[ANNOUNCE] iptables 1.4.21 release

[ANNOUNCE] iptables 1.4.21 release

[Pablo Neira Ayuso]

[-- Attachment #1: Type: text/plain, Size: 872 bytes --]

Hi!

The Netfilter project proudly presents:

        iptables 1.4.21

iptables is the userspace command line program used to configure the
Linux packet filtering ruleset. It is targeted towards system administrators.
Since Network Address Translation is also configured from the packet filter
ruleset, iptables is used for this, too. The iptables package also includes
ip6tables. ip6tables is used for configuring the IPv6 packet filter.

This release includes fixes and a couple of new features:

* --nowildcard option for xt_socket, available since Linux kernel 3.11,
  from Eric Dumazet.

* SYNPROXY support, available since Linux kernel 3.12, from Patrick McHardy.

See ChangeLog that comes attached to this email for more details.

You can download it from:

http://www.netfilter.org/projects/iptables/downloads.html
ftp://ftp.netfilter.org/pub/iptables/

Have fun!

[-- Attachment #2: changes-iptables-1.4.21.txt --]
[-- Type: text/plain, Size: 1719 bytes --]

Eric Dumazet (1):
      xt_socket: add --nowildcard flag

Florian Westphal (3):
      extensions: libxt_socket: update man page
      doc: add libnetfilter_queue pointer to libxt_NFQUEUE.man
      doc: merge ip6table man pages into ipv4 ones

Jozsef Kadlecsik (1):
      extensions: libxt_set, libxt_SET: check the set family too

Kevin Cernekee (1):
      ip6tables: Use consistent exit code for EAGAIN

Laurence J. Lane (8):
      iptables: libxt_hashlimit.man: correct address
      iptables: libxt_conntrack.man extraneous commas
      iptables: libip(6)t_REJECT.man default icmp types
      iptables: iptables-xm1.1 correct man section
      iptables: libxt_recent.{c,man} dead URL
      iptables: libxt_string.man add examples
      extensions: libxt_LOG: use generic syslog reference in manpage
      iptables: extensions/GNUMakefile.in use CPPFLAGS

Lutz Jaenicke (1):
      iptables: correctly reference generated file

Pablo Neira Ayuso (7):
      Merge branch 'stable-1.4.20'
      Merge branch 'stable-1.4.20'
      ip[6]tables: fix incorrect alignment in commands_v_options
      build: add software version to manpage first line at configure stage
      extensions: libxt_cluster: add note on arptables-jf
      utils: nfsynproxy: fix error while compiling the BPF filter
      iptables 1.4.21 release

Patrick McHardy (2):
      extensions: add SYNPROXY extension
      utils: add nfsynproxy tool

Phil Oester (4):
      iptables: state match incompatibilty across versions
      libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks
      iptables: improve chain name validation
      iptables: spurious error in load_extension

stephen hemminger (1):
      xtables: trivial spelling fix

Re: [ANNOUNCE] iptables 1.4.21 release

[Gustavo Zacarias]

On 11/22/2013 09:12 AM, Pablo Neira Ayuso wrote:

> Hi!
> 
> The Netfilter project proudly presents:
> 
>         iptables 1.4.21

Commit 76e230e41947576efb96e86e605bb84015cdb287 was never merged into
master so static builds are still broken for this release :-(
Regards.

Re: [ANNOUNCE] iptables 1.4.21 release

[Florian Westphal]

Gustavo Zacarias <gustavo@zacarias.com.ar> wrote:
> > The Netfilter project proudly presents:
> > 
> >         iptables 1.4.21
> 
> Commit 76e230e41947576efb96e86e605bb84015cdb287 was never merged into
> master so static builds are still broken for this release :-(

I am very sorry about this, i've merged stable-1.4.20 to master to fetch
this commit.

BUG ip6tables and helper

[Noel Butler]

Hi Pablo,

Bug with ip6tables and helpers

-j CT --helper irc

ip6tables: No chain/target/match by that name.


This *does* work with iptables


On 22/11/2013 22:12, Pablo Neira Ayuso wrote:

> Hi!
> 
> The Netfilter project proudly presents:
> 
> iptables 1.4.21

Re: BUG ip6tables and helper

[Florian Westphal]

Noel Butler <noel.butler@ausics.net> wrote:
> Bug with ip6tables and helpers
> 
> -j CT --helper irc
> 
> ip6tables: No chain/target/match by that name.
> 
> This *does* work with iptables

Yes, nf_conntrack_irc is ipv4 only at this time.