Release of iptables-1.3.5
Netfilter Core Team <[email protected]> Wed, 1 Feb 2006 14:09:45 +0100
| Newsgroups | gmane.comp.security.firewalls.netfilter.announce,gmane.comp.security.firewalls.netfilter.general,gmane.comp.security.firewalls.netfilter.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi! The netfilter coreteam proudly presents: iptables version 1.3.5 The 1.3.5 version contains accumulated bugfixes to the last 1.3.4 version. It also fixes some compilation problems with old kernel headers. The most noteworthy new features are: - support for full netfilter/ipsec interoperability via policy match - support for ipv6 stateful packet filtering using nf_conntrack and the ip6tables 'state' and 'conntrack' match. The ChangeLog is attached to this mail. Version 1.3.5 can be obtained from: http://www.netfilter.org/files/iptables-1.3.5.tar.bz2 ftp://ftp.netfilter.org/pub/iptables/iptables-1.3.5.tar.bz2 More information can be found at the netfilter/iptables project homepage, available at: http://www.netfilter.org/ Happy firewalling, -- - Harald Welte <[email protected]> http://www.netfilter.org/ ============================================================================ "Fragmentation is like classful addressing -- an interesting early architectural error that shows how much experimentation was going on while IP was being designed." -- Paul Vixie
changes-iptables-1.3.5.txt
(text/plain, 1.7 KB)
iptables v1.3.5 Changelog ====================================================================== This version requires kernel >= 2.4.0 This version recommends kernel >= 2.4.18 Bugs fixed from 1.3.4: - Fix conntrack --ctproto option in iptables-save [ Phil Oester ] - Fix string match '--from' option in iptables-save [ Michael Rash ] - Fix option parser of ttl match [ Patrick McHardy ] - Get rid of gcc-4 warnings [ Patrick McHardy ] - Fix spelling of 'address' in DNAT/SNAT manpage section [ MJ Anthony ] - Fix 'tcp-rst' parsing in REJECT target [ Torsten Hilbrich ] - Fix probing for supported revisions [ Jones Desougi ] - Fix compilation of iptables on [old] systems that don't have IPT_F_GOTO [ Harald Welte ] - Only set revisions on real targets, not on jumps [ Pablo Neira ] - Fix memory leak in TC_COMMIT() of libiptc [ Markus Sundberg ] - Correctly propagate errors of setsockopt to calling function [ Harald Welte ] - Fix connbytes match iptables-save [ Unknown ] - Fix sctp match compilation against recent kernel headers [ Harald Welte ] - Fix conntrack match compilation against 2.4.0 kernel headers [ Harald Welte ] Changes from 1.3.4: - Add support for ip6tables connmark match and target [ Harald Welte ] - Add support for ip6tables state match [ Harald Welte ] - Add support for new policy ip[6]tables match [ Patrick McHardy ] - Major manpage update [ Yasuyuki Kozakai ] - Remove ippool support, it has been deprecated by ipset long time ago [ Harald Welte ] Please note: Since version 1.2.7a, patch-o-matic is now no longer part of iptables but rather distributed as a seperate package (ftp://ftp.netfilter.org/pub/patch-o-matic-ng/snapshot)
signature.asc
(application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) iD8DBQFD4LMZNfqJzMqajVsRAkNtAJ41u3JIIMDybv7bR1ECQaMhfBzDiACfZakO KDP4qNZGqIKzzFk+G6oamE0= =U6fY -----END PGP SIGNATURE-----