Mailing List Archive

Hi!

The Netfilter project proudly presents:

nftables 0.8.1

This release contains mostly incremental fixes and documentation
updates, such as fixing up ./configure --with-mini-gmp for embedded
setups that don't have libgmp.

Deprecated syntax
=================

This release deprecates the "flow table" syntax in favor of "meter" to
address Netfilter's bugzilla issues:

https://bugzilla.netfilter.org/show_bug.cgi?id=1137
https://bugzilla.netfilter.org/show_bug.cgi?id=1185

This is an example of how to use it:

# nft add table filter
# nft add chain filter input { type filter hook input priority 0\; }
# nft add rule filter input meter local-traffic { ip saddr counter }

# nft list ruleset
table ip filter {
chain input {
type filter hook input priority 0; policy accept;
meter local-traffic { ip saddr counter}
}
}
# nft list ruleset
table ip filter {
chain input {
type filter hook input priority 0; policy accept;
meter local-traffic { ip saddr counter}
}
}
# nft list meter filter local-traffic
table ip filter {
meter local-traffic {
type ipv4_addr
elements = { 8.8.8.8 : counter packets 1 bytes 84, 84.11.121.21 : counter packets 1 bytes 76, 150.159.126.108 : counter packets 1 bytes 76, 123.102.2.4 : counter packets 1 bytes 76, 21.241.12.143 : counter packets 1 bytes 76 }
}
}

Former 'flow table' syntax will be still around for a while, but listing
uses the new 'meter' syntax, so please revisit your scripts if you are
using this feature.

Resources
=========

The nftables code can be obtained from:

* http://netfilter.org/projects/nftables/downloads.html
* ftp://ftp.netfilter.org/pub/nftables
* git://git.netfilter.org/nftables

To build the code, libnftnl 1.0.9 and libmnl >= 1.0.2 are required:

* http://netfilter.org/projects/libnftnl/index.html
* http://netfilter.org/projects/libmnl/index.html

Visit our wikipage for user documentation at:

* http://wiki.nftables.org

For the manpage reference, check man(8) nft.

In case of bugs and feature request, file them via:

* https://bugzilla.netfilter.org

Make sure you create no duplicates already, thanks!

Happy firewalling!