[announce] Xtables, Xtables-addons 1.5.1 and Writing Xtables Modules

[announce] Xtables, Xtables-addons 1.5.1 and Writing Xtables Modules

[Jan Engelhardt]

Hello everyone,


I have released “Xtables” 1.5.1, which is a package of my ongoing
iptables development¹ that I did lately. Patrick McHardy was not
available last week to merge patches due to higher powers, so I
branched off the iptables subversion trunk into git since quilting on
top of svn was not so fun.

Xtables, that is the goal sought, will merge and unify arptables and 
ebtables² as becomes possible.

What will now become of the iptables and xtables packages? Xtables
clearly is "more recent" than the latest iptables svn, but I would
not want to do Xtables as a continuous parallel fork to iptables³.
Maybe merge⁴ or declare it the new official thing -- who knows.

Additionally, “Xtables-addons” 1.5.1 was released, which is supposed
to supersede patch-o-matic(-ng). As with POM, this package contains
not-so-officially-approved extensions. But different from POM is that
it does not (and will not) contain any "patches" that would require
patching the kernel. Just extensions that can be compiled and then
run instantly.

Furthermore, I would like to make aware of “Writing your own Xtables
module” document, which describes the code needed to get started with
your own xtables modules. It is based upon Nicolas's earlier "Writing
your own iptables module"
 . . . . . . . http://jengelh.hopto.org/documents/Writing_Xtables.pdf

URLs:
tarballs . . . http://dev.computergmbh.de/files/xtables/
gitweb . . . . http://dev.computergmbh.de/gitweb.cgi?p=xtables
 . . . . . . . http://dev.computergmbh.de/gitweb.cgi?p=xtables-addons
gitclone . . . git://dev.computergmbh.de/xtables
 . . . . . . . git://dev.computergmbh.de/xtables-addons

SRPM for reference how to build it in an automatic environment
 . . . . . . . http://ftp.gwdg.de/pub/linux/misc/suser-jengelh/SRPMS/
RPMs (SUSE). . http://ftp.gwdg.de/pub/linux/misc/suser-jengelh/SUSE-10.3/



¹It is supposed to be stable.
²FAQ: On a source base. User-visible commands like ip6tables remain.
³Read: merging forth and back between iptables-svn and xtables-git =
not good.
⁴There were talks about moving the iptables subversion repository to
git, but I could not wait for you guys, sorry ;-)
-
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: [announce] Xtables, Xtables-addons 1.5.1 and Writing Xtables Modules

[Patrick McHardy]

Jan Engelhardt wrote:
> I have released “Xtables” 1.5.1, which is a package of my ongoing
> iptables development¹ that I did lately. Patrick McHardy was not
> available last week to merge patches due to higher powers, so I
> branched off the iptables subversion trunk into git since quilting on
> top of svn was not so fun.


I'm back to full power, so feel free to post patches :)

-
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: Xtables, Xtables-addons 1.5.1

[Jan Engelhardt]

On Feb 21 2008 20:49, Patrick McHardy wrote:
> Jan Engelhardt wrote:
>> I have released “Xtables” 1.5.1, which is a package of my ongoing
>> iptables development¹ that I did lately. Patrick McHardy was not
>> available last week to merge patches due to higher powers, so I
>> branched off the iptables subversion trunk into git since quilting on
>> top of svn was not so fun.
>
> I'm back to full power, so feel free to post patches :)

"Please pull from git://dev.c..." — oh dang!

What have become of the idea of gitifying the netfilter svn?
-
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: Xtables, Xtables-addons 1.5.1

[Patrick McHardy]

Jan Engelhardt wrote:
> On Feb 21 2008 20:49, Patrick McHardy wrote:
>> Jan Engelhardt wrote:
>>> I have released “Xtables” 1.5.1, which is a package of my ongoing
>>> iptables development¹ that I did lately. Patrick McHardy was not
>>> available last week to merge patches due to higher powers, so I
>>> branched off the iptables subversion trunk into git since quilting on
>>> top of svn was not so fun.
>> I'm back to full power, so feel free to post patches :)
> 
> "Please pull from git://dev.c..." — oh dang!


Well, those patch have to be posted for review anyway.

> What have become of the idea of gitifying the netfilter svn?


I didn't find time for this so far. Unfortunately there seems to be
something wrong with the netfilter SVN and a full import didn't work
last time I tried, so we would have to throw away the history.
-
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: Xtables, Xtables-addons 1.5.1

[Patrick McHardy]

Yasuyuki KOZAKAI wrote:
> From: Patrick McHardy <kaber@trash.net>
> Date: Fri, 22 Feb 2008 13:56:49 +0100
> 
>> Jan Engelhardt wrote:
>>> What have become of the idea of gitifying the netfilter svn?
>>
>> I didn't find time for this so far. Unfortunately there seems to be
>> something wrong with the netfilter SVN and a full import didn't work
>> last time I tried, so we would have to throw away the history.
> 
> We can keep the history in git tree.
> 
> Actually I could do that (with some diffs of $Id lines) for almost
> programs last year. But I did not update my git tree.
> 
> Unfortunately I have to concentrate with other work until next Monday.
> If you want the recent git tree, I'll update and put them people.netfilter.org
> next week.
> 
> (You can get the old git tree for iptables at
> 	http://people.netfilter.org/yasuyuki/git/iptables.git/
>  and the mapping of svn revision and git tag is available at
> 	http://people.netfilter.org/yasuyuki/git/iptables.git/svn2git)
> 
> Sorry, but I couldn't find the way to synchronize svn tree from git tree.
> So at least we have to 'switch' git tree from svn tree at once.


That sounds good. I won't be able to look into this until the
end of next week, but I'll look into it then. We'll also need
to set up gitweb and a public git server somewhere.

svn to git (Was: Re: Xtables, Xtables-addons 1.5.1)

[Yasuyuki KOZAKAI]

From: Patrick McHardy <kaber@trash.net>
Date: Fri, 22 Feb 2008 14:17:44 +0100

> Yasuyuki KOZAKAI wrote:
> > From: Patrick McHardy <kaber@trash.net>
> > Date: Fri, 22 Feb 2008 13:56:49 +0100
> > 
> >> Jan Engelhardt wrote:
> >>> What have become of the idea of gitifying the netfilter svn?
> >>
> >> I didn't find time for this so far. Unfortunately there seems to be
> >> something wrong with the netfilter SVN and a full import didn't work
> >> last time I tried, so we would have to throw away the history.
> > 
> > We can keep the history in git tree.
> > 
> > Actually I could do that (with some diffs of $Id lines) for almost
> > programs last year. But I did not update my git tree.
> > 
> > Unfortunately I have to concentrate with other work until next Monday.
> > If you want the recent git tree, I'll update and put them people.netfilter.org
> > next week.
> > 
> > (You can get the old git tree for iptables at
> > 	http://people.netfilter.org/yasuyuki/git/iptables.git/
> >  and the mapping of svn revision and git tag is available at
> > 	http://people.netfilter.org/yasuyuki/git/iptables.git/svn2git)
> > 
> > Sorry, but I couldn't find the way to synchronize svn tree from git tree.
> > So at least we have to 'switch' git tree from svn tree at once.
> 
> 
> That sounds good. I won't be able to look into this until the
> end of next week, but I'll look into it then. We'll also need
> to set up gitweb and a public git server somewhere.

I've updated them and created some more trees.

Now the recent trees are available at

	rsync://people.netfilter.org/users/yasuyuki/git/iptables.git
	rsync://people.netfilter.org/users/yasuyuki/git/conntrack-tools.git
	rsync://people.netfilter.org/users/yasuyuki/git/ipset.git
	rsync://people.netfilter.org/users/yasuyuki/git/iptables.git
	rsync://people.netfilter.org/users/yasuyuki/git/libnetfilter_conntrack.git
	rsync://people.netfilter.org/users/yasuyuki/git/libnetfilter_cthelper.git
	rsync://people.netfilter.org/users/yasuyuki/git/libnetfilter_log.git
	rsync://people.netfilter.org/users/yasuyuki/git/libnetfilter_queue.git
	rsync://people.netfilter.org/users/yasuyuki/git/libnfnetlink.git
	rsync://people.netfilter.org/users/yasuyuki/git/patch-o-matic-ng.git
	rsync://people.netfilter.org/users/yasuyuki/git/ulog.git

And the maps between git tag and svn revision created by git-svnimport are at
	http://people.netfilter.org/yasuyuki/git/<tree name>/svn2git

The tar archives of each trees are in

	http://people.netfilter.org/yasuyuki/archives/

If you want synchronize iptables.git with svn tree by yourself for example,
please download and extract the tar archive, and

	$ cd iptables.git
	$ git-svnimport -v -T trunk/iptables	\
			-b dummy_branches	\
			-t dummy_tags		\
			http://svn.netfilter.org/netfilter

# I did not try if I could update git tree on the cloned tree from above
# rsync path.

How about other trees ? If you want, please let me know.

Regards,

-- Yasuyuki Kozakai

Re: svn to git (Was: Re: Xtables, Xtables-addons 1.5.1)

[Jan Engelhardt]

On Mar 1 2008 19:36, Yasuyuki KOZAKAI wrote:
>
>I've updated them and created some more trees.
>
>Now the recent trees are available at
>
>	rsync://people.netfilter.org/users/yasuyuki/git/iptables.git
>	rsync://people.netfilter.org/users/yasuyuki/git/conntrack-tools.git
>	rsync://people.netfilter.org/users/yasuyuki/git/ipset.git
>	rsync://people.netfilter.org/users/yasuyuki/git/iptables.git
>	rsync://people.netfilter.org/users/yasuyuki/git/libnetfilter_conntrack.git
>	rsync://people.netfilter.org/users/yasuyuki/git/libnetfilter_cthelper.git
>	rsync://people.netfilter.org/users/yasuyuki/git/libnetfilter_log.git
>	rsync://people.netfilter.org/users/yasuyuki/git/libnetfilter_queue.git
>	rsync://people.netfilter.org/users/yasuyuki/git/libnfnetlink.git
>	rsync://people.netfilter.org/users/yasuyuki/git/patch-o-matic-ng.git
>	rsync://people.netfilter.org/users/yasuyuki/git/ulog.git

Thanks, I'll postprocess these right away.

Re: svn to git (Was: Re: Xtables, Xtables-addons 1.5.1)

[Eric Leblond]

[-- Attachment #1: Type: text/plain, Size: 412 bytes --]

Hi,

On Saturday, 2008 March  1 at 19:36:44 +0900, Yasuyuki KOZAKAI wrote:
> From: Patrick McHardy <kaber@trash.net>
> Date: Fri, 22 Feb 2008 14:17:44 +0100
> 
> > Yasuyuki KOZAKAI wrote:
> How about other trees ? If you want, please let me know.

An ulogd2 tree could be interesting as there is some work on it currently.

BR,
-- 
Eric Leblond
INL: http://www.inl.fr/
NuFW: http://www.nufw.org/

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

iptables/xtables git repository

[Jan Engelhardt]

>On Mar 1 2008 19:36, Yasuyuki KOZAKAI wrote:
>>
>>I've updated them and created some more trees.
>>
>>Now the recent trees are available at
>>
>>	rsync://people.netfilter.org/users/yasuyuki/git/iptables.git
>>	rsync://people.netfilter.org/users/yasuyuki/git/iptables.git

I have refined this, tracked all author information, tagged it, etc.
(Latest commit from Pablo also included ...)

I already named the repository xtables because that is what it
is going to be (the presence of both iptables and ip6tables itself
already gives reason to use 'x'tables ;-)

	git://dev.computergmbh.de/xtables
	http://dev.computergmbh.de/gitweb.cgi?p=xtables

Feel free to clone, or give faith to declare it official.

I will rebase my Xtables 1.5.x branch on top of that, then submit.

Again, I would like to make aware of Xtables-addons, which is
supposed to be a new patch-o-matic from the ground up.

>>	rsync://people.netfilter.org/users/yasuyuki/git/conntrack-tools.git
>>	rsync://people.netfilter.org/users/yasuyuki/git/ipset.git
>>	rsync://people.netfilter.org/users/yasuyuki/git/libnetfilter_conntrack.git
>>	rsync://people.netfilter.org/users/yasuyuki/git/libnetfilter_cthelper.git
>>	rsync://people.netfilter.org/users/yasuyuki/git/libnetfilter_log.git
>>	rsync://people.netfilter.org/users/yasuyuki/git/libnetfilter_queue.git
>>	rsync://people.netfilter.org/users/yasuyuki/git/libnfnetlink.git
>>	rsync://people.netfilter.org/users/yasuyuki/git/patch-o-matic-ng.git
>>	rsync://people.netfilter.org/users/yasuyuki/git/ulog.git

You can postprocess these with the quick translators I wrote:

	http://dev.computergmbh.de/f/iptables.aux/

do_rewrite will translate the X509 style author names to git,
do_rewrite2 will go through each commit which allows to clean it
according to Linux-2.6.git log standards (= one subject line,
and then the message). Often a subject line is missing, which
looks very odd in gitk then. This is where do_rewrite2 helps.

	$ rsync://people.netfilter.org/.../conntrack-tools.git
	  .git/
	$ git-reset --hard
	$ git-status
	$ /tmp/iptables.aux/do_rewrite HEAD
	$ /tmp/iptables.aux/do_rewrite2 HEAD

	Should you get tired during edit or want to re-edit a commit,
	touch /tmp/skip and finish the rewrite process.
	Then remove /tmp/skip again and use

	do_rewrite2  commit^..HEAD