Release Notes: Better support for mixed IPv4/IPv6 rules.
Release Notes: New @cat, @substr, and @length functions, and updates for the "state" and "icmp" netfilter modules.
Release Notes: New string comparison functions, IPv6 support in the resolver, and support for "ebtables --snap-arp".
Release Notes: Negation is now supported in mark, connmark, and set. The $FILENAME automatic variable was added. @include can now run a program. The $CHAIN variable within @subchain was fixed.
Release Notes: Double negation is detected. Detection of negated arrays was improved. dpkg's backup/temporary files on @include are ignored. "Flush" hooks were added.
Release Notes: This release enables policy-only domains. It doesn't list custom chains in --flush --fast mode.
Release Notes: Duplicate specification of "table" and "chain" is allowed for better 1.3.x compatibility.
Release Notes: This release adds the missing "COMMIT" lines when flushing in the "fast" mode.
Release Notes: Support for arptables and ebtables was added. The order of match modules is now preserved.
Release Notes: This release will not ignore unknown keywords after the target, and will not include hidden files.