Matthias Gerstner mgerstner
  • Joined on 2024-10-09
mgerstner commented on pull request jengelh/nftables#2 2025-04-22 15:25:46 +02:00
nftables.keyring: update with new netfilter public key

When exactly will the build service pull this change? It is supposed to notice changes automatically, right?

mgerstner created pull request jengelh/nftables#2 2025-04-22 12:28:21 +02:00
nftables.keyring: update with new netfilter public key
mgerstner pushed to master at mgerstner/nftables 2025-04-22 12:27:48 +02:00
41436c84e1 nftables.keyring: update with new netfilter public key
mgerstner pushed to master at mgerstner/nftables 2025-04-22 12:24:05 +02:00
ab9c179ebd nftables 1.1.2
0e32a110ae Update 0001-tools-add-a-systemd-unit-for-static-rulesets.patch
ee8a28dc13 Add 0001-tools-add-a-systemd-unit-for-static-rulesets.patch
fcf56aa719 Make build recipe POSIX sh compatible
Compare 4 commits »
mgerstner commented on pull request jengelh/nftables#1 2025-03-10 12:55:06 +01:00
Implement nftables.service for static firewall configurations (bsc#1237277)

Now that the change is in Tumbleweed I notice that the behaviour of systemctl start nftables.service is still a bit unfortunate. Even if the service is not configured (config file condition…

mgerstner commented on pull request jengelh/nftables#1 2025-03-03 14:43:40 +01:00
Implement nftables.service for static firewall configurations (bsc#1237277)

I incorporated your suggestions and some other fixes

mgerstner pushed to master at mgerstner/nftables 2025-03-03 14:43:17 +01:00
c434951062 nftables service improvements
mgerstner commented on pull request jengelh/nftables#1 2025-03-03 14:00:38 +01:00
Implement nftables.service for static firewall configurations (bsc#1237277)

A thanks for forwarding that to upstream. No reaction so far, though, it seems.

mgerstner commented on pull request jengelh/nftables#1 2025-02-28 14:03:17 +01:00
Implement nftables.service for static firewall configurations (bsc#1237277)

Placing config files in /usr/etc when they are not read from that location also seems a bit strange; traditionally (open)SUSE would put such files in %_docdir instead.

True. This whole…

mgerstner commented on pull request jengelh/nftables#1 2025-02-28 14:01:41 +01:00
Implement nftables.service for static firewall configurations (bsc#1237277)
  • the Netfilter wiki casually puts the ruleset in /etc/nftables.rules and /etc/nftables/*
  • Arch…
mgerstner commented on pull request jengelh/nftables#1 2025-02-28 09:56:54 +01:00
Implement nftables.service for static firewall configurations (bsc#1237277)

I'm not throwing in the towel, I'm fulfilling a customer request. I looked at what other distributions do. This here is not perverting an upstream approach, it is filling a gap. I can approach…

mgerstner commented on pull request jengelh/nftables#1 2025-02-27 15:44:30 +01:00
Implement nftables.service for static firewall configurations (bsc#1237277)

I can add a Conflicts= statement to the systemd unit to prevent accidental activation of both this service and firewalld. SUSEFirewall is not a candidate here since it is deprecated and doesn't…

mgerstner commented on pull request jengelh/nftables#1 2025-02-27 15:34:34 +01:00
Implement nftables.service for static firewall configurations (bsc#1237277)

It's not colliding, because it is the responsibility of the system admin not to use both at the same time. And we do have a customer request to add this service.

mgerstner created pull request jengelh/nftables#1 2025-02-27 12:03:35 +01:00
Implement nftables.service for static firewall configurations (bsc#1237277)
mgerstner pushed to master at mgerstner/nftables 2025-02-27 12:02:23 +01:00
71d8541655 Implement nftables.service for static firewall configurations (bsc#1237277)
mgerstner created repository mgerstner/nftables 2025-02-19 12:39:07 +01:00