similar to: [Bug 1467] New: [sets] support adaptive (escalating) rule(s)

https://bugzilla.netfilter.org/show_bug.cgi?id=1468 Bug ID: 1468 Summary: [netdev] dropping ether type vlan frames drops ICMPv6 type 134 Product: nftables Version: unspecified Hardware: other OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component:

https://bugzilla.netfilter.org/show_bug.cgi?id=1473 Bug ID: 1473 Summary: [log] not printing in combination with ct state and set update a/o rate limit Product: nftables Version: unspecified Hardware: arm OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5

https://bugzilla.netfilter.org/show_bug.cgi?id=1465 Bug ID: 1465 Summary: [vmap] ct state concatenation not working Product: nftables Version: unspecified Hardware: All OS: Debian GNU/Linux Status: NEW Severity: minor Priority: P5 Component: nft Assignee: pablo at

https://bugzilla.netfilter.org/show_bug.cgi?id=1472 Bug ID: 1472 Summary: [sets] global named sets that can be utilised across families Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft

https://bugzilla.netfilter.org/show_bug.cgi?id=1483 Bug ID: 1483 Summary: v0.9.7 does not compile for arm-linux-gnueabihf Product: nftables Version: unspecified Hardware: arm OS: Debian GNU/Linux Status: NEW Severity: blocker Priority: P5 Component: nft Assignee: pablo at

https://bugzilla.netfilter.org/show_bug.cgi?id=994 Bug ID: 994 Summary: Named sets with type "ipv4_addr" do not allow adding CIDR elements Product: nftables Version: unspecified Hardware: x86_64 OS: other Status: NEW Severity: enhancement Priority: P5

https://bugzilla.netfilter.org/show_bug.cgi?id=1687 Bug ID: 1687 Summary: Define set of set with in ipset list:sets Product: nftables Version: 1.0.x Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at

https://bugzilla.netfilter.org/show_bug.cgi?id=1484 Bug ID: 1484 Summary: configure script fails to detect python3 Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at

On 1/9/20 2:08 AM, Pete Biggs wrote: >> Has anyone created a fail2ban filter for this type of attack? As of >> right now, I have manually banned a range of IP addresses but would >> like to automate it for the future. >> > As far as I can see fail2ban only deals with hosts and not networks - I > suspect the issue is what is a "network": It may be obvious to

https://bugzilla.netfilter.org/show_bug.cgi?id=1399 Bug ID: 1399 Summary: tables/chains priority doesn't work Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5 Component: kernel Assignee: pablo at

Is there a way to restrict my user logins from a set of IPs? For example, all my users are in the US so there shouldn't be any logins from other countries. Can I tell dovecot to restrict logins to a CIDR list of US IPs? Can someone point me to docs on how to set this up? I've searched but haven't found how to accomplish this. Thanks, -Terry Terry Barnum digital OutPost

https://bugzilla.netfilter.org/show_bug.cgi?id=1338 Bug ID: 1338 Summary: Can't add IPv6 concatenation rule Product: netfilter/iptables Version: unspecified Hardware: All OS: All Status: NEW Severity: major Priority: P5 Component: nfnetlink_queue Assignee: netfilter-buglog

https://bugzilla.netfilter.org/show_bug.cgi?id=1206 Bug ID: 1206 Summary: segfault when snat map rule has been added Product: nftables Version: unspecified Hardware: x86_64 OS: Ubuntu Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=1471 Bug ID: 1471 Summary: consider quick accept verdict and delayed drop policy Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at

Hello. Thanks for the reply. Yes. In the traffic analyzed, the BYE is sent by the originator of the call, but there is no "human" hangup, but the asterisk one. BYE is sent, received and confirmed. I don't know how I could investigate the reason for this BYE. Em 21/09/2020 17:12, Dovid Bender escreveu: > Is there anything in the Asterisk logs? Which side sends the BYE? Were

In my new Centos7 BIND DNS server, I am seeing messages in logwatch about GeoIP. Something new for me to learn about, and it seems, configure. Checking to see what packages are available I find: GeoIP.armv7hl 1.5.0-11.el7 @centos-base_rbf GeoIP-data.noarch 1.5.0-11.el7 base GeoIP-devel.armv7hl 1.5.0-11.el7 base

https://bugzilla.netfilter.org/show_bug.cgi?id=1466 Bug ID: 1466 Summary: [sets] add support for combination of counter and limit Product: nftables Version: unspecified Hardware: All OS: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5 Component: nft

https://bugzilla.netfilter.org/show_bug.cgi?id=1470 Bug ID: 1470 Summary: [sets] improve flags combination Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at netfilter.org

I sent this to the author of geoip a few days ago and haven''t heard back, yet. Since he may be on vacation or busy, somebody may also hit this problem in the mean time, I figured I''d post the patch + git repo I sent him here. Unicorn users: The pread(2)/pwrite(2) syscalls are very useful for making libraries like this one (that rely on an on-disk database) compatible with

I have the GeoIP gem working in my local environment (OSX), but when I move the code to our dev server (Ubuntu) via scp then it doesn''t work - it looks like the file is being treated like a text file instead of binary: >> g = GeoIP.new("#{RAILS_ROOT}/lib/GeoIP.dat") NoMethodError: undefined method `bytes'' for "ved":String from