search for: kfm

...populating a set Product: nftables Version: unspecified Hardware: x86_64 OS: Gentoo Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: kfm at plushkava.net Created attachment 580 --> https://bugzilla.netfilter.org/attachment.cgi?id=580&action=edit bash script that reproduces the issue filed Recently, I was assisting somebody in the course of adjusting some scripts that generate an ipset consisting of IPv6 bogons, so as to u...

...-- Andreas Schulze Internetdienste | P252 DATEV eG 90329 N?rnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 N?rnberg, Paumgartnerstr. 6-14 | Registergericht N?rnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Dipl.-Kfm. Dr. Robert Mayr J?rg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

...ruleset in Linux 5.0 Product: nftables Version: unspecified Hardware: x86_64 OS: Gentoo Status: NEW Severity: normal Priority: P5 Component: kernel Assignee: pablo at netfilter.org Reporter: kfm at plushkava.net After upgrading one of my machines from 4.19.26 to 5.0, I encountered a crash during the boot process. This occurs at a point where nft(8) is invoked with the -c option, so as to test the validity of the previously saved ruleset. I was able to reduce the entire ruleset to just one...

https://bugzilla.netfilter.org/show_bug.cgi?id=1434 Bug ID: 1434 Summary: Usability improvements, enabling creation of complex firewalls Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft

https://bugzilla.netfilter.org/show_bug.cgi?id=1438 Bug ID: 1438 Summary: nft generates wrong intervals for sets with auto-merge Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: major Priority: P5 Component: nft Assignee: pablo

https://bugzilla.netfilter.org/show_bug.cgi?id=1380 Bug ID: 1380 Summary: please enable adding networks to named set Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=1330 Bug ID: 1330 Summary: Parse error for importing set with netmask Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: major Priority: P5 Component: nft Assignee: pablo at netfilter.org

...ce left on device" Product: nftables Version: unspecified Hardware: x86_64 OS: Gentoo Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: kfm at plushkava.net This bug is somewhat related to bug 1392. As explained there, I was unable to atomically re-populate a set by issuing a "flush set" command followed by an "add element" command within the same command stream. Eventually this was resolved by upgrading to nftable...

...-- Andreas Schulze Internetdienste | P532 DATEV eG 90329 N?rnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 N?rnberg, Paumgartnerstr. 6-14 | Registergericht N?rnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider J?rg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

...s root Product: nftables Version: unspecified Hardware: x86_64 OS: other Status: NEW Severity: normal Priority: P5 Component: iptables over nftable Assignee: pablo at netfilter.org Reporter: kfm at plushkava.net Created attachment 581 --> https://bugzilla.netfilter.org/attachment.cgi?id=581&action=edit iptables-nft-trace.txt.xz As per the summary. The steps to reproduce here are to initialize a ruleset: printf '%s\n' '*filter' :{INPUT,FORWARD,OUTPUT}' ACCE...

...asses or is there one-on-one training available? Does one "go to" R for programming training ... or do R workshops travel around the country? Thanks for your time. Darin Brooks Geomatics/GIS/Remote Sensing Coordinator Kim Forest Management Ltd. Cranbrook Office Cranbrook, BC www.kfm.ca <http://www.kfm.ca/> [[alternative HTML version deleted]]

...-- Andreas Schulze Internetdienste | P532 DATEV eG 90329 N?rnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 N?rnberg, Paumgartnerstr. 6-14 | Registergericht N?rnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider J?rg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen -------------- next part -------------- A non-text attachment was scrubbed... Name: GnuPG-Signatur.asc Type...

...ed as hyphenated ranges Product: nftables Version: unspecified Hardware: x86_64 OS: Gentoo Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: kfm at plushkava.net Sometimes, the list set command expresses intervals as ranges rather than in CIDR notation. I do not understand what the criteria is for doing so, exactly. When it happens, the attached timeout values are not reported. Here are some demonstrations, which were carried out with nft...

...-- Andreas Schulze Internetdienste | P532 DATEV eG 90329 N?rnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 N?rnberg, Paumgartnerstr. 6-14 | Registergericht N?rnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider J?rg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen -------------- next part -------------- A non-text attachment was scrubbed... Name: GnuPG-Signatur.asc Type...

...cerning sets, maps and meters Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: kfm at plushkava.net Depends on: 1312, 1330, 1392, 1438, 1444, 1449, 1451, 1454 This is intended as a meta-bug, so as to make it easier to track the bugs that affect the behaviour of sets, maps and meters - something that is otherwise becoming increasingly difficult. To do so, I am adding some...

https://bugzilla.netfilter.org/show_bug.cgi?id=1197 Bug ID: 1197 Summary: 255.255.255.255 is transformed into 255.255.255.255-255.255.255.255 Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft

...r variable interpolation Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: kfm at plushkava.net This is another feature request extracted from bug 1434 (the "usability" bug). Currently, variable interpolation isn't supported by the parser. The originally given example was as follows. define LOG_PREFIX = "[foo] " table inet filter { chain inpu...

Hi, In my 1.2 setup I have pop3 running on ip x.x.x.2 and imap on x.x.x.7 In 2.0 how do I say listen x.x.x.2:110 x.x.x.7:143 so that pop3 is not listening on the .7 ip? I tried putting a listen = ip in the listener section but it complained. I cant figure it out and cant seem to find any 2.0 specific documentation, trying to search in the wiki directory of /usr/local/share/doc/dovecot/wiki but

...-- Andreas Schulze Internetdienste | P252 DATEV eG 90329 N?rnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 N?rnberg, Paumgartnerstr. 6-14 | Registergericht N?rnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Dipl.-Kfm. Dr. Robert Mayr J?rg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

https://bugzilla.netfilter.org/show_bug.cgi?id=1180 Bug ID: 1180 Summary: Can't create a set with both timeout and interval flags at the same time Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5