libnftables1-0.9.8-150300.3.6.1 < > , o db'p9|b ntTʃYR&ٺ.C3&O"g& mB~Z0;)`q"ih>Rb0
n$ZɯPϪO&ӹ>5ev1`r
ʤ\ꛟez q9 Ϙ}Z5 Iz&4}S vvo $
Ȃ){ V*F])ލ
TSnk#d ,3)Z=ňN?Ifq9"3!H|` \ط > @ ' ? ' d " I C I T \ `
d l
L ( / 8 8 9 : = > $k @ $z F $ G $ H $ I $ X $ Y $ \ $ ] $ ^ % b %& c % d &R e &W f &Z l &\ u &p v &x w ' x ' y ' z '` 'p 't 'z ' C libnftables1 0.9.8 150300.3.6.1 nftables firewalling command interface libnftables is the nftables command line interface placed into a
library. db'ibs-centriq-3 FXSUSE Linux Enterprise 15 SUSE LLC GPL-2.0-only https://www.suse.com/ System/Libraries https://netfilter.org/projects/nftables/ linux aarch64 FX db'db' dd65b56e3fd5aa2a079026614365127bbd44ff8e5e485d0269760aa666f348b9 libnftables.so.1.0.0 root root root root nftables-0.9.8-150300.3.6.1.src.rpm libnftables.so.1()(64bit) libnftables1 libnftables1(aarch-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.22)(64bit) libc.so.6(GLIBC_2.27)(64bit) libgmp.so.10()(64bit) libjansson.so.4()(64bit) libmnl.so.0()(64bit) libmnl.so.0(LIBMNL_1.0)(64bit) libnftnl.so.11()(64bit) libnftnl.so.11(LIBNFTNL_11)(64bit) libnftnl.so.11(LIBNFTNL_13)(64bit) libnftnl.so.11(LIBNFTNL_14)(64bit) libnftnl.so.11(LIBNFTNL_15)(64bit) libnftnl.so.11(LIBNFTNL_16)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 dGbo`_ ^@^ۅ@^@^@]7@]N@]Z@\C@[@ZZ@Z@Zu@Z]@YXY @WP U@U`kT matthias.gerstner@suse.com matthias.gerstner@suse.com jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de stefan.bruens@rwth-aachen.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de mrueckert@suse.de jengelh@inai.de - add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
fixes a crash in nftables if layer2 reject rules are processed (e.g.
Ethernet MAC address based reject rich rule in firewalld, bsc#1210773). - add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
crashes that could occur e.g. in firewalld (bsc#1197606). - Update to release 0.9.8
* Complete support for matching ICMP header content fields.
* Added raw tcp option match support.
* Added ability to check for the presence of any tcp option.
* Support for rejecting traffic from the ingress chain. - Update to release 0.9.7
* Support for implicit chains
* Support for ingress inet chains
* Support for reject from prerouting chain
* Support for --terse option in json
* Support for the reset command with json - Update to release 0.9.6
* Fix two ASAN runtime errors - Update to release 0.9.5
* Support for set counters.
* Support for restoring set element counters via nft -f.
* Counter support for flowtables.
* typeof concatenations support for sets.
* Support for concatenated ranges in anonymous sets.
* Allow to reject packets with 802.1q from the bridge family.
* Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently) - Add anonset-crashfix.patch [boo#1171321] - Update to release 0.9.4
* Add a helper for concat expression handling.
* Add "typeof" build/parse/print support. - Add json, python [boo#1158723] - Update to release 0.9.3
* meta: Introduce new conditions "time", "day" and "hour".
* src: add ability to set/get secmarks to/from connection.
* flowtable: add support for named flowtable listing.
* flowtable: add support for delete command by handle.
* json: add support for element deletion.
* Add `-T` as the short option for `--numeric-time`.
* meta: add ibrpvid and ibrvproto support - Update to new upstream release 0.9.2
* Transport header port matching, e.g. "th dport 53"
* Support for matching on IPv4 options
* Support for synproxy - Remove unused dblatex BuildRequires, only needed for the optional
and disabled PDF generation (same contents as shipped manpage). - Update to new upstream release 0.9.0
* Support to check if packet matches an existing socket.
* Support to limit number of active connections by arbitrary
criteria, such as ip addresses, networks, conntrack zones or
any combination thereof.
* Added support for "audit" logging. - Update to new upstream release 0.8.5
* support to add/insert a rule at a given index position
* meter statement now supports a configureable upper max size
* timeouts for sets can now be specified in milliseconds
* re-add iptables-like empty skeleton rulesets - Update to new upstream release 0.8.4
* Support to match IPv6 segment routing headers.
* New "meta ibrname" and "meta obrname" arguments to match the
name of the logical bridge a packet is passing through.
These new names replace the old (misnamed) "ibriport"/"obriport".
* `nft -a` will now show handle identifier for all objects,
including tables and chains.
* nft can now delete objects by their handle number.
* Support to update maps from the ruleset (packet path).
* the "--echo" option now prints handle id for tables and
object too.
* `nft -f -` will now read from standard input
* Support for flow tables, cf. man page or
https://lwn.net/Articles/738214/ . - Update to new upstream release 0.8.3
* raw payload support to match headers that do not yet have
received a mnemonic. - Update to new upstream release 0.8.2
* add secpath support - Update to new upstream release 0.8.1
* This release deprecates the "flow table" syntax in favor
of "meter". - Update to new upstream release 0.8
* This release contains new features available up to the
(upcoming) Linux 4.14 kernel release:
* Support for stateful objects, these objects are uniquely
identified by a user-defined name, you can refer to them from
rules, and there is a well established interface to operate
with them.
* Sort set elements when listing them, from lower to largest.
* TCP option matching and mangling support. This includes TCP
maximum segment size mangling.
* Add new "-s" option for listings without stateful information.
* Add new -c/--check option for nft, to tests if your ruleset
loads fine, into the kernel, this is a dry run mode.
* Connection tracking helper support.
* Add --echo option, to print the handle that the kernel
allocates to uniquely identify rules.
* Conntrack zone support
* Symmetric hash support
* Add support to include directories from nft natives scripts,
files are loaded in alphanumerical order.
* Allow to check if IPv6 extension header or TCP option exists
or is missing.
* Extend quota support to display used bytes.
* Add ct average matching, to match average bytes per packet a
connection has transferred so far, to map the existing
feature available in the iptables connbytes match.
* Allow to flush maps and flow tables.
* Allow to embed set definition into an existing set.
* Conntrack event filtering support via rule. - Update to new upstream release 0.7
* Add new fib expression, which can be used to obtain the
output interface from the route table based on either source
or destination address of a packet.
* Support hashing of any arbitrary key combination, eg.
* Add number generation support. Useful for round-robin packet
mark setting.
* Add quota support, eg.
* Introduce routing expression, for routing related data with
support for nexthop
* Notrack support, to explicitly skip connection tracking for
matching packets.
* Support to set non-byte bound packet header fields, including
checksum adjustment.
* Add 'create set' and 'create element' commands.
* Allow to use variable reference for set element definitions.
* Allow to use variable definitions from element commands.
* Add support to flush set. You can use this new command to
remove all existing elements in a set.
* Inverted set lookups.
* Honor absolute and relative paths via include file, where:
* Support log flags, to enable logging TCP sequence and options.
* tc classid parser support, eg.
* Allow numeric connlabels, so if connlabel still works with
undefined labels. - Update to new upstream release 0.6
* Rules may be replaced now
* Flow table support (requires Linux >= 4.3)
* Support for tracing
* Ratelimiting now supports units like bytes/second.
* Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv & RtSol - Update to new upstream release 0.5
* Support combinations of two or more selectors to build a tuple
* Timeout support for sets
* Dormant flag for tables
* Default chain policy specifiable on creation - set the url to the project page
- pass --disable-silent-rules to configure to allow gcc post build
check to work - Update to new upstream release 0.4
* Since Linux 3.18: support for global ruleset operations
* Since 3.17: full logging support for all the families,
including nfnetlink_log
* 3.16: automatic selection of the optimal set implementation
* 3.14: reject support for ip, ip6 and inet
* 3.18: reject support for bridge, and reject icmpx abstraction
* 3.18: masquerade support
* 3.19: redirect support
* Extend meta to support pkttype, cpu and devgroup matching. /sbin/ldconfig /sbin/ldconfig ibs-centriq-3 1684154257 0.9.8-150300.3.6.1 0.9.8-150300.3.6.1 libnftables.so.1 libnftables.so.1.0.0 /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:28999/SUSE_SLE-15-SP3_Update/ed4025453dccbe5250bf320898c5bdb1-nftables.SUSE_SLE-15-SP3_Update drpm xz 5 aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1fb6eb7615c567f8df604e6cedd9ae2b398e6e97, stripped P R R R R R R R R R R
R
R R R R R !4>$ utf-8 42989421240870126ef91c5320c1721ae1b0e813baaef1040ac1e844432376a4 ? 7zXZ
! t/VB] "k%f0]dZaȗ2v=ZB T#IŁSg7_jU3#x$ 9F
n9s0xOh3LA%qVܴ9DC= jbƋ9 < l̈́>;Bfcjh8$݃R * ]|*p63ziȦnX`ݚP_O˻jH9۳q!ueq"ysE eP)H40^2ƧhS9E )(NMfc{b~-L*.en i7 5 oke5r@gw`〸d0W.ג 3%kqkR'rs-)`VޕDGZ :q˛٤ Z _M='3EgB!<5#-Z(OsI(4H8x*옳/?S0ɹ# / \1ΊI[b'myR!}ծt6qU Y2yovQ$9 }yϑ7.
T5s0TP2f<רQE
z*g04C[7uȈ´ [a C1Y;Bc)oː /s[
lhǴ#T)UF1&GʣZ@qV;w`+JÒ"c5˨ b1i;8˿[P7X|pR sV ث%nE Bx ;c1&, PhNQ"/5ZDV lb Dr S%(̜L~EjOm!=LV'ߕt<6"g1%N$X{x ;7`إ&b$Qqbl\"(V\\s.>E|lH-@r:.m
,w45
NU52áwܺfSƦǰ3Qфiē5tthC% vݲa) k3`x5!16$$ 3}H}"@ҊOP+(Քh Ch9'~u#%܊J(OQrJ>8\Є$Uc_$;/n1%]9YnZAet];kvyUinB2Q87͚
<-7J]A_>!vSMLH` n1~FJ~8L Yt:?!G$mt F= 7F_$b "9}Ѳ!xF=6K)Q֕ lu2d̚wn
ѻ*?/±E19lsG&g(2+!k N**b8%+{ݩy,gZUK_)#0cпB,k^%x~,\j 76tf~mX
ef4f/=f
BpXOG>o_$:PD()ai< I:00IĠ 8lPj~RuLqy&|vZ#{ʠY`
M诧C?_i0[a2- $CRr'8AJjڵX ~j/t٣^#(LF?lQs}֥f=u~g iXC
ӢȀ_|ۉ쨠"!8A rk=_~Օ"ތ^1dIҔWwRmG%]
sǧ54BҒG;k~ v y3@lᱻsCÍ!JO k0ܚb;u,-Gi._V U섻3)ȏ:ŭ@ܘaeFϢ1K]+*s,:LF<@ q}bmFr!)ސA^*+9)
t ': S4r+i?V#E?~-Kz5m.Hr1[&T>]4 Sr'2{L8Qs BQմ L{M%{U%yȽIƎ}o `HљDr0"Lcc=mɗbV&5(#~M*CO 3H\tos߄5ե ~m9Vi= + FX_ȟd4`$5i|{'݃J'ZQ_D>4Yvo'q|]ȄJPX(C#) T#˅{$Mc 06$m L#?:*մ:3M/?F~
U{WR1$#ܵ CiA
gZ^8g\GʦJXnG~ŜWOzSF_X"t3LjOW'Ѫ!
W> 5VcF]O~5U 9ì R] ,C
^xMZ&] :n Q!GEsҗtӂHPBfΎ0[&,^c SƽiF{
* b`L?B^I*A
U#FSyx|'1 &o` >oMܔyc֭nw;dzTh4i9`b\p &ݏ?Z{yuܢEQ;.>Kڲ}
_Su1괷XNaB%KU!%9WL_9W_Os*Um/0LD%+Tw~J iƲ뫙Ig]!9yfQM\6nʧ9 \h\y-gp~%Wm ,槿˵ӢnwEIM|L+ܳ;C\s'+3B܆!e[f?Y! ^t@#CݓAI= ?b Ye°+xnB
2<`.(z]Y\
jeq 1rM7u+ѫ۾4{I~at%r^Yk6#fP9C 5L3Ja+`iQ\[YLrBc||=OLA T] _"=i!SV xp۾-&f4K Lή@3s52X`=gܛˑbf0LL> 0 a?#;1h5pLD8ud$EaPaD9N]]A&UjMtpc7Y-Q,qfDPut9{= ̤f>{pD8t:)b֟>#tpѹV 2xw`=)RG' xϾ=XClᨬ;2]* Uvj-rhGs%+?:
:5=pL;M^6MgjP?TUzP{h)QEwPu] v$(z{gq g/ ;@ 6|D}f֮Vƙ˞*|[-y&T7&Gնl]z-b[ڲy(X^
JSv'%
KiwϻJyarU/AH
]pK4yScUV{ٛNq-rʘsC#4vϑf7>htYA HmNht< cf =5M\9ok#C [#F=nTN _9Za;liRno9L`D~π} UTucGn5EVK[?#n&KSiވ% @i[0/bXMl S+W¡ 8v$7WLdG ͡vVOUW cH bIP7gmL!]˟~ӫrqqDXb~}[?|_֔ 4ފ p'O͵kArS H ssiY<E _L5^1Tsmt0ǔy(;[/h/ dUwF&]\r
Jz.+<9c'Hr=`0"qT> RFtv. &CDu ͳY4mcW GA8
u\DsǕXj
ɿ !Qހ}cN\7=Β~I+oVu0 -u˵1q2Sh;Dk>W8 Qf*2vPJZZ(E_tm-dY
SQV!/ԩߑA1JŐ 5DA TJ_ZWq
\0"y x~bv~Gu}: /l~ Ԉh<8CaEf^e1BngJޱcҜQ}ߪɺ=w6͗2'?ʠA#$&p-,i Ϸ#ڞxK@;yLhͭd5\j Dhbes:CFr =h* !l=g@pVl2=JŚcgh'?Bf%>"z^ux"yP1&Bc? u^žBLj| 4/4ĿZlOK \]
hNzQ@O^9VϪ E^/ Ϋ`dPc~sS좊pъåCH4^#@s#/Kc屺 @McQϕm H5QUw>C " =d]@Fo6)sVBZ~^#w4"D@*z lG_lC MCG(Q5mT Zb,-퓡 @ ^kbAhh#ݨhTq ʽvN33GV 55^C4ӶnbOW%v,V RWuàa
cG
OQ2 ?ÿ\P(McvX9?.\_I_8.mFpKne&|̬iT|gʌ
S7&J' wU|W hY-?f(s *6;C7+bP W%\T qܠlf3=Wħkyz _{/U/ -8^>?3&:B#
%:' : $ R uU"![O{[6r78{2
%BD#OU
īxZD6c 4Kkl/q 劭c$ {7䛬Q}B.y`v98"@Pkw_UӖ~[Xv&Mx}hTЄK{P stqJzm( m2A$ ZCo2F11.qKՖDi d˫ DLܭY@`" @CvXsn58< ̕
\|}R$*q6W_^檣( 3ESt ϡYmZEN#m&1tZWT$& kED(-fڊGFܺJK+:19[G8)KLyG
w"Y031. nkgN` >]@'&El%+{_}C!U ~2 |E\SaGSiEWLQ,t(q{3IZL滓W;z
𱒴MJةܞK% eAuY8N9.L:o'`j\<-m(G>9_SlĚk]X9ٲN@3 |*# =_zpqB,-WK.8'ʬ5 ء}fWD*dVD 27η@ 6M hq[n E /Jnddm(u)}93ХgOQZq]]k#}lxk^ $n(JUIb.# ?A!8l@ɚlE S(ШDs(f~. C>~K0b?17&"@>u`WΕ߫QIn!
vRP~
N`0dkAS ZU\
+59Ű:I1~غ~=fm
A`Mk ms}s?Gvnof^R{/߲`ɚUWe aqs_F7p23;ʧFlK;hz|䪈jS1u@)ZF5 ͔KI@TrŬN:]w|?7C14\HkGB?GlMNG8n20=~t 5O+
.ߐk ,XU!
.?j_
D2=@TD1 BhRyQٿr'ش%ua/&W!cׄ43A8ַi% |iҀ 9cO96 1{
ʍNX("]B
A <찺?jm}x (b&=5As(RI, m6q*[ S{B̩e:CgǙ tdh%0,/ }
4-Jϑ ^W$c 5|1r(d%1-t:NZ" ::3a?H2p^JKȷRq3( @*.3_?ȣhcڿZuG^<[g.6J k4V:Ԡ ` ȹU1[q'}ޅ
u +T2Fe!6p1Jtj[ 1H0:3&nCEcۜ
gΊo{q)O{k Awpr'+ktБZw6MD+mGz:uPq1η-/Lj\E{!mI ہQ!9&; Jю;JYƜ5upS0{, C~#8XI]@fD˒hI0&E;QȂQ-VӷUq5ń+ņetvg/f'!vr3 6 FL<Hi פ ^@VbΑ Mj@˒-S3W f¤$d-:̧ѲE{gK>-ll5k$/C$CS"rk ᑛMxC9o7PƦήv8<;XŪݬ ƎO M'#}8;!NU dq@#G)J[ )OjaO9? 6]ylmu|[D(44h R }v:{LuN{(2G% CzןVh OZ`Aw} b)ƿ1D 7C.#n1D
J+Vrm>LͳһEfNLcZ5{l3!NV.5ֱf oܪp6Q0Dg %ͩA fN!R"=QNVLVw&1
r9(?RxODXL=QN;~XٜiQ-je-.~\ԌbA@l={vK>jϤCx4>(
&b+]E+ЍOX]KPMF3?^>TRF&ܴ>:X'}4KkRh 8m5饴@W g [ t-- cGH!:=,fԝہѲf bަ
RL~ly&I`pJCF$Tbef+pY|6t"=?f/ !DFX9~~
w 檾\9y% 73n*@Oe z.KmǴ
# trH'`{яŧn |WJPlP +y> b~my
(#UʟaS/49 Tέ<^$Hiur9i;Ѧk)A¶tAIi;yLӻK1j0j{ɡ
C\3 d DӀ[>^2d8=Luc}+b(0':pѯ <4V"z%H(Î:8IH=r7FXrxM,/ "!%aB~X_
bTI,#'oӖu|lN$ *B!08}sP"oy {{҇Љa #dM 7pvbKwSd> 5̓[(@M_,sdb3kUgwϺ K 3s 3ޫ|XC.-
(7yyvq>8'~ҋxz }#eo!`8 i)< XNy_}v!&;=)G Pq/; P2H UOGfԼ,K"Kl
[bXޗ .I~'bG jVuP,oh։B-2xHI$>I=h::X[+_cY?o(9psJ cl
x*[ONn>U˒{Z yK(֦u.EZk
lC7 S5ޞYlg)a!`T 0Ђv6sr#-é!|Ů50M&dȇq 0s[x26qQh6iOF+q%c(p9;E zP K)e:Հ+]a ).v98I ^G7%KSeeuSeNUl`~015 CJkjL PZyW/\*!7
PMf
~5h H:
w3:?bgGCRLϝ?+y%|l@/'jNo =A٭r&FS&qvyTvgڲ#2W6u i^^(K{ɕ#aG=% ({ ӊ%5цR$:h?bw<ᰤV%=йyȭ Obn-!P,LbQݯ(L3T d|1O v|3;oYd$`THOkn
b%>ghN"~$!}wA FRw/Sf 빦o,&_Io醧RD3qfN"!c]Wݸ &RwhX -$[gD6N UXP| 41Q䁯47vDY0"s>ܙĤ1c5!N n6*%V8gFwX(M 1|}n8܊Z:W zϚ^V}<#RZRK&8].y _$?$|08@S'VrTs 8.:릷PڍZ Y@2q%f;SJL ; 0zB^=r%OW-0m0*No2Hፕ?S館ća]F+l@
!l8$2](i0
] Fxz-Å ngI6߭/rb JV_Raf+1"Sn`%6[@֯f
yOYAjva[Y$ E}hDXk-)S8^`~0j8\һ l K!NVtPZRIU = seӭE Atf՝t*.== mj fP}lXp
L Gm}w_ \Uksy2 MPlBl^S|dP U믻2lb|1'{U lWQ k ғ( 7 5bPlg.1ˈZ~;
UҶ )`r{R .
9*W* gp}vW*x$DnOn9+ (~XJӏ 8
}Oݹ{CQ#\]Q&58׃
&YNݢ&8_Ƣ q(ɝ5`5bGof0^ {'/]-R9gvy
ʿJ8jF% `*+9XY4&vwcza@b) ӻm
% G{0*9^73أ(-mW8C4Bф.صgpSIk xO*?e46 ӽ?nkR+^ۖ4u?)HRAE/9Uv=`8K&#ڭl~ oh!4cnjȯbiuBQ;ğzpZUz}^av __Ŏ ~zLu[cCUq`Y}~&@aTt]AoW;fn R| w4 ίڲHWbf W$Z M1E.:P!G+<2o)cp&M <(,
rBAX{Z
Mkۜ.͖(j 3~k6b&ʻ'+dF sp 8hu\d>$ ]x_8Uݢdvpjď7y;ԋC[}De %{#_j@MɆ$!DFplt@ cwII̎x1x8"_bLd8!ALaJ3-*Ka
~4 0
2qX4GHޞ}էZ·
D>qtL[~g0E8w: Z:iW% gSPƍ[Ӣ扃-]_.[/
L6 (PT7[TO y{.]@"֢ a(
rL]#NB^LWW+˨f3M VO:%3RԙL #g5>jD)w6 uXk:WHt;]dR; ̎qqL^O{( } o? ]a!`>rc6]`S ν4e!$%HxфaxoN̺C$A"S3jup_*ws! ǿms8CET~0j&U+h~TWo/11TWskyI/_T[,
B*vEb;JhzB-㩈Ǭq(Ż:٢Tfء _#MOU |\leKgN+̈́pTD幵 ݭt_
YZ