Re: [gentoo-dev] nftables

2016-09-12 Thread Vadim A. Misbakh-Soloviov
I tried to migrate my ruleset to nftables and fount that nft lacks all of non-
in-kernel xtables modules (see xtables-addons package) and even some of in-
kernel ones: https://wiki.nftables.org/wiki-nftables/index.php/
Supported_features_compared_to_xtables



Re: [gentoo-dev] nftables

2016-09-12 Thread Luca Barbato
On 09/09/16 02:31, Ian Bloss wrote:
> Anyone actively using nftables for their firewall over iptables?
> Considering giving it a go as the syntax looks much nicer than iptables.
> 

I'm using a bit and just works fine =)

lu



Re: [gentoo-dev] nftables

2016-09-12 Thread Matthew Thode
On 09/08/2016 07:31 PM, Ian Bloss wrote:
> Anyone actively using nftables for their firewall over iptables?
> Considering giving it a go as the syntax looks much nicer than iptables.

Openstack uses nftables if it's available.  So kinda.

-- 
Matthew Thode (prometheanfire)



signature.asc
Description: OpenPGP digital signature


Re: [gentoo-dev] nftables

2016-09-12 Thread Ian Bloss
Neat, looks great so I wanted to make sure there wasn't any obvious
problems sticking out.

On Thu, Sep 8, 2016, 19:09 Nick Vinson  wrote:

> On 09/08/2016 05:31 PM, Ian Bloss wrote:
> > Anyone actively using nftables for their firewall over iptables?
> > Considering giving it a go as the syntax looks much nicer than iptables.
>
> Works well enough for me.  I haven't seen any obvious bugs with the
> newest version and no one has reported any issues either.
>
> - Nicholas Vinson
>
>


[gentoo-dev] Bug 548208 - net-fs/nfs-utils: enable gssproxy support (to replace rpc-svcgssd) seems forgotten?

2016-09-12 Thread Joakim Tjernlund
Could someone from core systems look at 
 https://bugs.gentoo.org/show_bug.cgi?id=548208
and "unbreak" unstable nfs-utils for openrc, please?

Jocke


Re: [gentoo-dev] Last rites: app-misc/subsurface

2016-09-12 Thread Marek Szuba
On 2016-09-11 14:19, Martin Gysel wrote:

>> +1.  Any package whose upstream says "don't build this yourself" is
>> hostile to open source principles. 
> just to make it clear, upstream never said such thing nor are they in
> any way hostile to open source principles (I suppose you wouldn't state
> that if you know subsurface's developers).
They have, however, used the term "deprecated" to describe
distribution-maintained packages. It's right there on the download page.

And yes, I know (and so do at least several other devs) that one of the
major contributors to Subsurface is one Linus Torvalds.

-- 
MS



signature.asc
Description: OpenPGP digital signature