This changelog only applies to MIT/Apache2.0 licensed changes. Newer changes does not appear in the changelog.
All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
- Added: for new features.
- Changed: for changes in existing functionality.
- Deprecated: for soon-to-be removed features.
- Removed: for now removed features.
- Fixed: for any bug fixes.
- Security: in case of vulnerabilities.
- Upgrade the err-derive dependency to 0.3.0.
- Implement Send+Sync for Table, Chain, Rule, Batch and Iter (batch iterator).
- Add
Natexpression allowing SNat and DNat rules.
- Add
Registerenum and a register field to theImmediateexpression. Allowing control over which netfilter register the immediate data is loaded into
- Fix memory leak in
table::get_tables_cb.
- Add support for matching on socket UID and socket GID in
Metaexpressions.
- Mark
Metaand many payload enums as#[non_exhaustive]. Allows adding more expressions without a breaking release in the future. - Increase minimum supported rust version to 1.40 due to
#[non_exhaustive].
- Add
Rejectverdict for responding with ICMP packets or TCP RST to the origin.
- Add
ChainTypeand allow setting a chain to either filter, route or nat type. - Add support for reading and setting marks in the
MetaandConntrackexpressions. - Add support for reading the cgroup via the
Metaexpression. - Add
Immediateexpression type that can load data into the registers. - Add support for masquerading.
- Implement
DebugforChain.
- Change
get_tables_nlmsgto include all tables, not only inet tables, but also arp, ip, ip6, bridge etc.
- Fix compilation errors on ARM64 platforms.
- Set
NFTNL_CHAIN_FAMILYfor chains and other fixes making the library compatible with older kernels.
- Add support for checking ICMPv6 header fields.
- Add
add-get-tables-requestthat can create requests to enumerate tables. - Add bindings to
libnftnl-1.1.2.
- Upgrade crates to Rust 2018 edition.
- Remove the
error-chaindependency. Now aborts on allocation error.
- Bindings to
libnftnlversions1.0.6through1.1.1 - Initial safe abstraction. Support for batches, tables, chains, rules and sets. All with a limited set of expression types.