[PATCH] libnfnetlink and libnetfilter_conntrack updates

[PATCH] libnfnetlink and libnetfilter_conntrack updates

[Pablo Neira Ayuso]

Hi everyone,

I finally finished the new libnetfilter_conntrack API, I have spent this
weekend porting conntrackd to the new API as a way to test it, and it
seems to work fine here. The new API includes documentation and
overcomes (or at least tries to) the existing limitations. The patch is
available here (~80Kbytes):

http://people.netfilter.org/pablo/libnetfilter_conntrack/api.patch

Together with this patch comes another patch for libnfnetlink to
introduce some new API:

http://people.netfilter.org/pablo/libnfnetlink/libnfnetlink.patch

The use of the new API is strongly recommended since we plan to remove
the obsolete API sooner or later, anyway we'll warn everyone several
times before doing so. I'm also planning to port the remaining libraries
(libnetfilter_queue/log) to the new API.

-- 
The dawn of the fourth age of Linux firewalling is coming; a time of
great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris

Re: [PATCH] libnfnetlink and libnetfilter_conntrack updates

[Pablo Neira Ayuso]

Pablo Neira Ayuso wrote:
> The use of the new API is strongly recommended since we plan to remove
> the obsolete API sooner or later, anyway we'll warn everyone several
> times before doing so. I'm also planning to port the remaining libraries
> (libnetfilter_queue/log) to the new API.

Just for the record, just committed the changes to SVN. I'll prepare a
new release asap.

-- 
The dawn of the fourth age of Linux firewalling is coming; a time of
great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris

Re: [PATCH] libnfnetlink and libnetfilter_conntrack updates

[Maximilian Wilhelm]

Am Dienstag, den 19 Dezember hub Pablo Neira Ayuso folgendes in die Tasten:

> Pablo Neira Ayuso wrote:
> > The use of the new API is strongly recommended since we plan to remove
> > the obsolete API sooner or later, anyway we'll warn everyone several
> > times before doing so. I'm also planning to port the remaining libraries
> > (libnetfilter_queue/log) to the new API.

> Just for the record, just committed the changes to SVN. I'll prepare a
> new release asap.

What´s the status of this?

I would like to package conntrackd for Debian which will require current
versions of these two libraries if I get it right.

Therefore I´ll need updates of the existing library packages which would
be nice to build from an official release including all your changes
neccessary for conntrackd.

btw: What´s your prophecy about the release date of conntrackd 0.9.2? :)

Ciao & Thanks
Max
-- 
	Follow the white penguin.

Re: [PATCH] libnfnetlink and libnetfilter_conntrack updates

[Pablo Neira Ayuso]

Hi Max,

Maximilian Wilhelm wrote:
> Am Dienstag, den 19 Dezember hub Pablo Neira Ayuso folgendes in die Tasten:
> 
>> Pablo Neira Ayuso wrote:
>>> The use of the new API is strongly recommended since we plan to remove
>>> the obsolete API sooner or later, anyway we'll warn everyone several
>>> times before doing so. I'm also planning to port the remaining libraries
>>> (libnetfilter_queue/log) to the new API.
> 
>> Just for the record, just committed the changes to SVN. I'll prepare a
>> new release asap.
> 
> What´s the status of this?

I have plans to release the new libraries soon, I require from Patrick
for a minor administrative task to do the release but he's currently off.

> I would like to package conntrackd for Debian which will require current
> versions of these two libraries if I get it right.

Not really, I didn't commit the patch for conntrackd to make it use the
new API yet, mainly because I don't want to get people confused.
However, such patch is ready and available in my people netfilter place.
Therefore, I'll do the commit as soon as the libraries are released, of
course this means that we'll be able to drop unnofficial libraries
available in the conntrackd site and use the official ones.

> Therefore I´ll need updates of the existing library packages which would
> be nice to build from an official release including all your changes
> neccessary for conntrackd.
> 
> btw: What´s your prophecy about the release date of conntrackd 0.9.2? :)

It's a recursive question: expect a release after the libraries release ;)

-- 
The dawn of the fourth age of Linux firewalling is coming; a time of
great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris

Re: [PATCH] libnfnetlink and libnetfilter_conntrack updates

[Maximilian Wilhelm]

Am Freitag, den 29 Dezember hub Pablo Neira Ayuso folgendes in die Tasten:

Hi Pablo!

> I have plans to release the new libraries soon, I require from Patrick
> for a minor administrative task to do the release but he's currently off.

> > I would like to package conntrackd for Debian which will require current
> > versions of these two libraries if I get it right.

> Not really, I didn't commit the patch for conntrackd to make it use the
> new API yet, mainly because I don't want to get people confused.
> However, such patch is ready and available in my people netfilter place.
> Therefore, I'll do the commit as soon as the libraries are released, of
> course this means that we'll be able to drop unnofficial libraries
> available in the conntrackd site and use the official ones.

> > Therefore I´ll need updates of the existing library packages which would
> > be nice to build from an official release including all your changes
> > neccessary for conntrackd.

> > btw: What´s your prophecy about the release date of conntrackd 0.9.2? :)

> It's a recursive question: expect a release after the libraries release ;)

OK, then I´ll wait for this to be done :)

Ciao & Thanks
Max
-- 
	Follow the white penguin.