Release Notes: A segfault problem which occurred when using `!' without argument was fixed. PSD match for psd-delay-threshold > 100 was fixed. ip6tables alignment fixes and various patch-o-matic fixes were made. New ip6tables-restore and ip6tables-save manpages were written. A global PREFIX makefile variable was added for all paths. Debugging is now disabled if iptables is compiled without any COPT_FLAGS. The mangle table now attaches to all five netfilter hooks. The manpages for iptables and ip6tables were updated. The patch-o-matic program now supports removal of already-applied patches, and also supports patches to the userspace extensions. Various patch-o-matic additions were made.
Release Notes: This release has IPv6 support for the QUEUE target and libipq. There are bugfixes in iptables-save/restore. The modules IPV4OPTSSTRIP, ipv6header, quota match, and recent match have been added.
Release Notes: The segfaults in iptables-restore were fixed. Some string_to_number issues were fixed in LOG, TOS, and FTOS. iptables-save of the MIRROR target now works correctly. The TTL increment in the TTL target was fixed. Printing the inner-packet of ICMP error messages in the LOG target was fixed. A manpage was added for ip6tables. Other new features include random match, support for FXP, new H.323 conntrack + nat modules, and a new version of the TCP window tracking patch.
Release Notes: Fixes to ICMPv6 support for IPv6, fixes for problems with REJECT and iptables-restore/iptables-save, a fix for a possible string overflow in psd match, fixes for string match compile problems, and incremental checksumming when altering TTL in TTL target.
Release Notes: Fixes for SAME Target, fixes for iplimit match in combination with iptables-save/-restore, iptables-restore deals correctly with spaces in --log-prefix, a fix for collission of FTP and IRC NAT helpers, a new NETMAP Target for mapping whole networks 1:1 to other addresses, new length Target for matching packet length, new ipv4options match for matching IPv4 header options, new IPv6 agr match for matching IPv6 global aggregatable unicast adresses, new pkttype match for matching link-layer multicast/broadcast packets, and a new talk conntack and NAT helper module.
Release Notes: A fix for a small compile-bug preventing compilation in the 1.2.1 release.
Release Notes: Bugs fixed: checksum calculation in the TOS target, PASV ftp with some ftpds, and multiple iptables-save/restore bugs. New features: fxp support, optimized string matching, counter-restore functions for iptables, tcp-window-tracking compatible with NAT helpers, generic sequence number offset API for NAT helpers, port scan detection matching, and lots of ported features for IPv6.
Release Notes: Updates for 2.4.0 final compatibility, various IPv6 fixes, libipq manpages, ttl match enhancements, BALANCE target for load balancing, IPv6 mark match and MARK target, eggdrop bot connection tracking, and big-endian alignment fixes.