Hi,
I'm happy to announce ipset 6.11, which brings a couple of build fixes
from Jan and a timeout bugfix for the hash:net,iface type where the timed
out entries were still matched until the garbage collector erased them.
The new version includes two new features as well:
- The hash:*net* types support the "nomatch" flag for the entries,
by which one can build up a set with exceptions. For example the set
ipset create test hash:net
ipset add test 192.168.0/24
ipset add test 192.168.0/30 nomatch
matches all IP addresses from 192.168.0/24 except the ones
from 192.168.0/30.
- Escaping notation added to support hostnames and service names with dash
in the name: such names must be enclosed by square brackets
ipset add test [hostname-with-dash],[ftp-data]
Userspace changes:
- Support hostnames and service names with dash
- Exceptions support added to hash:*net* types
- Set types moved into libipset library
- Library map file added in order to support library versioning
- doc: Linux 2.6.39 already has the defs (Jan Engelhardt)
- build: install libipset in the right place (Jan Engelhardt)
- Provide a pkgconfig file (Jan Engelhardt)
- build: make distcheck work and use POSIX mode for tarball generation
(Jan Engelhardt)
- build: install libipset/linux_ip_set_list.h (Jan Engelhardt)
- build: include libipset/nfproto.h (Jan Engelhardt)
- build: process include/libipset/ (Jan Engelhardt)
- build: use AC_CONFIG_AUX_DIR and stash away tools (Jan Engelhardt)
- Update .gitignore (Jan Engelhardt)
Kernel part changes:
- hash:net,iface timeout bug fixed
- Exceptions support added to hash:*net* types
- net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules
- Log warning when a hash type of set gets full
You can download the source code of ipset from:
http://ipset.netfilter.org
ftp://ftp.netfilter.org/pub/ipset/
git://git.netfilter.org/ipset.git
Best regards,
Jozsef
-
E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
H-1525 Budapest 114, POB. 49, Hungary
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
