<html>
    <head>
      <base href="https://bugzilla.netfilter.org/" />
    </head>
    <body><span class="vcard"><a class="email" href="mailto:pablo@netfilter.org" title="Pablo Neira Ayuso <pablo@netfilter.org>"> <span class="fn">Pablo Neira Ayuso</span></a>
</span> changed
              <a class="bz_bug_link 
          bz_status_ASSIGNED "
   title="ASSIGNED - Usability improvements, enabling creation of complex firewalls"
   href="https://bugzilla.netfilter.org/show_bug.cgi?id=1434">bug 1434</a>
          <br>
             <table border="1" cellspacing="0" cellpadding="8">
          <tr>
            <th>What</th>
            <th>Removed</th>
            <th>Added</th>
          </tr>

         <tr>
           <td style="text-align:right;">Status</td>
           <td>NEW
           </td>
           <td>ASSIGNED
           </td>
         </tr></table>
      <p>
        <div>
            <b><a class="bz_bug_link 
          bz_status_ASSIGNED "
   title="ASSIGNED - Usability improvements, enabling creation of complex firewalls"
   href="https://bugzilla.netfilter.org/show_bug.cgi?id=1434#c4">Comment # 4</a>
              on <a class="bz_bug_link 
          bz_status_ASSIGNED "
   title="ASSIGNED - Usability improvements, enabling creation of complex firewalls"
   href="https://bugzilla.netfilter.org/show_bug.cgi?id=1434">bug 1434</a>
              from <span class="vcard"><a class="email" href="mailto:pablo@netfilter.org" title="Pablo Neira Ayuso <pablo@netfilter.org>"> <span class="fn">Pablo Neira Ayuso</span></a>
</span></b>
        <pre>Regarding this one:

<span class="quote">> <a href="https://github.com/MaxKellermann/ferm/issues/35#issuecomment-486644235">https://github.com/MaxKellermann/ferm/issues/35#issuecomment-486644235</a></span >

This patch will be available in the next nftables release. This requires a
kernel >= 5.9-rc1.

commit c330152b7f7779f15dba3e0862bf5616e7cb3eab
Author: Pablo Neira Ayuso <<a href="mailto:pablo@netfilter.org">pablo@netfilter.org</a>>
Date:   Sat Jul 4 02:43:44 2020 +0200

    src: support for implicit chain bindings

    This patch allows you to group rules in a subchain, e.g.

     table inet x {
            chain y {
                    type filter hook input priority 0;
                    tcp dport 22 jump {
                            ip saddr { 127.0.0.0/8, 172.23.0.0/16,
192.168.13.0/24 } accept
                            ip6 saddr ::1/128 accept;
                    }
            }
     }

    This also supports for the `goto' chain verdict.

BTW: Thanks for splitting this long report into several reports into
independent bugzilla tickets for easier tracking.</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are watching all bug changes.</li>
      </ul>
    </body>
</html>