search for: borrero

Hi! Thanks to Eric Leblond and Arturo Borrero who have now become emeritus members of the coreteam. Eric Leblond joined the coreteam in 2012 for his continuous contributions to the project since 2005 with a particular interest in the nfnetlink_* subsystems that allow to send packets and logs to user space, as well as to nftables. Eric Leblond...

https://bugzilla.netfilter.org/show_bug.cgi?id=1087 Bug ID: 1087 Summary: Window Tracking not disabled Product: conntrack-tools Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: conntrack-daemon Assignee: netfilter-buglog

https://bugzilla.netfilter.org/show_bug.cgi?id=1032 Arturo Borrero Gonzalez <arturo.borrero.glez at gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |arturo.borrero.glez at gmail.c |...

https://bugzilla.netfilter.org/show_bug.cgi?id=1347 Bug ID: 1347 Summary: ebtables-nft: regression in -o option Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: iptables over nftable Assignee:

https://bugzilla.netfilter.org/show_bug.cgi?id=1073 Bug ID: 1073 Summary: inet-service vs icmp conflict Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter:

https://bugzilla.netfilter.org/show_bug.cgi?id=1298 Bug ID: 1298 Summary: Issue with REJECT in custom chains Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: iptables over nftable Assignee: pablo

...es (requires kernel 4.10-rc). ... and fixes. You can download this library from: http://www.netfilter.org/projects/libnftnl/downloads.html ftp://ftp.netfilter.org/pub/libnftnl/ Thanks! -------------- next part -------------- Anders K. Pedersen (1): src: introduce rt expression Arturo Borrero (2): expr: lookup: give support for inverted matching src: remove libmxml support Arturo Borrero Gonzalez (1): src: update Arturo Borrero Gonzalez email Carlos Falgueras García (19): src: Fix leak in nftnl_*_unset() chain: Check correct attribute src: fix missi...

https://bugzilla.netfilter.org/show_bug.cgi?id=965 Summary: Deleting rules using "position" keyword deletes all rules for chain Product: nftables Version: unspecified Platform: x86_64 OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: nft

https://bugzilla.netfilter.org/show_bug.cgi?id=1394 Bug ID: 1394 Summary: "Bad argument `ACCEPT'" when iptables-restore (nft) parses stdin Product: iptables Version: unspecified Hardware: x86_64 URL: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=9462 89

...mediatedate label in xml and json file tests: New tools to update xml and json testfiles tests: Add support to check a json or xml testfile tests: Fix a memory leak target, match: Fix an invalid read set-elem: fix a memory leak lookup: Fix an invalid read Arturo Borrero (8): src: update meta expr examples: nft-set-get: retrieve all sets via unspec examples: add nft-ruleset-get include: add stdint.h to common.h src: check if netlink parsing fails set_elems: delete unexisting exported symbol set_elem: parse family from Netli...

...sed as statistics collector as well. See ChangeLog that comes attached to this email for more details. You can download it from: http://www.netfilter.org/projects/conntrack-tools/downloads.html ftp://ftp.netfilter.org/pub/conntrack-tools/ Have fun! -------------- next part -------------- Arturo Borrero (2): man: fix hyphen used as minus sign nfct: don't link against libnetfilter_conntrack Arturo Borrero Gonzalez (2): list: fix prefetch dummy doc/debian.conntrackd.init.d: drop file Ash Hughes (1): conntrackd: userspace SSDP helper Chas Williams III (1): c...

...http://www.netfilter.org/projects/iptables/downloads.html ftp://ftp.netfilter.org/pub/iptables/ Have fun! -------------- next part -------------- Ana Rey (1): extensions: libxt_udp: add translation to nft Arpan Kapoor (1): libxtables: Replace gethostbyname() with getaddrinfo() Arturo Borrero (3): extensions/libxt_rpfilter.man: fix typo, specifiy vs specify iptables/xtables-arp.c: fix typo, wierd vs weird extensions/libxt_tcp: fix nftables translate flags value, 'none' vs '0x0' Arturo Borrero Gonzalez (1): extensions: update Arturo Borrero email...

https://bugzilla.netfilter.org/show_bug.cgi?id=1162 Bug ID: 1162 Summary: oops in nft_rbtree_insert Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: kernel Assignee: pablo at netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=1196 Bug ID: 1196 Summary: nft does not allow comments within sets: Error: syntax error, unexpected newline Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5

...nce, check man(8) nft. In case of bugs and feature request, file them via: * https://bugzilla.netfilter.org Happy firewalling! [1] https://wiki.nftables.org/wiki-nftables/index.php/Moving_from_iptables_to_nftables#using_the_nf_tables_compat_backend -------------- next part -------------- Arturo Borrero Gonzalez (1): doc/nft.xml: mention nftables earlier Florian Westphal (2): meta: add secpath support doc: dup and fwd statements Harsha Sharma (1): tests: shell: fetch rule handle with '-a' option and then delete rule Pablo M. Bermudo Garay (1): update gitign...

...kful to all the contributors of arptables over time and we also acknowledge it is time to move on. See ChangeLog that comes attached to this email for more details. You can download it from: ftp://ftp.netfilter.org/pub/arptables/ Happy firewalling. -------------- next part -------------- Arturo Borrero Gonzalez (2): arptables: cleanup sysvinit script arptables: legacy renaming Bart De Schuymer (2): add GPL text arptables: fix potential buffer overflow (author: dcb) Felix Janda (2): src: Use stdint types src: Remove support for libc5 Gustavo Zacarias (1):...

...be used as statistics collector as well. See ChangeLog that comes attached to this email for more details. You can download it from: http://www.netfilter.org/projects/libnftnl/downloads.html ftp://ftp.netfilter.org/pub/libnftnl/ Happy firewalling. -------------- next part -------------- Arturo Borrero Gonzalez (2): conntrackd.conf.8: fix state filter example docs: refresh references to /proc/net/core/rmem_default Ash Hughes (2): conntrackd: search for RPC headers conntrackd: Use strdup in lexer Brian Haley (1): conntrack: Allow protocol number zero Jan-Martin Rae...

...tools Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: conntrack-daemon Assignee: netfilter-buglog at lists.netfilter.org Reporter: arturo.borrero.glez at gmail.com IPv6 kernel filtering seems broken in conntrackd 1.4.3 with Linux kernel 4.4. The test is simple: * configure a two node conntrackd cluster to sync connections * configure IPv6 kernelspace filtering * launch `conntrack -E' to see conntrack events in both nodes * launch s...

https://bugzilla.netfilter.org/show_bug.cgi?id=1292 Bug ID: 1292 Summary: issue with -f fragment option Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: iptables over nftable Assignee: pablo at

...sen (4): rt: introduce routing expression Replace tests/files/expr-rt with Python based tests, and replace ether type with meta nfproto, which generates a bit fewer instructions. evaluate: Allow concatenation of rt nexthop etc. doc: fix synopsis for ct expression Arturo Borrero (3): tests: shell: delete unused variable in run-tests.sh tests: shell: cleanup tempfile handling in testcases/sets/cache_handling_0 tests: shell: run-tests.sh: use src/nft binary by default Arturo Borrero Gonzalez (12): tests: shell: update kernel modules to clean xt...