[ANNOUNCE] Debian packages for libnfnetlink, libnetfilter-{queue, log, conntrack}, conntrack

[ANNOUNCE] Debian packages for libnfnetlink, libnetfilter-{queue, log, conntrack}, conntrack

[Max Kellermann]

Hi,

I have created Debian packages for some of the new Netfilter userspace
libraries / programs.  You can download them at my temporary
repository:

 deb http://max.kellermann.name/download/netfilter/debian ./
 deb-src http://max.kellermann.name/download/netfilter/debian ./

If nobody objects, I will try to bring these packages into Debian sid.
Please test the packages and share your opinion!

Max

Re: [ANNOUNCE] Debian packages for libnfnetlink, libnetfilter-{queue, log, conntrack}, conntrack

[Patrick McHardy]

Max Kellermann wrote:
> Hi,
> 
> I have created Debian packages for some of the new Netfilter userspace
> libraries / programs.  You can download them at my temporary
> repository:
> 
>  deb http://max.kellermann.name/download/netfilter/debian ./
>  deb-src http://max.kellermann.name/download/netfilter/debian ./
> 
> If nobody objects, I will try to bring these packages into Debian sid.
> Please test the packages and share your opinion!

Very nice, but please wait with trying to get them into
sid until we have resolved the CTA_PROTO_NUM issue.

Re: [ANNOUNCE] Debian packages for libnfnetlink, libnetfilter-{queue, log, conntrack}, conntrack

[Max Kellermann]

On 2005/11/27 20:02, Patrick McHardy <kaber@trash.net> wrote:
> Very nice, but please wait with trying to get them into
> sid until we have resolved the CTA_PROTO_NUM issue.

ok, please notify me when the new release is out.

Max

Re: [ANNOUNCE] Debian packages for libnfnetlink, libnetfilter-{queue, log, conntrack}, conntrack

[Patrick McHardy]

Max Kellermann wrote:
> On 2005/11/27 20:02, Patrick McHardy <kaber@trash.net> wrote:
> 
>>Very nice, but please wait with trying to get them into
>>sid until we have resolved the CTA_PROTO_NUM issue.
> 
> 
> ok, please notify me when the new release is out.

I've changed libnetlink_conntrack to use the correct type, I guess
we should release this soon. Harald, I'm not familiar with the
process, can you please take care of this?

Re: [ANNOUNCE] Debian packages for libnfnetlink, libnetfilter-{queue, log, conntrack}, conntrack

[Krzysztof Oledzki]

[-- Attachment #1: Type: TEXT/PLAIN, Size: 663 bytes --]



On Sun, 18 Dec 2005, Patrick McHardy wrote:

> Max Kellermann wrote:
>> On 2005/11/27 20:02, Patrick McHardy <kaber@trash.net> wrote:
>> 
>>> Very nice, but please wait with trying to get them into
>>> sid until we have resolved the CTA_PROTO_NUM issue.
>> 
>> 
>> ok, please notify me when the new release is out.
>
> I've changed libnetlink_conntrack to use the correct type, I guess
> we should release this soon. Harald, I'm not familiar with the
> process, can you please take care of this?

I think we should add some comment about required kernel and wait for 
2.6.14.5 and 2.6.15 to come out.

Best regards,

 				Krzysztof Olędzki

Re: [ANNOUNCE] Debian packages for libnfnetlink, libnetfilter-{queue, log, conntrack}, conntrack

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 1012 bytes --]

On Sun, Dec 18, 2005 at 06:20:31PM +0100, Patrick McHardy wrote:
> Max Kellermann wrote:
> >On 2005/11/27 20:02, Patrick McHardy <kaber@trash.net> wrote:
> >>Very nice, but please wait with trying to get them into
> >>sid until we have resolved the CTA_PROTO_NUM issue.
> >ok, please notify me when the new release is out.
> 
> I've changed libnetlink_conntrack to use the correct type, I guess
> we should release this soon. Harald, I'm not familiar with the
> process, can you please take care of this?

yes, I'll do a new release.  Do we only need libnetfilter_conntrack, or
also other packages (libnfnetlink / conntrack)?

-- 
- Harald Welte <laforge@netfilter.org>                 http://netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [ANNOUNCE] Debian packages for libnfnetlink, libnetfilter-{queue, log, conntrack}, conntrack

[Patrick McHardy]

Harald Welte wrote:
> On Sun, Dec 18, 2005 at 06:20:31PM +0100, Patrick McHardy wrote:
> 
>>I've changed libnetlink_conntrack to use the correct type, I guess
>>we should release this soon. Harald, I'm not familiar with the
>>process, can you please take care of this?
> 
> 
> yes, I'll do a new release.  Do we only need libnetfilter_conntrack, or
> also other packages (libnfnetlink / conntrack)?

Thanks. The CTA_PROTO_NUM issue only requires a new
libnetfilter_conntrack release, but there might be other reasons
for releasing the other libraries as well. Pablo probably knows
better than me.

Re: [ANNOUNCE] Debian packages for libnfnetlink, libnetfilter-{queue, log, conntrack}, conntrack

[Pablo Neira Ayuso]

Hi!

Patrick McHardy wrote:
> Harald Welte wrote:
> 
>> On Sun, Dec 18, 2005 at 06:20:31PM +0100, Patrick McHardy wrote:
>>
>>> I've changed libnetlink_conntrack to use the correct type, I guess
>>> we should release this soon. Harald, I'm not familiar with the
>>> process, can you please take care of this?
>>
>> yes, I'll do a new release.  Do we only need libnetfilter_conntrack, or
>> also other packages (libnfnetlink / conntrack)?
> 
> Thanks. The CTA_PROTO_NUM issue only requires a new
> libnetfilter_conntrack release, but there might be other reasons
> for releasing the other libraries as well. Pablo probably knows
> better than me.

A new release of conntrack could be fine. From ChangeLog:

2005-13-03
<pablo@netfilter.org>
        o Add support to filter events. ie: -p tcp --orig-port-dst 80 in
        conjuction with -E to get all the requests to HTTP servers
        o Update manpage
        o Missing static function declaration in the protocol handlers
        o Use protocol flags defined in libnetfilter_conntrack
        o Bumped version to 0.991

2005-11-22
<marcus@ingate.com>
        o Fix oversized number of options

IMHO, it's worth a new release.

Something different but related, about the first 1.0 release of
conntrack: I think that it should be done once I finish with the ipv6
(nf_conntrack) support that I'm currently working on.

-- 
Pablo

Re: [ANNOUNCE] Debian packages for libnfnetlink, libnetfilter-{queue, log, conntrack}, conntrack

[Pablo Neira Ayuso]

Patrick McHardy wrote:
> Harald Welte wrote:
> 
>> On Sun, Dec 18, 2005 at 06:20:31PM +0100, Patrick McHardy wrote:
>>
>>> I've changed libnetlink_conntrack to use the correct type, I guess
>>> we should release this soon. Harald, I'm not familiar with the
>>> process, can you please take care of this?
>>
>>
>>
>> yes, I'll do a new release.  Do we only need libnetfilter_conntrack, or
>> also other packages (libnfnetlink / conntrack)?
> 
> 
> Thanks. The CTA_PROTO_NUM issue only requires a new
> libnetfilter_conntrack release, but there might be other reasons
> for releasing the other libraries as well. Pablo probably knows
> better than me.

I forgot to talk about libnfnetlink: I don't think that we need a new
release. The last version 0.0.13 happened on 2005-Nov-14. The only
commit after that day is Krzysztof Oledzki's spelling fix. So it can wait.

-- 
Pablo

Re: [ANNOUNCE] Debian packages for libnfnetlink, libnetfilter-{queue, log, conntrack}, conntrack

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 1110 bytes --]

On Sun, Nov 27, 2005 at 06:34:11PM +0100, Max Kellermann wrote:
> Hi,
> 
> I have created Debian packages for some of the new Netfilter userspace
> libraries / programs.  You can download them at my temporary
> repository:
> 
>  deb http://max.kellermann.name/download/netfilter/debian ./
>  deb-src http://max.kellermann.name/download/netfilter/debian ./
> 
> If nobody objects, I will try to bring these packages into Debian sid.
> Please test the packages and share your opinion!

That's really great news, thanks for your work. 

I don't have a chance to look at those packets at the moment, since I
only have very short periods of connectivity (actually pushing those
mails over UUCP over SSL over IP over GPRS ;)

-- 
- Harald Welte <laforge@netfilter.org>                 http://netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]