similar to: [Bug 1009] Ability to use CIDR notation in IPV4/IPV6 named sets

https://bugzilla.netfilter.org/show_bug.cgi?id=1009 Pablo Neira Ayuso <pablo at netfilter.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |admin at rollinix.net --- Comment #3 from Pablo Neira Ayuso <pablo at netfilter.org> --- *** Bug 994

https://bugzilla.netfilter.org/show_bug.cgi?id=1009 Vadim A. Misbakh-Soloviov (mva) <netfilter at mva.name> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |netfilter at mva.name --- Comment #1 from Vadim A. Misbakh-Soloviov (mva) <netfilter at

https://bugzilla.netfilter.org/show_bug.cgi?id=1009 Pablo Neira Ayuso <pablo at netfilter.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #2 from Pablo Neira Ayuso <pablo at netfilter.org> --- There are already kernel

https://bugzilla.netfilter.org/show_bug.cgi?id=1009 Pablo Neira Ayuso <pablo at netfilter.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution|--- |FIXED --- Comment #4 from Pablo Neira Ayuso

https://bugzilla.netfilter.org/show_bug.cgi?id=1009 Pablo Neira Ayuso <pablo at netfilter.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jason.lee.campbell at gmail.co | |m --- Comment #5 from

https://bugzilla.netfilter.org/show_bug.cgi?id=994 Bug ID: 994 Summary: Named sets with type "ipv4_addr" do not allow adding CIDR elements Product: nftables Version: unspecified Hardware: x86_64 OS: other Status: NEW Severity: enhancement Priority: P5

https://bugzilla.netfilter.org/show_bug.cgi?id=1373 Bug ID: 1373 Summary: [ipset] ability to use a more complex mask on hash:*net* functionality for family ipv6 Product: ipset Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5

https://bugzilla.netfilter.org/show_bug.cgi?id=1730 Bug ID: 1730 Summary: nft does not handle IPv6 addresses with embedded IPv4 addresses Product: nftables Version: 1.0.x Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft

https://bugzilla.netfilter.org/show_bug.cgi?id=840 Summary: Specifying CIDR when adding to a hash:ip entry is silently ignored Product: ipset Version: unspecified Platform: All OS/Version: All Status: NEW Severity: minor Priority: P5 Component: default AssignedTo:

https://bugzilla.mindrot.org/show_bug.cgi?id=3544 Bug ID: 3544 Summary: Support CIDR notation for host pattern matching Product: Portable OpenSSH Version: 9.1p1 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: Miscellaneous Assignee:

https://bugzilla.netfilter.org/show_bug.cgi?id=616 --- Comment #5 from - <kd6lvw at yahoo.com> 2013-07-09 03:45:06 CEST --- Re: Comment #4. One doesn't know what the addresses are until they are retrieved from the DNS. The point is that the routines which generate the rules are NOT checking the values AFTER the CIDR netmask is applied to eliminate POST-MASK duplicate answers. The

Yesterday I cloned one of my VMs and, somewhat implausibly, it took virt-clone something like 8-9 hours to clone the 8Gb disk image... Copying it from the command line took a mere 6.5 minutes. I assume this is a bug, and it's not expected to take this long ;-) This was using virt-clone from python-virtinst-0.500.2-1.fc12.noarch in the virt-preview repository. Tom -- Tom Hughes (tom at

https://bugzilla.netfilter.org/show_bug.cgi?id=616 Phil Oester <netfilter at linuxace.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |WONTFIX --- Comment #10 from Phil Oester

https://bugzilla.netfilter.org/show_bug.cgi?id=1380 Bug ID: 1380 Summary: please enable adding networks to named set Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=616 --- Comment #6 from Phil Oester <netfilter at linuxace.com> 2013-07-09 03:50:27 CEST --- Yes, I fully understand what is happening in the one specific example you have provided. However you need to answer what happens if Cloudmark suddenly decides to add an IP _OUTSIDE_ of that /22 that is assigned to them. Let's say they open a new

http://bugzilla.netfilter.org/show_bug.cgi?id=616 Summary: Duplicate rules for multi-homed hostnames. IPv4 and IPv6 inconsistent treatment. Product: iptables Version: unspecified Platform: i386 OS/Version: All Status: NEW Severity: minor Priority: P4 Component: iptables

https://bugzilla.netfilter.org/show_bug.cgi?id=1300 Bug ID: 1300 Summary: nft(8) - man page - SETS - missing descriptions and explanations - flags, auto-merge Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5

https://bugzilla.netfilter.org/show_bug.cgi?id=1097 Bug ID: 1097 Summary: TARPIT function does not work in ip6tables Product: netfilter/iptables Version: unspecified Hardware: x86_64 OS: Ubuntu Status: NEW Severity: normal Priority: P5 Component: ip6_tables (kernel) Assignee:

https://bugzilla.netfilter.org/show_bug.cgi?id=1327 Bug ID: 1327 Summary: Cannot use named set for matching IPv4 networks Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: major Priority: P5 Component: nft Assignee: pablo at

http://bugzilla.netfilter.org/show_bug.cgi?id=597 Summary: ip6tables connlimit - cannot set CIDR greater than 32 (includes fix) Product: iptables Version: unspecified Platform: All OS/Version: All Status: NEW Severity: major Priority: P1 Component: ip6tables AssignedTo: laforge