Release Notes: This release includes aliasing support, which translates command lines using obsolete extensions into new ones. The option parser now flags illegal negative numbers in some more extensions. A division by zero was resolved in libxt_limit as well.
Release Notes: A handful of fixes were made in the option parser. Additional pkgconfig files are now available for libiptc.
Release Notes: A number of iptables-save/restore problems with conntrack were fixed. String, ttl, REJECT, and connbytes match. Some gcc-4 warnings were fixed. Support was added for ip6tables state and conntrack and connmark extensions. Support for new policy match was added. A major manpage update was done.
Release Notes: This release fixes iptables save/restore for a number of extensions, adds many missing man page snippets, fixes rule deletion in certain cases, and has more sanity checking of user input.
Release Notes: This release fixes CLUSTERIP rule deletion, libip6t_random compilation, and CONNMARK on 32-bit user space / 64-bit kernel architectures. It makes sure that the order of chains in the listing is the same as it was in the 1.2.x releases.
Release Notes: Memory leaks were fixed in ip(6)tables-save/restore. The printout of odd length netmasks was fixed in ip6tables. iptables-save now works properly with condition match, fuzzy match, (inverted) MAC match, the LOG target, and mport match. Invalid port ranges are now checked for by ip6tables UDP match. The ipq_id_t definition in libipq was fixed on "real" 64bit/64bit architectures. Endianness bugs related to ipv6_prefix_length in libip6tc were fixed.
Release Notes: The segfaults in iptables-restore were fixed. Some string_to_number issues were fixed in LOG, TOS, and FTOS. iptables-save of the MIRROR target now works correctly. The TTL increment in the TTL target was fixed. Printing the inner-packet of ICMP error messages in the LOG target was fixed. A manpage was added for ip6tables. Other new features include random match, support for FXP, new H.323 conntrack + nat modules, and a new version of the TCP window tracking patch.
Release Notes: Fixes for SAME Target, fixes for iplimit match in combination with iptables-save/-restore, iptables-restore deals correctly with spaces in --log-prefix, a fix for collission of FTP and IRC NAT helpers, a new NETMAP Target for mapping whole networks 1:1 to other addresses, new length Target for matching packet length, new ipv4options match for matching IPv4 header options, new IPv6 agr match for matching IPv6 global aggregatable unicast adresses, new pkttype match for matching link-layer multicast/broadcast packets, and a new talk conntack and NAT helper module.
Release Notes: A fix for a small compile-bug preventing compilation in the 1.2.1 release.