Re: [ANNOUNCE] nftables 1.1.2 release
Slavko <[email protected]> Wed, 16 Apr 2025 10:02:40 +0000
| Newsgroups | gmane.comp.security.firewalls.netfilter.general |
|---|---|
| Message-ID | <[email protected]> |
On 15. aprÃla 2025 16:28:03 UTC, Pablo Neira Ayuso <[email protected]> wrote: >Otherwise, auto-merge becomes of limited use with timers. I have timeout on it just for case, that something goes wrong and content is not updated/flushed, to prevent stale elements and auto-merge just due overlaping entries. I use this approach with ipsets (i have only one public nft host yet, for testing it). The main difference is, that i can have subnets and its supernets (as separate entries) without any problems in one set. >Let me spin over this again and get back to you, thanks for you >feedback. You are welcome. regards -- Slavko https://www.slavino.sk/