Home
Reading
Searching
Subscribe
Sponsors
Statistics
Posting
Contact
Spam
Lists
Links
About
Hosting
Filtering
Features Download
Marketing
Archives
FAQ
Blog
 
Gmane
From: Jozsef Kadlecsik <kadlec <at> blackhole.kfki.hu>
Subject: [ANNOUNCE] ipset 6.15 released
Newsgroups: gmane.comp.security.firewalls.netfilter.general
Date: Monday 19th November 2012 13:03:09 UTC (over 4 years ago)
Hi,

I'm happy to announce ipset 6.15, which brings a few bugfixes and 
corrections. The most important is that there was a range input bug in 
hash:ip,port,net type: if a single element was to be added/deleted, due to 
a missing initialization, a range of elements were added/deleted.

From now on the "ipset" tool uses gethostbyname2 instead of getaddrinfo: 
in newer glibc, getaddrinfo issues an extra system call to kernel, which 
slows down ipset.

Userspace changes:
 - Fix interactive mode (Fredrik Eriksson)
 - Use gethostbyname2 instead of getaddrinfo
 - Make tests/check_cidrs.sh script executable
 - Add tests to check completely ranges with hash types
 - Make easier to apply the netlink.patch
 - Support protocol numbers as well, not only protocol names
 - Add (back) the debug flag to configure
 - Add simple test to check cidr book-keeping

Kernel part changes:
 - Increase the number of maximal sets automatically as needed
 - Restore the support of kernel versions between 2.6.32 and 2.6.35
 - Fix range bug in hash:ip,port,net
 - Revert, then reapply cidr book keeping patch to handle /0

You can download the source code of ipset from:
        http://ipset.netfilter.org
        ftp://ftp.netfilter.org/pub/ipset/
        git://git.netfilter.org/ipset.git

Best regards,
Jozsef
-
E-mail  : [email protected], [email protected]
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
          H-1525 Budapest 114, POB. 49, Hungary
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
 
CD: 4ms