[ANNOUNCE] nftables 0.8.1 release

[Pablo Neira Ayuso]

Hi!

The Netfilter project proudly presents:

        nftables 0.8.1

This release contains mostly incremental fixes and documentation
updates, such as fixing up ./configure --with-mini-gmp for embedded
setups that don't have libgmp.

Deprecated syntax
=================

This release deprecates the "flow table" syntax in favor of "meter" to
address Netfilter's bugzilla issues:

https://bugzilla.netfilter.org/show_bug.cgi?id=1137
https://bugzilla.netfilter.org/show_bug.cgi?id=1185

This is an example of how to use it:

# nft add table filter
# nft add chain filter input { type filter hook input priority 0\; }
# nft add rule filter input meter local-traffic { ip saddr counter }

# nft list ruleset
table ip filter {
        chain input {
                type filter hook input priority 0; policy accept;
                meter local-traffic { ip saddr counter} 
        }
}
# nft list ruleset
table ip filter {
        chain input {
                type filter hook input priority 0; policy accept;
                meter local-traffic { ip saddr counter} 
        }
}
# nft list meter filter local-traffic 
table ip filter {
        meter local-traffic {
                type ipv4_addr
                elements = { 8.8.8.8 : counter packets 1 bytes 84, 84.11.121.21 : counter packets 1 bytes 76, 150.159.126.108 : counter packets 1 bytes 76, 123.102.2.4 : counter packets 1 bytes 76, 21.241.12.143 : counter packets 1 bytes 76 }
        }
}

Former 'flow table' syntax will be still around for a while, but listing
uses the new 'meter' syntax, so please revisit your scripts if you are
using this feature.

Resources
=========

The nftables code can be obtained from:

* http://netfilter.org/projects/nftables/downloads.html
* ftp://ftp.netfilter.org/pub/nftables
* git://git.netfilter.org/nftables

To build the code, libnftnl 1.0.9 and libmnl >= 1.0.2 are required:

* http://netfilter.org/projects/libnftnl/index.html
* http://netfilter.org/projects/libmnl/index.html

Visit our wikipage for user documentation at:

* http://wiki.nftables.org

For the manpage reference, check man(8) nft.

In case of bugs and feature request, file them via:

* https://bugzilla.netfilter.org

Make sure you create no duplicates already, thanks!

Happy firewalling!
-------------- next part --------------
Arturo Borrero Gonzalez (1):
      parser: allow classid as set key

Duncan Roe (5):
      doc: nft.8 change "Native Address Translation" to "Network Address Translation"
      doc: nft.8 simplify initial SYNOPSIS line
      doc: nft.8 document use of -f option to start nft scripts
      doc: nft.8 Syslog level is introduced by "level" not "syslog-level"
      doc: nft.8 aim for consistent synopses throughout

Florian Westphal (9):
      rule: fix netlink debug flag when listing table/rules
      tests: fix harmess typo in table name
      tests: icmpX: fix expected output
      tests: add test case that checks icmp6 in-ipv4
      tests: nft removes required payload protocol expressions
      tests: enable ip/ip.t for bridge protocol, too
      tests: nft removes required inet dependency expressions
      ct: don't print newline if label bit cannot be mapped
      netlink_linearize: exthdr op must be u32

Harsha Sharma (4):
      tests: shell: add testcases for named limits
      tests/monitor: Print error "this requires root" and exit
      evaluate: print error for null string
      tests/py: add test for empty string match

Pablo M. Bermudo Garay (1):
      src: do not print limit keyword inside object definition

Pablo Neira Ayuso (9):
      netlink: fix element addition to map with stateful object
      src: add nft_ prefix to everything exposed through include/nftables/nftables.h
      utils: fix one compilation error with --with-mini-gmp
      gmputil: turn mpz_printf into mpz_vfprintf to restore --with-mini-gmp
      src: deprecate "flow table" syntax, replace it by "meter"
      parser_bison: dismiss anonymous meters
      parser_bison: no need for 'name' token for meters
      include: refresh nf_tables.h cached copy
      build: Bump version to v0.8.1

Phil Sutter (19):
      netlink: Use nftnl_expr_fprintf() in netlink_dump_expr()
      main: Fix for wrong argument passed to cache_release in nft_ctx_free
      libnftables: Move library stuff out of main.c
      libnftables: Introduce nft_ctx_flush_cache()
      cli: Use nft_run_cmd_from_buffer()
      libnftables: Introduce getters and setters for everything
      libnftables: Get rid of explicit cache flushes
      libnftables: Flush iface cache after command execution
      Eliminate struct mnl_ctx
      libnftables: Unexport enum nftables_exit_codes
      libnftables: Split code into frontend and library
      rule: Make 'nft export' respect output_fp
      libnftables: Ensure output_fp is never NULL
      tests: shell: Prevent lockout in nft-f/0008split_tables_0
      Make libnftables a local static library
      tests/py: trivial: Fix error message
      src: fix protocol context update on big-endian systems
      build: Restore per object CFLAGS
      src: Don't merge adjacent/overlapping ranges

Varsha Rao (13):
      tests: files: Remove jump chain tests.
      tests: shell: Add test case for jump chain.
      tests: shell: Add test case for sets.
      tests: files: Remove tests for set.
      tests: shell: Add tests for variable definition.
      tests: files: Remove test cases for variable definition.
      tests: files: Remove tests for chain.
      tests: files: Remove tests for table.
      tests: files: Remove tests for verdict maps.
      tests: shell: Add test case for map expression.
      src: tests: files: Remove test files.
      tests: shell: Rename 0025named_limit_0 to 0026named_limit_0
      tests: shell: Add test for IPv4 Mapped IPv6 address.