Release Notes: This release modifies the behaviour of include files, fixes a relative-path error in fgadm, and improves the file parsing test suite.
Release Notes: The example in the filter_syntax man page was fixed, as was a 64-bit compilation warning in the filter.c netmask calculation. A "-F [policy]" flush option was added, and better feedback was provided for parse errors.
Release Notes: This version fixes the iptables sub-chains (and partially fixes the same for ipchains), includes log text support, and provides an RPM spec, init script, and associated Makefile. More complete examples were included, and some small bugs were fixed.
Release Notes: A minor Makefile issue was fixed. All protocols in /etc/services and numeric protocols specified by number are now supported. The "-m" option was added to force lookup of IP addresses and port numbers.
Release Notes: A security issue in the forwarding support for iptables and ipchains (which was new in 0.7) has been fixed.
Release Notes: Host-mode and router-mode were added, with syntax and command-line options to specify them. Straight packet forwarding now works properly. A small change was made to the state model so that established rules go at the head of the chain. A "lightweight state" mode was added. Several bugs were fixed. The iptables driver was expanded and the ipchains driver was cleaned up. Some new documentation was added.
Release Notes: Disabling negation of conjunctions ("or"s, aka brace-grouping), a new "no skeleton" option, fixes for a couple of segfaults/aborts where input filter is invalid, allowing literal +, ", and _ signs in input, and addition of sub-groups (where supported, large sub-sections can be moved out-of-line to improve performance).
Release Notes: Much of the iptables driver has been rewritten. A lot of possible leaks have been plugged via FORWARD. Logging, ICMP, transparent proxying, and masquerading support have been added.
Release Notes: An ipfilter backend was implemented, and a few bugs were fixed. More progress was made with the Cisco IOS backend.
Release Notes: An ipchains backend and a partial Cisco IOS ACL backend.