[ANNOUNCE]: Release of iptables-1.4.10

[ANNOUNCE]: Release of iptables-1.4.10

[Patrick McHardy]

[-- Attachment #1: Type: text/plain, Size: 751 bytes --]

The netfilter coreteam presents:

    iptables version 1.4.10

the iptables release for the 2.6.36 kernel. Changes include:

- support for the cpu match, which can be used to improve cache
  locality when running multiple server instances

- support for the IDLETIMER target, which can be used to notify
  userspace of interfaces being idle

- support for the CHECKSUM target

- support for the ipvs match

- documentation updates

- a fix for deletion of rules using the quota match

See the Changelog for more details.

Version 1.4.10 can be obtained from:

http://www.netfilter.org/projects/iptables/downloads.html
ftp://ftp.netfilter.org/pub/iptables/
git://git.netfilter.org/iptables.git

On behalf of the Netfilter Core Team.
Happy firewalling!

[-- Attachment #2: changes-iptables-1.4.10.txt --]
[-- Type: text/plain, Size: 1319 bytes --]

Changli Gao (1):
      libxt_quota: don't ignore the quota value on deletion

Eric Dumazet (2):
      extensions: REDIRECT: add random help
      extension: add xt_cpu match

Hannes Eder (1):
      libxt_ipvs: user-space lib for netfilter matcher xt_ipvs

Jan Engelhardt (11):
      doc: let man(1) autoalign the text in xt_cpu
      doc: remove extra empty line from xt_cpu
      doc: minimal spelling updates to xt_cpu
      all: consistent syntax use in struct option
      doc: consistent use of markup
      xtables: remove unnecessary cast
      build: fix static linking
      iptables-xml: resolve compiler warnings
      iptables: limit chain name length to be consistent with targets
      libiptc: build with -Wl,--no-as-needed
      libiptc: add Libs.private to pkgconfig files

Luciano Coelho (2):
      extensions: add idletimer xt target extension
      extensions: libxt_IDLETIMER: use xtables_param_act when checking options

Michael S. Tsirkin (1):
      extensions: libxt_CHECKSUM extension

Patrick McHardy (6):
      extensions: libipt_LOG/libip6t_LOG: support macdecode option
      extensions: fix compilation of the new CHECKSUM target
      Merge branch 'master' into iptables-next
      Merge branch 'master' into iptables-next
      Merge branch 'iptables-next'
      Bump version to 1.4.10

Re: [ANNOUNCE]: Release of iptables-1.4.10

[Jan Engelhardt]

On Friday 2010-10-29 17:43, Patrick McHardy wrote:

>The netfilter coreteam presents:
>
>    iptables version 1.4.10
>
>Version 1.4.10 can be obtained from:
>
>http://www.netfilter.org/projects/iptables/downloads.html
>ftp://ftp.netfilter.org/pub/iptables/
>git://git.netfilter.org/iptables.git

The v1.4.10 tag seems to not have made it onto the server. :^)

Re: [ANNOUNCE]: Release of iptables-1.4.10

[Patrick McHardy]

Am 29.10.2010 19:54, schrieb Jan Engelhardt:
> 
> On Friday 2010-10-29 17:43, Patrick McHardy wrote:
> 
>> The netfilter coreteam presents:
>>
>>    iptables version 1.4.10
>>
>> Version 1.4.10 can be obtained from:
>>
>> http://www.netfilter.org/projects/iptables/downloads.html
>> ftp://ftp.netfilter.org/pub/iptables/
>> git://git.netfilter.org/iptables.git
> 
> The v1.4.10 tag seems to not have made it onto the server. :^)
> 

It should be there:

$ hostname
vishnu.netfilter.org

$ git tag -l|grep 1.4.10
v1.4.10

Re: [ANNOUNCE]: Release of iptables-1.4.10

[Jan Engelhardt]

On Friday 2010-10-29 19:58, Patrick McHardy wrote:
>>>
>>> Version 1.4.10 can be obtained from:
>>>
>>> http://www.netfilter.org/projects/iptables/downloads.html
>>> ftp://ftp.netfilter.org/pub/iptables/
>>> git://git.netfilter.org/iptables.git
>> 
>> The v1.4.10 tag seems to not have made it onto the server. :^)
>
>It should be there:
>
>$ hostname
>vishnu.netfilter.org
>$ git tag -l|grep 1.4.10
>v1.4.10

Ah. git does not fetch tags if they are not reachable from a
branch head. (master is still at v1.4.10~1.)

Re: [ANNOUNCE]: Release of iptables-1.4.10

[Mr Dash Four]

> The netfilter coreteam presents:
>
>     iptables version 1.4.10
>   
General question: Would it be safe to compile this (from source) and 
install it on my system which has the 2.6.16.60 kernel and iptables 
1.3.7 installed and running?

I am quite desperate to get ipset working on that machine and, as I 
understand it, I have a choice of either compiling the 1.3.7 version 
(adding kernel/include/linux/netfilter_ipv4/ip_set.h from ipset source 
tree to include/linux/netfilter_ipv4 prior to that) or compile the 
latest 1.4.10 version of iptables prior to compiling and installing ipset.

I just compiled both versions of iptables and did 'make' successfully, 
though I haven't yet made the install.

Re: [ANNOUNCE]: Release of iptables-1.4.10

[Patrick McHardy]

On 02.11.2010 17:40, Mr Dash Four wrote:
> 
>> The netfilter coreteam presents:
>>
>>     iptables version 1.4.10
>>   
> General question: Would it be safe to compile this (from source) and
> install it on my system which has the 2.6.16.60 kernel and iptables
> 1.3.7 installed and running?

Yes, that should work. Generally newer kernels may require newer
versions of iptables because old match or target revisions got
removed in the kernel, but the other way around should always work.

> I am quite desperate to get ipset working on that machine and, as I
> understand it, I have a choice of either compiling the 1.3.7 version
> (adding kernel/include/linux/netfilter_ipv4/ip_set.h from ipset source
> tree to include/linux/netfilter_ipv4 prior to that) or compile the
> latest 1.4.10 version of iptables prior to compiling and installing ipset.
> 
> I just compiled both versions of iptables and did 'make' successfully,
> though I haven't yet made the install.