netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* Re: [ANNOUNCE] nftables 0.8.1 release
@ 2018-01-16 14:48 Jan Engelhardt
  2018-01-16 14:53 ` Pablo Neira Ayuso
  0 siblings, 1 reply; 6+ messages in thread
From: Jan Engelhardt @ 2018-01-16 14:48 UTC (permalink / raw)
  To: pablo; +Cc: Netfilter Developer Mailing List


>        nftables 0.8.1
>
>This release contains mostly incremental fixes and documentation 
>updates, such as fixing up ./configure --with-mini-gmp for embedded 
>setups that don't have libgmp.

Why is this now installing a libnftables.pc file when there is no 
library or headers to go with it? (Remember that libnftables.la is 
listed for "noinst_LTLIBRARIES".)

^ permalink raw reply	[flat|nested] 6+ messages in thread
* [ANNOUNCE] nftables 0.8.1 release
@ 2018-01-16 13:01 Pablo Neira Ayuso
  0 siblings, 0 replies; 6+ messages in thread
From: Pablo Neira Ayuso @ 2018-01-16 13:01 UTC (permalink / raw)
  To: netfilter-devel; +Cc: netdev, netfilter, netfilter-announce, lwn

[-- Attachment #1: Type: text/plain, Size: 2258 bytes --]

Hi!

The Netfilter project proudly presents:

        nftables 0.8.1

This release contains mostly incremental fixes and documentation
updates, such as fixing up ./configure --with-mini-gmp for embedded
setups that don't have libgmp.

Deprecated syntax
=================

This release deprecates the "flow table" syntax in favor of "meter" to
address Netfilter's bugzilla issues:

https://bugzilla.netfilter.org/show_bug.cgi?id=1137
https://bugzilla.netfilter.org/show_bug.cgi?id=1185

This is an example of how to use it:

# nft add table filter
# nft add chain filter input { type filter hook input priority 0\; }
# nft add rule filter input meter local-traffic { ip saddr counter }

# nft list ruleset
table ip filter {
        chain input {
                type filter hook input priority 0; policy accept;
                meter local-traffic { ip saddr counter} 
        }
}
# nft list ruleset
table ip filter {
        chain input {
                type filter hook input priority 0; policy accept;
                meter local-traffic { ip saddr counter} 
        }
}
# nft list meter filter local-traffic 
table ip filter {
        meter local-traffic {
                type ipv4_addr
                elements = { 8.8.8.8 : counter packets 1 bytes 84, 84.11.121.21 : counter packets 1 bytes 76, 150.159.126.108 : counter packets 1 bytes 76, 123.102.2.4 : counter packets 1 bytes 76, 21.241.12.143 : counter packets 1 bytes 76 }
        }
}

Former 'flow table' syntax will be still around for a while, but listing
uses the new 'meter' syntax, so please revisit your scripts if you are
using this feature.

Resources
=========

The nftables code can be obtained from:

* http://netfilter.org/projects/nftables/downloads.html
* ftp://ftp.netfilter.org/pub/nftables
* git://git.netfilter.org/nftables

To build the code, libnftnl 1.0.9 and libmnl >= 1.0.2 are required:

* http://netfilter.org/projects/libnftnl/index.html
* http://netfilter.org/projects/libmnl/index.html

Visit our wikipage for user documentation at:

* http://wiki.nftables.org

For the manpage reference, check man(8) nft.

In case of bugs and feature request, file them via:

* https://bugzilla.netfilter.org

Make sure you create no duplicates already, thanks!

Happy firewalling!

[-- Attachment #2: changes-nftables-0.8.1.txt --]
[-- Type: text/plain, Size: 3494 bytes --]

Arturo Borrero Gonzalez (1):
      parser: allow classid as set key

Duncan Roe (5):
      doc: nft.8 change "Native Address Translation" to "Network Address Translation"
      doc: nft.8 simplify initial SYNOPSIS line
      doc: nft.8 document use of -f option to start nft scripts
      doc: nft.8 Syslog level is introduced by "level" not "syslog-level"
      doc: nft.8 aim for consistent synopses throughout

Florian Westphal (9):
      rule: fix netlink debug flag when listing table/rules
      tests: fix harmess typo in table name
      tests: icmpX: fix expected output
      tests: add test case that checks icmp6 in-ipv4
      tests: nft removes required payload protocol expressions
      tests: enable ip/ip.t for bridge protocol, too
      tests: nft removes required inet dependency expressions
      ct: don't print newline if label bit cannot be mapped
      netlink_linearize: exthdr op must be u32

Harsha Sharma (4):
      tests: shell: add testcases for named limits
      tests/monitor: Print error "this requires root" and exit
      evaluate: print error for null string
      tests/py: add test for empty string match

Pablo M. Bermudo Garay (1):
      src: do not print limit keyword inside object definition

Pablo Neira Ayuso (9):
      netlink: fix element addition to map with stateful object
      src: add nft_ prefix to everything exposed through include/nftables/nftables.h
      utils: fix one compilation error with --with-mini-gmp
      gmputil: turn mpz_printf into mpz_vfprintf to restore --with-mini-gmp
      src: deprecate "flow table" syntax, replace it by "meter"
      parser_bison: dismiss anonymous meters
      parser_bison: no need for 'name' token for meters
      include: refresh nf_tables.h cached copy
      build: Bump version to v0.8.1

Phil Sutter (19):
      netlink: Use nftnl_expr_fprintf() in netlink_dump_expr()
      main: Fix for wrong argument passed to cache_release in nft_ctx_free
      libnftables: Move library stuff out of main.c
      libnftables: Introduce nft_ctx_flush_cache()
      cli: Use nft_run_cmd_from_buffer()
      libnftables: Introduce getters and setters for everything
      libnftables: Get rid of explicit cache flushes
      libnftables: Flush iface cache after command execution
      Eliminate struct mnl_ctx
      libnftables: Unexport enum nftables_exit_codes
      libnftables: Split code into frontend and library
      rule: Make 'nft export' respect output_fp
      libnftables: Ensure output_fp is never NULL
      tests: shell: Prevent lockout in nft-f/0008split_tables_0
      Make libnftables a local static library
      tests/py: trivial: Fix error message
      src: fix protocol context update on big-endian systems
      build: Restore per object CFLAGS
      src: Don't merge adjacent/overlapping ranges

Varsha Rao (13):
      tests: files: Remove jump chain tests.
      tests: shell: Add test case for jump chain.
      tests: shell: Add test case for sets.
      tests: files: Remove tests for set.
      tests: shell: Add tests for variable definition.
      tests: files: Remove test cases for variable definition.
      tests: files: Remove tests for chain.
      tests: files: Remove tests for table.
      tests: files: Remove tests for verdict maps.
      tests: shell: Add test case for map expression.
      src: tests: files: Remove test files.
      tests: shell: Rename 0025named_limit_0 to 0026named_limit_0
      tests: shell: Add test for IPv4 Mapped IPv6 address.


^ permalink raw reply	[flat|nested] 6+ messages in thread
end of thread, other threads:[~2018-01-19 12:10 UTC | newest]

Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2018-01-16 14:48 [ANNOUNCE] nftables 0.8.1 release Jan Engelhardt
2018-01-16 14:53 ` Pablo Neira Ayuso
2018-01-16 16:18   ` Phil Sutter
2018-01-16 16:19     ` [nft PATCH] Eliminate forgotten traces of libnftables exporting Phil Sutter
2018-01-19 12:10       ` Pablo Neira Ayuso
  -- strict thread matches above, loose matches on Subject: below --
2018-01-16 13:01 [ANNOUNCE] nftables 0.8.1 release Pablo Neira Ayuso

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).