ipset-6.29-4.4.1<>,*[Xø/=„*/6^2{D39 p~dQK<<>` a&O&UMM bD:IL8#K#C \OMR&esvMaᝏ҄+pϛ Μ aqBը, a2?Kz!12"z * B0=$ jxR_giӅY,v)> %C?5Ui)"0RQ,&$ `1k]qt`O$_4@>3$?#d   :  .JPX` d h p   4 p (89:ZG"<H"DI"LX"PY"X\"p]"x^"b"c#Kd#e#f#l#Cipset6.294.4.1Netfilter ipset administration utilityIP sets are a framework inside the Linux kernel, which can be administered by the ipset utility. Depending on the type, currently an IP set may store IP addresses, (TCP/UDP) port numbers or IP addresses with MAC addresses in a way, which ensures lightning speed when matching an entry against a set. ipset can: * store multiple IP addresses or port numbers and match against the collection by iptables at one swoop; * dynamically update iptables rules against IP addresses or ports without performance penalty; * express complex IP address and ports based rulesets with one single iptables rule and benefit from the speed of IP sets[Xcloud126zopenSUSE Leap 42.3openSUSEGPL-2.0http://bugs.opensuse.orgProductivity/Networking/Securityhttp://ipset.netfilter.org/linuxx86_64Z0'J큤[T[T8b22372bbcebc6f65080ed42ecc2ce84aeac7739fc137c260a8209c3dfe1396drootrootrootrootipset-6.29-4.4.1.src.rpmipsetipset(x86-64)   libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libipset.so.3()(64bit)libipset.so.3(LIBIPSET_1.0)(64bit)libipset.so.3(LIBIPSET_2.0)(64bit)libipset.so.3(LIBIPSET_3.0)(64bit)rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)rpmlib(PayloadIsLzma)4.0-13.0.4-14.4.6-14.11.2VJVVU@U@TsT!`T&@SRnQRcRcQ@QkQ& @P@P@P]@O@OOW@OJjengelh@inai.dejengelh@inai.dekstreitova@suse.comjengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@medozas.dejengelh@medozas.de- Update to new upstream release 6.29 * Fix race condition in ipset save, swap and delete- Update to new upstream release 6.28 * Test added to check 0.0.0.0/0,iface to be matched in hash:net,iface type * Check IPSET_ATTR_ETHER netlink attribute length * Fix set:list type crash when flush/dump set in parallel * Allow a 0 netmask with hash_netiface type - Restore unreviewed deletion of KMP production, undo spec-cleaner refucktoring - Add ipset-destdir.diff- update to 6.27: * kernel part changes * fix reported memory size for hash:* types * fix hash type expire: release empty hash bucket block * fix hash type expiration: incorrect index fixed * collapse same condition body to a single one * fix extension alignment * compatibility: include linux/export.h when needed * compatibility: make sure vmalloc.h is included for kvfree() * compatibility: Fix detecting 'struct net' in 'struct tcf_ematch' * compatibility: Protect definition of RCU_INIT_POINTER in compatibility header file * netfilter: ipset: Fix sleeping memory allocation in atomic context (Nikolay Borisov) * userspace changes * handle uint64_t alignment issue in ipset tool - disable KMP build as we support the in-kernel version instead. Remove ipset-preamble file that is no longer needed [bsc#962345] - run spec-cleaner- Update to new upstream release 6.26 * Out of bound access in hash:net* types fixed * Make struct htype per ipset family * Optimize hash creation routine- Update to new upstream release 6.25.1 * Add element count to all set types header * Add element count to hash headers * Support linking libipset to C++ programs * When a single set is destroyed, make sure it cannot be grabbed by dump * Check CIDR value only when attribute is given * Permit CIDR equal to the host address CIDR in IPv6- Update to new upstream release 6.24 * Alignment problem between 64bit kernel 32bit userspace fixed * Potential read beyond the end of buffer resolved * Fix parallel resizing and listing of the same set * Introduce RCU in all set types instead of rwlock per set * Remove rbtree from hash:net,iface in order to run under RCU * Explicitly add padding elements to hash:net,net and hash:net,port,net * Allocate the proper size of memory when /0 networks are supported * Simplify cidr handling for hash:*net* types * Indicate when /0 networks are supported- Update to new upstream release 6.23 * Order create and add options in manpage so that generic ones come first * Centralise generic create options (family, hashsize, maxelem) on top of man page in the generic options section. * Add description of hash:mac set type to man page. * Add missing space for skbinfo option synopsis. * Support updating extensions when the set is full - Drop sovers.diff (no longer needed)- Update to new upstream release 6.22 * includes the new set type hash:mac * The new skbinfo extension makes possible to store fw mark, tc class and/or hardware queue parameters together with the set elements and then attach them to the matchig packets by the SET target. - Add sovers.diff to counter missing symbol errors- Update to new upstream release 6.21.1 * add userspace support for forceadd * fix ifname "physdev:" prefix parsing * print mark & mark mask in hex rather then decimal * add markmask for hash:ip,mark data type * add hash:ip,mark data type to ipset * Fix all set output from list/save when set with counters in use. * ipset: Fix malformed output from list/save for ICMP types in port field * ipset: fix timeout data type size (Nikolay Martynov)- Update to new upstream release 6.20.1 * build fixes for kernel 3.8 and the userspace library - Remove 0001-build-fix-incorrect-library-versioning.patch (merged)- Add 0001-build-fix-incorrect-library-versioning.patch- Update to new upstream release 6.20 * netns support * new set types: hash:net,net and hash:net,port,net * new extension: "comment", for annotation of set elements - Drop sles11.diff (no longer needed, upstream has better fix)- Update to new upstream release 6.19 * This release adds per-element byte and packet counters for every set type. (Matching these will be available in iptables-1.4.19.)- Update to new upstream release 6.18 * bitmap:ip,mac: fix listing with timeout * hash:*net*: nomatch flag not excluded on set resize * list:set: update reference counter when last element pushed off- Update to new upstream release 6.17 * Fix revision printing in XML mode * Correct "Suspicious condition (assignment + comparison)" * Fix error path when protocol number is used with port range * Interactive mode error after syntax error * New utilities: ipset_bash_completion, ipset_list * Ensure ip_set_max is not set to IPSET_INVALID_ID * Resolve corrupted timeout values on set resize * Resolve "Directory not empty" error message- Update to new upstream release 6.16.1 * Fix RCU handling when the number of maximal sets are increased * netfilter: ipset: fix netiface set name overflow - Remove 0001-build-support-for-Linux-3.7-UAPI.patch, merged upstream - Remove 0001-build-Linux-3.7-netlink-fun.patch, merged upstream- Update to new upstream release 6.15 * Userspace changes: * Use gethostbyname2 instead of getaddrinfo * Support protocol numbers as well, not only protocol names * Kernel part changes: * Increase the number of maximal sets automatically as needed * Fix range bug in hash:ip,port,net - Add 0001-build-support-for-Linux-3.7-UAPI.patch - Add 0001-build-Linux-3.7-netlink-fun.patch- Update to new upstream release 6.14 * Internal CIDR bookkeeping was broken and would lead to mismatches when the number of different sized networks are greater than the smallest CIDR value * Support to match elements marked with "nomatch" in hash:*net* sets * Add /0 network support to hash:net,iface type- Update to new upstream release 6.13 * more restrictive command-line parser * documentation updates w.r.t. src/dst for hash:net,iface * allow saving to/restoring from a file without shell redirection * kernel: hash:net,iface: fix interface comparison * timeout fixing bug broke SET target special timeout value, fixed- Update to new upstream release 6.12 * Report syntax error messages immediately * Add dynamic module support to ipset userspace tool * Fix timeout value overflow bug at large timeout parameters * gcc 4.7 support- Update to new upstream release 6.11 * libipset is now complete; ipset is just a frontend * Log warning when a hash type of set gets full * Exceptions support added to hash:*net* types * hash:net,iface timeout bug fixed * Support hostnames and service names with dash- Populate ipset package on build.opensuse.org after disabling ipset-genl compilation in xtables-addons6.29-4.4.16.29-4.4.1ipsetipset.8.gz/usr/sbin//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:8217/openSUSE_Leap_42.3_Update/3bcf0fbca02edc027744fb80f9941df1-ipset.openSUSE_Leap_42.3_Updatedrpmlzma5x86_64-suse-linux?]"k%L(_J7\j^x> / [ّ6֭=O զZ[5IT[ypPω1͉]Q+vXֺ̎_ b]~04X*8[N]fg0sr"W)b6T-y~*MMVۃ&+p@}L1|VSꋑbW {^p%p5 PȰ.%Xק=kfSW2ݙ׹ԌJPg:mevЌV#I;~C鿸)p?S>]MzR,xJh?k yU,%H;>t"ę"Q8Ăg$|iP8#ݭwx_lӗm&;hBэZr3?=(4 \H8 #. BdxP$eS"%,M:(5$P]!X+ЇYNX>D{'^~[ MEuafR:Q%|0H"^`vt12%j?Dǹɞ[PM~\W$J8({:\eu=~^B ߁m"!|޶@J(:oe^b$kW]V}iJqB>y:gvA6gYQs0p:hd%h