Release Notes: The segfaults in iptables-restore were fixed. Some string_to_number issues were fixed in LOG, TOS, and FTOS. iptables-save of the MIRROR target now works correctly. The TTL increment in the TTL target was fixed. Printing the inner-packet of ICMP error messages in the LOG target was fixed. A manpage was added for ip6tables. Other new features include random match, support for FXP, new H.323 conntrack + nat modules, and a new version of the TCP window tracking patch.
Release Notes: This release adds support for the Day Transition Ignore option in xt_time.
Release Notes: This release includes aliasing support, which translates command lines using obsolete extensions into new ones. The option parser now flags illegal negative numbers in some more extensions. A division by zero was resolved in libxt_limit as well.
Release Notes: This release adds support for changes found in Linux 3.5: the "hashlimit" match has gained support for byte-based operation, and the "recent" match has gained the "--mask" option to group hosts.
Release Notes: This release supports the new cttimeout infrastructure. This allows you to attach specific timeout policies to flow via iptables CT targets.
Release Notes: This release added support for xt_addrtype rev 1, xt_nfacct, xt_rpfilter, IPv6-capable xt_ecn, and xt_recent's reap feature.