search for: nurealm

...ocumentation Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: james at nurealm.net Arch Linux nftables 1:0.9.0-1 On the wiki: https://wiki.nftables.org/wiki-nftables/index.php/Sets the example is shown: % nft add set filter blackhole { type ipv4_addr\;} where man 8 nft shows: add set [family] table set { type type ; ... } the "family" is shown as optional. &...

...to-load modules Product: nftables Version: unspecified Hardware: x86_64 OS: other Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: james at nurealm.net Arch Linux linux 5.2.5.arch1-1 nftables 1:0.9.1-1 For clarity, removing any nat rules, then: ... table inet nats { chain prenats { type nat hook prerouting priority -100; } chain postnats { type nat hook postrouting priority 100; } } ... $ sudo /etc/nf...

...nSSH_2.3.0p1, protocol versions 1.5/2.0. Compiled with SSL (0x0090581f). debug: Reading configuration data /home/james/.ssh/config debug: Applying options for sapphire debug: Reading configuration data /etc/ssh/ssh_config debug: ssh_connect: getuid 500 geteuid 0 anon 0 debug: Connecting to sapphire.nurealm.net [199.45.155.11] port 22. debug: Seeding random number generator debug: Allocated local port 765. debug: Connection established. debug: Remote protocol version 2.0, remote software version OpenSSH_2.3.0p1 debug: no match: OpenSSH_2.3.0p1 Enabling compatibility mode for protocol 2.0 debug: Local...

...from a file Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: james at nurealm.net After working with "named sets", it would be convenient for nft to learn to automatically import the "elements" for a "named set" from an external file, when that list might be very long, as when, for instance, creating a drop rule for addresses provided from ipde...

..., auto-merge Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: james at nurealm.net Arch Linux nftables 1:0.9.0-1 nft(8) man page SETS add set [<address_family>] <table_name> <set_name> { type <type_spec> ; [flags <flag_spec> ;] [timeout <timeout_spec> ;] [gc-interval <gc-interval_spec> ;] [elements = { <element>[,...] } ;] [...

Everything seems to work, though I still have trouble with scp. The behaviour is not protocol dependent - acts the same with either. (Using RedHat 6.2) When I scp <file> <host>:<dir>, bash is invoked as a login shell on the server side host - this doesn't seem right. With my /etc/profile, I get Dec 6 15:06:20 amethyst sshd[3027]: error: select: Bad file descriptor in