Netfilter-Devel Archive on
 help / color / Atom feed
* [ANNOUNCE] ipset 7.4 released
@ 2019-11-01 15:44 Kadlecsik József
  0 siblings, 0 replies; only message in thread
From: Kadlecsik József @ 2019-11-01 15:44 UTC (permalink / raw)
  To: netfilter, netfilter-devel


I'm happy to announce ipset 7.4 which brings a few corrections and fixes.
As a new feature, Kristian Evensen added wildcard support to the type

Please note, if you want to use ipset with kernel 5.2 and above, you need 
ipset 7.4 otherwise some commands do not work: from 5.2 NL_VALIDATE_STRICT 
is enabled and three netlink nla policies in ipset was not complete.

The sorting is changed: instead of textual sorting it now follows the 
natural ordering of IP addresses (i.e. comes before 
and in the case of the same prefix, more specific netblocks come before 
the least specific ones.

Userspace changes:
  - Fix compatibility support for netlink extended ACK and add
    synchronize_rcu_bh() checking
  - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
    (Thomas Gleixner)
  - ipset: Add wildcard support to net,iface (Kristian Evensen)
  - Sort naturally instead of textual sort (bugzilla #1369)
  - Do not return with error at 'make modules_install' when modules
    are not loaded (reported by Oskar Berggren)
Kernel part changes:
  - Fix nla_policies to fully support NL_VALIDATE_STRICT
  - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
    (Thomas Gleixner)
  - netfilter: remove unnecessary spaces (yangxingwu)
  - ipset: Add wildcard support to net,iface (Kristian Evensen)
  - ipset: Copy the right MAC address in hash:ip,mac IPv6 sets
    (Stefano Brivio)
  - netfilter: ipset: move ip_set_get_ip_port() to ip_set_bitmap_port.c.
    (Jeremy Sowden)
  - netfilter: ipset: move function to ip_set_bitmap_ip.c. (Jeremy Sowden) 
  - netfilter: ipset: make ip_set_put_flags extern. (Jeremy Sowden)
  - netfilter: ipset: move functions to ip_set_core.c. (Jeremy Sowden)
  - netfilter: ipset: move ip_set_comment functions from ip_set.h
    to ip_set_core.c. (Jeremy Sowden)
  - netfilter: ipset: remove inline from static functions in .c files.
    (Jeremy Sowden)
  - netfilter: ipset: add a coding-style fix to ip_set_ext_destroy.
    (Jeremy Sowden)
  - netfilter: added missing includes to a number of header-files.
    (Jeremy Sowden)
  - netfilter: inlined four headers files into another one. (Jeremy 
  - netfilter: ipset: Fix an error code in ip_set_sockfn_get()
    (Dan Carpenter)

You can download the source code of ipset from:

Best regards,
E-mail  :,
PGP key :
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
          H-1525 Budapest 114, POB. 49, Hungary

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, back to index

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-11-01 15:44 [ANNOUNCE] ipset 7.4 released Kadlecsik József

Netfilter-Devel Archive on

Archives are clonable:
	git clone --mirror netfilter-devel/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 netfilter-devel netfilter-devel/ \
	public-inbox-index netfilter-devel

Example config snippet for mirrors

Newsgroup available over NNTP:

AGPL code for this site: git clone