j2uzTKzV2Bquo5HNDsy9PgQn16BlXVrxdHfQnBz2w67aHMKnPD/v+K81oxtnuk
|
||||||
|
pwBAT8Wovkyy1VTLhQH5F0y5bpQrVH/Lwq0/q421hfD3iPHtb2tC1heT9ze/sqkY
|
||||||
|
plctFb81fx3o8xcBpvuIaTB3URptf8JNvh5KjETZFMQvAddq8oYovoKu+Z/585uC
|
||||||
|
qwO0Fohpw9qRwmhq7UBvGDVAVgo6kKjMW2Z9U3OnfggrDCytCIZh8eLNagfRL2cu
|
||||||
|
iq8Sx+cGGt1zoCPhjDN1MaNt/KHm8Gxr+lP+RxH3Et3pEX6mmhSCaU4wr0W5Bf3p
|
||||||
|
jEtiOwnqajisBQCHh49OGiV8Vg9uQN5GpLpPpbvnGS4vq8jdj6p3gsiS2F7JMy7O
|
||||||
|
ysBENBkXABEBAAGJAjwEGAEKACYWIQQ32WSswEmBx1UA+5vVXZeKihQg5AUCX4d1
|
||||||
|
CAIbDAUJB4TOAAAKCRDVXZeKihQg5NMIEACBdwXwDMRB8rQeqNrhbh7pjbHHFmag
|
||||||
|
8bPvkmCq/gYGx9MQEKFUFtEGNSBh6m5pXr9hJ9HD2V16q9ERbuBcA6wosz4efQFB
|
||||||
|
bbage7ZSECCN+xMLirQGRVbTozu2eS8FXedH0X9f0JWLDGWwRg+pAqSOtuFjHhYM
|
||||||
|
jVpwbH/s71BhH84x5RgWezh2BWLbP3UuY7JtWNAvAaeo53Js2dzzgjDopPis4qZR
|
||||||
|
rLR9cTGjqa6ZTc/PlLfaCsm6rGBlNx/bFJjz75+yn7vMQa47fOBt4qfriHX7G/Tg
|
||||||
|
3s8xsQSLEm3IBEYh27hoc9ZD45EXgm9ZiGA21t9v1jA27yTVaUrPbC40iDv/CMcQ
|
||||||
|
7N2Y1sJRvmrd+2pKxtNNutujjwgBguo5bKK253R5Hy0a+NzK2LSc/GmR8EJJEwW1
|
||||||
|
7r6road7Ss6YImCZExeY+CAW0FEzwQpmqfOdlusvIyk4x4r12JH8Q8NWHMzU3Ym/
|
||||||
|
yqdopn/SCwCfXJsL4/eHLCaWuyiWjljNa7MwPDITx2ZPRE5QEqCqi4gaDWXyVHt8
|
||||||
|
leGE1G3zoXNJogWhDswh105UnlZEEfOvbHbaxgWPjLV/xkuHhVlaqdyXbTExrgK6
|
||||||
|
U2wevNS03dBuQ6bjNIbMIt9ulbiBV8MJWR0PZtnNJ958f1QXC4GT+L3FG1g5Jtz+
|
||||||
|
rlbu70nh2kSJrg==
|
||||||
|
=wukb
|
||||||
|
-----END PGP PUBLIC KEY BLOCK-----
|
||||||
129
nftables.spec
Normal file
129
nftables.spec
Normal file
@ -0,0 +1,129 @@
|
|||||||
|
#
|
||||||
|
# spec file for package nftables
|
||||||
|
#
|
||||||
|
# Copyright (c) 2023 SUSE LLC
|
||||||
|
#
|
||||||
|
# All modifications and additions to the file contributed by third parties
|
||||||
|
# remain the property of their copyright owners, unless otherwise agreed
|
||||||
|
# upon. The license for this file, and modifications and additions to the
|
||||||
|
# file, is the same license as for the pristine package itself (unless the
|
||||||
|
# license for the pristine package is not an Open Source License, in which
|
||||||
|
# case the license is the MIT License). An "Open Source License" is a
|
||||||
|
# license that conforms to the Open Source Definition (Version 1.9)
|
||||||
|
# published by the Open Source Initiative.
|
||||||
|
|
||||||
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
||||||
|
#
|
||||||
|
|
||||||
|
|
||||||
|
Name: nftables
|
||||||
|
Version: 1.0.8
|
||||||
|
Release: 0
|
||||||
|
Summary: Userspace utility to access the nf_tables packet filter
|
||||||
|
License: GPL-2.0-only
|
||||||
|
Group: Productivity/Networking/Security
|
||||||
|
URL: https://netfilter.org/projects/nftables/
|
||||||
|
|
||||||
|
#Git-Clone: git://git.netfilter.org/nftables
|
||||||
|
Source: http://ftp.netfilter.org/pub/%name/%name-%version.tar.xz
|
||||||
|
Source2: http://ftp.netfilter.org/pub/%name/%name-%version.tar.xz.sig
|
||||||
|
Source3: %name.keyring
|
||||||
|
Patch1: 0001-Revert-py-replace-distutils-with-setuptools.patch
|
||||||
|
BuildRequires: asciidoc
|
||||||
|
BuildRequires: bison
|
||||||
|
BuildRequires: flex
|
||||||
|
BuildRequires: gmp-devel
|
||||||
|
BuildRequires: libtool
|
||||||
|
BuildRequires: pkg-config >= 0.21
|
||||||
|
BuildRequires: python3-base
|
||||||
|
BuildRequires: pkgconfig(jansson)
|
||||||
|
BuildRequires: pkgconfig(libedit)
|
||||||
|
BuildRequires: pkgconfig(libmnl) >= 1.0.4
|
||||||
|
BuildRequires: pkgconfig(libnftnl) >= 1.2.6
|
||||||
|
BuildRequires: pkgconfig(xtables) >= 1.6.1
|
||||||
|
|
||||||
|
%description
|
||||||
|
nf_tables is a firewalling mechanism in the Linux kernel, running
|
||||||
|
independently of and parallel to ip_tables, ip6_tables,
|
||||||
|
arp_tables and ebtables. nftables is the corresponsing userspace
|
||||||
|
frontend.
|
||||||
|
|
||||||
|
The nftables frontend features support for sets and dictionaries of arbitrary
|
||||||
|
types, meta data types, atomic incremental and full ruleset updates, and,
|
||||||
|
similar to iptables, support for different protocols, access to connection
|
||||||
|
tracking and NAT and logging.
|
||||||
|
|
||||||
|
%package -n libnftables1
|
||||||
|
Summary: nftables firewalling command interface
|
||||||
|
Group: System/Libraries
|
||||||
|
|
||||||
|
%description -n libnftables1
|
||||||
|
libnftables is the nftables command line interface placed into a
|
||||||
|
library.
|
||||||
|
|
||||||
|
%package devel
|
||||||
|
Summary: Development files for the nftables command line interface
|
||||||
|
Group: Development/Libraries/C and C++
|
||||||
|
Requires: libnftables1 = %version
|
||||||
|
|
||||||
|
%description devel
|
||||||
|
libnftables is the nftables command line interface placed into a
|
||||||
|
library.
|
||||||
|
|
||||||
|
This package contains the header files for the library.
|
||||||
|
|
||||||
|
%package -n python3-nftables
|
||||||
|
Summary: Python interface for nftables
|
||||||
|
Group: Development/Languages/Python
|
||||||
|
|
||||||
|
%description -n python3-nftables
|
||||||
|
A Python module for nftables.
|
||||||
|
|
||||||
|
%prep
|
||||||
|
%autosetup -p1
|
||||||
|
|
||||||
|
%build
|
||||||
|
autoreconf -fi
|
||||||
|
mkdir bin
|
||||||
|
ln -s "%_bindir/docbook-to-man" bin/docbook2x-man
|
||||||
|
export PATH="$PATH:$PWD/bin"
|
||||||
|
mkdir obj
|
||||||
|
pushd obj/
|
||||||
|
%define _configure ../configure
|
||||||
|
%configure --disable-silent-rules --disable-static --docdir="%_docdir/%name" \
|
||||||
|
--includedir="%_includedir/%name" --with-json \
|
||||||
|
--enable-python --with-python-bin="$(which python3)"
|
||||||
|
%make_build
|
||||||
|
popd
|
||||||
|
|
||||||
|
%install
|
||||||
|
b="%buildroot"
|
||||||
|
%make_install -C obj
|
||||||
|
rm -f "%buildroot/%_libdir"/*.la
|
||||||
|
mkdir -p "$b/%_docdir/%name/examples"
|
||||||
|
mv -v "$b/%_datadir/nftables"/*.nft "$b/%_docdir/%name/examples/"
|
||||||
|
|
||||||
|
%post -n libnftables1 -p /sbin/ldconfig
|
||||||
|
%postun -n libnftables1 -p /sbin/ldconfig
|
||||||
|
|
||||||
|
%files
|
||||||
|
%license COPYING
|
||||||
|
%_sysconfdir/nftables/
|
||||||
|
%_sbindir/nft
|
||||||
|
%_mandir/man5/*.5*
|
||||||
|
%_mandir/man8/nft*
|
||||||
|
%_docdir/%name/
|
||||||
|
|
||||||
|
%files -n libnftables1
|
||||||
|
%_libdir/libnftables.so.1*
|
||||||
|
|
||||||
|
%files devel
|
||||||
|
%_includedir/%name/
|
||||||
|
%_libdir/libnftables.so
|
||||||
|
%_libdir/pkgconfig/*.pc
|
||||||
|
%_mandir/man3/*.3*
|
||||||
|
|
||||||
|
%files -n python3-nftables
|
||||||
|
%python3_sitelib/nftables*
|
||||||
|
|
||||||
|
%changelog
|
||||||
Loading…
Reference in New Issue
Block a user