Displaying 20 results from an estimated 7000 matches similar to: "[ANNOUNCE] nftables 0.7 release"
2017 Oct 12
0
[ANNOUNCE] nftables 0.8 release
Hi!
The Netfilter project proudly presents:
nftables 0.8
This release contains new features available up to the (upcoming)
Linux 4.14 kernel release:
* Support for stateful objects, these objects are uniquely identified by
a user-defined name, you can refer to them from rules, and there is a
well established interface to operate with them, eg.
# nft add counter filter test
2020 Apr 01
0
[ANNOUNCE] nftables 0.9.4 release
Hi!
The Netfilter project proudly presents:
nftables 0.9.4
This release contains fixes and new features available up to the Linux
kernel 5.6 release.
* Support for ranges in concatenations (requires Linux kernel >= 5.6),
e.g.
table ip foo {
set whitelist {
type ipv4_addr . ipv4_addr . inet_service
flags interval
2016 Jun 02
0
[ANNOUNCE] nftables 0.6 release
Hi!
The Netfilter project proudly presents:
nftables 0.6
This release contains many accumulated bug fixes and new features
availale up to the Linux 4.7-rc1 kernel release.
New features
============
* Rule replacement: You can replace any rule from the unique 64-bits
handle. You have to retrieve the handle from the ruleset listing.
# nft list ruleset -a
table ip filter {
chain
2020 Oct 27
0
[ANNOUNCE] nftables 0.9.7 release
Hi!
The Netfilter project proudly presents:
nftables 0.9.7
This release contains fixes and new features available up to the Linux
kernel 5.10-rc1 release.
* Support for implicit chain, e.g.
table inet x {
chain y {
type filter hook input priority 0;
tcp dport 22 jump {
ip saddr { 127.0.0.0/8, 172.23.0.0/16, 192.168.13.0/24 }
2014 Dec 16
0
[ANNOUNCE] nftables 0.4 release
Hi!
The Netfilter project proudly presents:
nftables 0.4
This release contains a lot of bug fixes and new features contained up
to the recent 3.18 kernel release (and some features coming up in the
yet unreleased 3.19-rc).
New features
============
* Add support for global ruleset operations (available since 3.18).
Get rid of all tables, chains, and rules in one go:
# nft
2020 Jun 06
0
[ANNOUNCE] nftables 0.9.5 release
Hi!
The Netfilter project proudly presents:
nftables 0.9.5
This release contains fixes and new features available up to the Linux
kernel 5.7 release.
* Support for set counters:
table ip x {
set y {
typeof ip saddr
counter
elements = { 192.168.10.35, 192.168.10.101, 192.168.10.135 }
}
2015 Sep 17
0
[ANNOUNCE] nftables 0.5 release
Hi!
The Netfilter project proudly presents:
nftables 0.5
This release contains bug fixes and new features contained up to the
4.2 kernel release.
New features
============
* Concatenations: You can combine two or more selectors to build a
tuple, then use it to look up for a matching in sets, eg.
% nft add rule ip filter input ip saddr . tcp dport { \
1.1.1.1 . 22 , \
2018 Jan 16
0
[ANNOUNCE] nftables 0.8.1 release
Hi!
The Netfilter project proudly presents:
nftables 0.8.1
This release contains mostly incremental fixes and documentation
updates, such as fixing up ./configure --with-mini-gmp for embedded
setups that don't have libgmp.
Deprecated syntax
=================
This release deprecates the "flow table" syntax in favor of "meter" to
address Netfilter's bugzilla
2014 Apr 14
0
[ANNOUNCE]: Release of nftables 0.2
The netfilter project presents:
nftables 0.2
This release contains a rather large number of bug fixes, syntax cleanups,
new features, support for all new features contained in the recent 3.14
kernel release as well as *drumroll* documentation.
Syntax changes
==============
* More consistency in data type names
Data type names are used in set declarations. All address related types
now
2020 Jan 30
2
[Bug 1402] New: Race errors with nft
https://bugzilla.netfilter.org/show_bug.cgi?id=1402
Bug ID: 1402
Summary: Race errors with nft
Product: nftables
Version: unspecified
Hardware: All
OS: Debian GNU/Linux
Status: NEW
Severity: normal
Priority: P5
Component: nft
Assignee: pablo at netfilter.org
2018 Feb 18
5
[Bug 1228] New: [REGRESSION] nft cannot load big set anymore
https://bugzilla.netfilter.org/show_bug.cgi?id=1228
Bug ID: 1228
Summary: [REGRESSION] nft cannot load big set anymore
Product: nftables
Version: unspecified
Hardware: x86_64
OS: other
Status: NEW
Severity: normal
Priority: P5
Component: nft
Assignee: pablo at netfilter.org
2016 Dec 19
0
[ANNOUNCE] libnftnl 1.0.7 release
Hi!
The Netfilter project proudly presents:
libnftnl 1.0.7
libnftnl is a userspace library providing a low-level netlink
programming interface (API) to the in-kernel nf_tables subsystem. The
library libnftnl has been previously known as libnftables. This library
is currently used by the nft command line tool.
This release includes the following list of updates:
* New nftnl_rule_cmp()
2023 Apr 07
3
[Bug 1671] New: Implicit chains and nesting result in parser_bison.y aborting
https://bugzilla.netfilter.org/show_bug.cgi?id=1671
Bug ID: 1671
Summary: Implicit chains and nesting result in parser_bison.y
aborting
Product: nftables
Version: 0.9.x
Hardware: x86_64
OS: Debian GNU/Linux
Status: NEW
Severity: major
Priority: P5
Component: nft
2019 Jul 11
2
[Bug 1352] New: After adding map type ipv4_addr : counter it behaves as a set
https://bugzilla.netfilter.org/show_bug.cgi?id=1352
Bug ID: 1352
Summary: After adding map type ipv4_addr : counter it behaves
as a set
Product: nftables
Version: unspecified
Hardware: x86_64
OS: Debian GNU/Linux
Status: NEW
Severity: normal
Priority: P5
Component:
2020 Oct 26
3
[Bug 1477] New: Unable to use saved ruleset when using dynamic sets
https://bugzilla.netfilter.org/show_bug.cgi?id=1477
Bug ID: 1477
Summary: Unable to use saved ruleset when using dynamic sets
Product: nftables
Version: unspecified
Hardware: x86_64
OS: All
Status: NEW
Severity: normal
Priority: P5
Component: nft
Assignee: pablo at
2018 Dec 14
1
[Bug 1309] New: Error: Hostname resolves to multiple addresses
https://bugzilla.netfilter.org/show_bug.cgi?id=1309
Bug ID: 1309
Summary: Error: Hostname resolves to multiple addresses
Product: nftables
Version: unspecified
Hardware: x86_64
OS: All
Status: NEW
Severity: enhancement
Priority: P5
Component: nft
Assignee: pablo at
2020 Aug 13
7
[Bug 1449] New: nft ipv4 set with interval issue
https://bugzilla.netfilter.org/show_bug.cgi?id=1449
Bug ID: 1449
Summary: nft ipv4 set with interval issue
Product: nftables
Version: unspecified
Hardware: x86_64
OS: other
Status: NEW
Severity: blocker
Priority: P5
Component: nft
Assignee: pablo at netfilter.org
2023 Jul 21
0
[Bug 1650] fail to add missing element to nft sets after running some time - file exists
https://bugzilla.netfilter.org/show_bug.cgi?id=1650
--- Comment #5 from Wang Jian <larkwang at gmail.com> ---
>
> This internal:0:0-0 is incorrect error reporting.
>
> Could you run nftables with git HEAD? It contains this fix:
>
> commit 5e39a34b196d68b803911aa13066fef2f83dc98c
> Author: Pablo Neira Ayuso <pablo at netfilter.org>
> Date: Mon Mar 27 16:36:31
2019 Mar 30
4
[Bug 1330] New: Parse error for importing set with netmask
https://bugzilla.netfilter.org/show_bug.cgi?id=1330
Bug ID: 1330
Summary: Parse error for importing set with netmask
Product: nftables
Version: unspecified
Hardware: All
OS: All
Status: NEW
Severity: major
Priority: P5
Component: nft
Assignee: pablo at netfilter.org
2020 Feb 05
3
[Bug 1406] New: nft dies with an assertion of consumed > 0
https://bugzilla.netfilter.org/show_bug.cgi?id=1406
Bug ID: 1406
Summary: nft dies with an assertion of consumed > 0
Product: nftables
Version: unspecified
Hardware: x86_64
OS: Gentoo
Status: NEW
Severity: major
Priority: P5
Component: nft
Assignee: pablo at netfilter.org