similar to: [ANNOUNCE] arptables 0.0.5 release

https://bugzilla.netfilter.org/show_bug.cgi?id=1307 Bug ID: 1307 Summary: Implement interface for 'ipv4_addr' in arptables Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at

I have a CentOS box that acts as a packet filter/firewall with iptables but the box itself isn't able to reach internet : here why : Internet ----- public IP|ISP router|private IP ----- private IP + public IP/32 + public IP subnet/29|my CentOS fw|private network/dmz As you can see my provider gave us a /29 public ip subnet but behind a private IP subnet (192.168.X.X/24 - used for the

Hi! The Netfilter project proudly presents: iptables 1.6.0 This release includes accumulated fixes and enhancements for the following matches: * ah * connlabel * cgroup * devgroup * dst * icmp6 * ipcomp * ipv6header * quota * set * socket * string and targets: * CT * REJECT * SET * SNAT * SNPT,DNPT * SYNPROXY * TEE We also got rid of the very very old MIRROR and SAME targets and the

Nothing Earth-shattering here, but it has been quite some time (well over a year!) since the last release. There has been little activity other than a few minor bugfixes. But, this is probably a reasonable time to do a release that to make things easier on the packaging folks: webpage: https://wiki.samba.org/index.php/LinuxCIFS_utils tarball: ftp://ftp.samba.org/pub/linux-cifs/cifs-utils/

Hi! The Netfilter project proudly presents: iptables 1.8.3 iptables is the userspace command line program used to configure the Linux 2.4.x and later packet filtering ruleset. It is targeted towards system administrators. See ChangeLog that comes attached to this email for more details. You can download it from: http://www.netfilter.org/projects/iptables/downloads.html

https://bugzilla.netfilter.org/show_bug.cgi?id=1239 Bug ID: 1239 Summary: Linux 3.2.0 kernel doesn't support ARPT_SO_GETINFO etc. queries any more Product: netfilter/iptables Version: unspecified Hardware: arm OS: other Status: NEW Severity: critical Priority: P5

The network-bridge script fails when setting a few sysctls which are only available if ebtables is present in the host kernel. Fix by ignoring the return value of the sysctl command. Signed-off-by: Avi Kivity <avi@qumranet.com> Index: xen/tools/examples/network-bridge =================================================================== --- xen/tools/examples/network-bridge (revision 991)

Hi everyone, When i start a libvirt domain (on KVM) with network filtering (using filterref clean-traffic for example), the filter works ! But ... i don't understand how/why it works :( Indeed when i look at ebtables -L iptables-save & arptables-save (and KVM command), I see no filtering rules (which is surprising because clean-traffic requires at least ebtables to be installed). Is it

http://bugzilla.netfilter.org/show_bug.cgi?id=768 Summary: Returns the position the entry was inserted Product: iptables Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: libiptc AssignedTo: netfilter-buglog at lists.netfilter.org

On Fri, Apr 20, 2018 at 02:26:11AM -0400, Chunyu Hu wrote: > Hello, > > I am seeing qxl driver is not working in my kvm machine with kernel 4.17, > (4.16 failed too). I'd like to consult your expert is there a fix for it > now? https://www.kraxel.org/cgit/linux/log/?h=drm-qxl-release cheers, Gerd

Hi, Finally, the long promised CPU performance counter provider has arrived into Nevada build 109! For those that need an injection of excitement at the start of the week, you can check out some usage examples on my blog: http://blogs.sun.com/jonh/entry/finally_dtrace_meets_the_cpu Also, you can find a new section for the provider in the DTrace docs:

I had a major HD failure and need to rebuild my host server and the virtual servers that resided on it. I am moving from CentOS 5.6 to CentOS 6.3. I am using the same configuration, as best as I can tell, that was working only hours ago on 5.6 but does not work on 6.3. My guest server can see network traffic on the bridged network device but I cannot seem to interact with it. Iptables turned

Zsmalloc is ready for page migration so zram can use __GFP_MOVABLE from now on. I did test to see how it helps to make higher order pages. Test scenario is as follows. KVM guest, 1G memory, ext4 formated zram block device, for i in `seq 1 8`; do dd if=/dev/vda1 of=mnt/test$i.txt bs=128M count=1 & done wait `pidof dd` for i in `seq 1 2 8`; do rm -rf mnt/test$i.txt done

Hi all, I order to reach maximum performance on my centos kvm hosts I have use these params: - On /etc/grub.conf: kernel /vmlinuz-2.6.18-164.11.1.el5 ro root=LABEL=/ elevator=deadline quiet - On sysctl.conf # Special network params net.core.rmem_default = 8388608 net.core.wmem_default = 8388608 net.core.rmem_max = 16777216 net.core.wmem_max = 16777216

Hi! The Netfilter project proudly presents: libnetfilter_conntrack 1.0.5 libnetfilter_conntrack is a userspace library providing a programming interface (API) to the in-kernel connection tracking state table. The library libnetfilter_conntrack has been previously known as libnfnetlink_conntrack and libctnetlink. This library is currently used by conntrack-tools among many other

libpciaccess is used by the Xorg server to interface with the appropriate routines for finding and using PCI bus devices on various operating systems. This release includes musl build fixes, improvements to the Solaris backend and allows parsing separate sysfs files rather than reading the config file on newer kernels. Adam Jackson (1): chmod a-x README.cygwin Chuck Tuffli (1):

Hello, I'm just wondering why I can't manage my network interfaces through libvirt when the following kernel parameters are turned on: net.bridge.bridge-nf-call-ip6tables net.bridge.bridge-nf-call-iptables net.bridge.bridge-nf-call-arptables Is it a bug or by design? If the latter, could someone explain me premises of such decision? I'm aware of security implications of mixing

Hello! Recently,I¡¯m doing a security project based upon ipv6.I have built up a bridge to support a transparent firewall.(my system is Fedora Core 2,kernel 2.6.5).In this system ,the version of the iptables is 1.2.7,which does not support ipv6(I have tried it).Thus,I download a new version and test it. The iptables functions in bridge mode,but the ipv6 doesn't work well.In the

Hi! The Netfilter project presents: ebtables 2.0.11 ebtables is the userspace command line program used to configure the Linux 2.4.x and bridge packet filtering ruleset. It is targeted towards system administrators. NOTE: This is a release of legacy software. Patches may still be accepted and pushed out to the git repository, which will remain active and accessible as usual although

Hy Guys, I''m reading a book called "UML Components - A Simple Process for Specifying Component Based Software" (by John Cheesman and Jonh Daniels) and i was wandering if this kind of development is possible on Ruby and Rails as well. Has anyone tried to develop in rails using a Component-Based development approach? Thanks in advance, and sorry if it is a stupid question. :)