{"action":"created","issue":{"url":"https://api.github.com/repos/mrash/fwknop/issues/83","labels_url":"https://api.github.com/repos/mrash/fwknop/issues/83/labels{/name}","comments_url":"https://api.github.com/repos/mrash/fwknop/issues/83/comments","events_url":"https://api.github.com/repos/mrash/fwknop/issues/83/events","html_url":"https://github.com/mrash/fwknop/issues/83","id":14775887,"number":83,"title":"Feature Request: Ipsets","user":{"login":"ReubenM","id":45847,"avatar_url":"https://avatars.githubusercontent.com/u/45847?v=3","gravatar_id":"","url":"https://api.github.com/users/ReubenM","html_url":"https://github.com/ReubenM","followers_url":"https://api.github.com/users/ReubenM/followers","following_url":"https://api.github.com/users/ReubenM/following{/other_user}","gists_url":"https://api.github.com/users/ReubenM/gists{/gist_id}","starred_url":"https://api.github.com/users/ReubenM/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ReubenM/subscriptions","organizations_url":"https://api.github.com/users/ReubenM/orgs","repos_url":"https://api.github.com/users/ReubenM/repos","events_url":"https://api.github.com/users/ReubenM/events{/privacy}","received_events_url":"https://api.github.com/users/ReubenM/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"mrash","id":380228,"avatar_url":"https://avatars.githubusercontent.com/u/380228?v=3","gravatar_id":"","url":"https://api.github.com/users/mrash","html_url":"https://github.com/mrash","followers_url":"https://api.github.com/users/mrash/followers","following_url":"https://api.github.com/users/mrash/following{/other_user}","gists_url":"https://api.github.com/users/mrash/gists{/gist_id}","starred_url":"https://api.github.com/users/mrash/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mrash/subscriptions","organizations_url":"https://api.github.com/users/mrash/orgs","repos_url":"https://api.github.com/users/mrash/repos","events_url":"https://api.github.com/users/mrash/events{/privacy}","received_events_url":"https://api.github.com/users/mrash/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/mrash/fwknop/milestones/5","html_url":"https://github.com/mrash/fwknop/milestones/fwknop-2.7.0","labels_url":"https://api.github.com/repos/mrash/fwknop/milestones/5/labels","id":270075,"number":5,"title":"fwknop-2.7.0","description":"For the 2.7 release here are the main things that will be included in this release:\r\n\r\n- Privilege separation support - only two areas of fwknopd need to run as root: packet acquisition and firewall rule adjustment.  Everything else should run as non-privileged  user.\r\n- libcap-ng support.  libcap-ng provides a way to drop privileges for certain operations, and fwknopd should support this.\r\n- OpenBSD PF NAT support - extend fwknopd's NAT capabilities into the PF world.\r\n- Optional OpenSSL direct usage for crypto operations","creator":{"login":"mrash","id":380228,"avatar_url":"https://avatars.githubusercontent.com/u/380228?v=3","gravatar_id":"","url":"https://api.github.com/users/mrash","html_url":"https://github.com/mrash","followers_url":"https://api.github.com/users/mrash/followers","following_url":"https://api.github.com/users/mrash/following{/other_user}","gists_url":"https://api.github.com/users/mrash/gists{/gist_id}","starred_url":"https://api.github.com/users/mrash/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mrash/subscriptions","organizations_url":"https://api.github.com/users/mrash/orgs","repos_url":"https://api.github.com/users/mrash/repos","events_url":"https://api.github.com/users/mrash/events{/privacy}","received_events_url":"https://api.github.com/users/mrash/received_events","type":"User","site_admin":false},"open_issues":16,"closed_issues":6,"state":"open","created_at":"2013-02-18T19:37:49Z","updated_at":"2015-12-23T23:48:31Z","due_on":"2015-11-30T05:00:00Z","closed_at":null},"comments":2,"created_at":"2013-05-26T22:04:16Z","updated_at":"2015-12-23T23:50:56Z","closed_at":null,"body":"First, a big thanks for all the work going into the 2.x codebase. This is great.\r\n\r\nI wanted to request support for the option to utilize ipsets for managing access instead of adding rules to an iptables chain. This would allow much better integration with other firewall tools (in my case, shorewall) as well as keeping the iptables filters more manageable. "},"comment":{"url":"https://api.github.com/repos/mrash/fwknop/issues/comments/167010470","html_url":"https://github.com/mrash/fwknop/issues/83#issuecomment-167010470","issue_url":"https://api.github.com/repos/mrash/fwknop/issues/83","id":167010470,"user":{"login":"mrash","id":380228,"avatar_url":"https://avatars.githubusercontent.com/u/380228?v=3","gravatar_id":"","url":"https://api.github.com/users/mrash","html_url":"https://github.com/mrash","followers_url":"https://api.github.com/users/mrash/followers","following_url":"https://api.github.com/users/mrash/following{/other_user}","gists_url":"https://api.github.com/users/mrash/gists{/gist_id}","starred_url":"https://api.github.com/users/mrash/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mrash/subscriptions","organizations_url":"https://api.github.com/users/mrash/orgs","repos_url":"https://api.github.com/users/mrash/repos","events_url":"https://api.github.com/users/mrash/events{/privacy}","received_events_url":"https://api.github.com/users/mrash/received_events","type":"User","site_admin":false},"created_at":"2015-12-23T23:50:56Z","updated_at":"2015-12-23T23:50:56Z","body":"This is supported now as of 2.6.8, and a blog post on cipherdyne.org provides an example integration with ipset."}}