Hi!
The Netfilter project proudly presents:
iptables 1.6.1
iptables is the userspace command line program used to configure the
Linux 2.4.x and later packet filtering ruleset. It is targeted towards
system administrators.
This update contains accumulated bugfixes, several new extensions and
lots of translations via iptables-translate to ease migration to
nftables.
See ChangeLog that comes attached to this email for more details.
You can download it from:
http://www.netfilter.org/projects/iptables/downloads.html
ftp://ftp.netfilter.org/pub/iptables/
Have fun!
-------------- next part --------------
Ana Rey (1):
extensions: libxt_udp: add translation to nft
Arpan Kapoor (1):
libxtables: Replace gethostbyname() with getaddrinfo()
Arturo Borrero (3):
extensions/libxt_rpfilter.man: fix typo, specifiy vs specify
iptables/xtables-arp.c: fix typo, wierd vs weird
extensions/libxt_tcp: fix nftables translate flags value, 'none'
vs '0x0'
Arturo Borrero Gonzalez (1):
extensions: update Arturo Borrero email address
Brian Haley (1):
iptables-restore: add missing arguments to usage message
Florian Westphal (5):
iptables.8: mention iptables-save in -L documentation
iptables.8: nat table has four builtin chains
extensions: NETMAP: add ' to:' prefix when printing NETMAP target
extensions: NETMAP: fix iptables-save output
connlabel: clarify default config path
George Burgess IV (1):
libxt_multiport: remove an unused variable
Giuseppe Longo (1):
configure: make libmnl and libnftnl hard requirements
Guruswamy Basavaiah (4):
iptables: extensions: iptables-translate prints extra "nft"
after printing any error
iptables-translate: translate iptables --flush
iptables-translate: Printing the table name before chain name.
iptables-translate: Don't print "nft" in
iptables-restore-translate command
Gustavo Zacarias (1):
iptables: add xtables-config-parser.h to BUILT_SOURCES
Janani Ravichandran (1):
extensions: libip6t_rt.c: Add translation to nft
Jordan Yelloz (1):
extensions: added AR substitution
Keno Fischer (1):
build: Fix two compile errors during out-of-tree build
Laura Garcia Liebana (12):
extensions: libip6t_icmp6: Add translation to nft
extensions: libipt_LOG: Avoid to print the default log level in the
translation
extensions: libipt_icmp: Add translation to nft
extensions: libipt_REJECT: Avoid to print the default reject with value in
the translation
extensions: libip6t_REJECT: Avoid to print the default reject with value
in the translation
extensions: libxt_ipcomp: Add translation to nft
extensions: libip6t_hbh: Add translation to nft
extensions: libxt_multiport: Add translation to nft
extensions: libxt_dscp: Add translation to nft
extensions: libip6t_frag: Add translation to nft
extensions: libxt_cgroup: Add translation to nft
extensions: libxt_conntrack: Add translation to nft
Liping Zhang (27):
extensions: libxt_limit: fix a wrong translation to nft rule
extensions: libxt_mark: fix a wrong translation to nft when mask is
specified
extensions: libxt_TRACE: Add translation to nft
extensions: libipt_realm: fix order of mask and id when do nft translation
extensions: libxt_connlabel: fix crash when connlabel.conf is empty
extensions: libxt_connlabel: Add translation to nft
extensions: libxt_NFLOG: display nflog-size even if it is zero
extensions: libxt_NFLOG: translate to nft log snaplen if nflog-size is
specified
extensions: libxt_NFLOG: add unit test to cover nflog-size with zero
extensions: libxt_connlabel: add unit test
iptables-translate: add in/out ifname wildcard match translation to nft
extensions: libxt_CLASSIFY: Add translation to nft
extensions: libipt_DNAT/SNAT: fix "OOM" when do translation to
nft
extensions: libip[6]t_SNAT/DNAT: use the new nft syntax when do xlate
extensions: libip[6]t_REDIRECT: use new nft syntax when do xlate
extensions: libip6t_SNAT/DNAT: add square bracket in xlat output when port
is specified
extensions: libipt_realm: add a missing space in translation
extensions: libxt_iprange: rename "ip saddr" to "ip6
saddr" in ip6tables-xlate
extensions: libxt_iprange: handle the invert flag properly in translation
extensions: libxt_devgroup: handle the invert flag properly in translation
extensions: libxt_ipcomp: add range support in translation
extensions: libxt_quota: add translation to nft
extensions: libxt_DSCP: add translation to nft
extensions: libxt_statistic: add translation to nft
extensions: LOG: add log flags translation to nft
extensions: libxt_connbytes: Add translation to nft
extensions: libxt_rpfilter: add translation to nft
Loganaden Velvindron (1):
libxt_TCPOPTSTRIP: Fix musl compatibility
Pablo M. Bermudo Garay (11):
extensions: iprange: remove extra space in translation
iptables-compat: use nft built-in comments support
xtables-translate: fix multiple spaces issue
include: xtables: fix struct definitions grepability
xtables-translate: fix issue with quotes
xtables-compat: fix comments listing
xtables-compat: remove useless functions
xtables-translate: add escape_quotes option to comment_xlate
xtables-compat: check if nft ruleset is compatible
xtables-compat: add rule cache
xtables-translate-restore: do not escape quotes
Pablo Neira Ayuso (13):
nft: xtables: add generic parsing infrastructure to interpret commands
nft: xtables-restore: add generic parsing infrastructure
nft: xtables: add the infrastructure to translate from iptables to nft
extensions: libxt_tcp: add translation to nft
extensions: libxt_state: add translation to nft
libxtables: fix leak in xt_buf object
extensions: rename xt_buf to xt_xlate
xtables: add xt_xlate_add_comment()
iptables-translate: pass ipt_entry and ip6t_entry to ->xlate()
libxtables: missing comment initialization in xt_xlate_alloc()
src: introduce struct xt_xlate_{mt,tg}_params
configure: update libnetfilter_conntrack version dependency
iptables 1.6.1 release
Phil Sutter (5):
extensions: libip6t_ah: Fix translation of plain '-m ah'
xtables-translate: Support setting standard chain policy
nft_ipv{4,6}_xlate: Respect prefix lengths
xtables-translate: Fix chain type when translating nat table
tcp_xlate: Enclose LH flag values in parentheses
Rami Rosen (1):
extensions: fix cgroup2 help message in libxt_cgroup.c.
Roberto García (7):
extensions: libip6t_LOG: Avoid to print the default log level in the
translation
iptables: extensions: libxt_TEE: Add translation to nft
extensions: libxt_MARK: Add translation to nft
extensions: libxt_MARK: Add translation for revision 1 to nft
extensions: libxt_CONNMARK: Add translation to nft
iptables: extensions: libxt_MARK: Fix translation of --set-xmark option
iptables: extensions: libxt_ecn: Add translation to nft
Sami Kerola (1):
extensions: REJECT: do not adjust reject-with type footnote indentation
Shivani Bhardwaj (51):
extensions: libxt_mark: Add translation to nft
extensions: libxt_esp: Add translation to nft
extensions: libxt_NFLOG: Add translation to nft
extensions: libxt_iprange: Add translation to nft
extensions: libxt_mac: Add translation to nft
extensions: libxt_helper: Add translation to nft
extensions: libxt_NFLOG: Add group_info and remove multiple keywords
extensions: libxt_limit: Add translation to nft
include: xtables: Add enum for better nft translation code
extensions: libxt_mark: Fix inversion code
extensions: libxt_devgroup: Add translation to nft
extensions: libxt_cpu: Add translation to nft
extensions: libipt_ah: Add translation to nft
extensions: libxt_connmark: Add translation to nft
extensions: libxt_pkttype: Add translation to nft
extensions: libipt_REJECT: Add translation to nft
extensions: libipt_realm: Add translation to nft
extensions: libipt_SNAT: Add translation to nft
extensions: libipt_DNAT: Add translation to nft
iptables: nft-ipv6: Replace ip with ip6
extensions: libip6t_DNAT: Add translation to nft
extensions: libip6t_SNAT: Add translation to nft
extensions: libxt_length: Add translation to nft
extensions: libip6t_ah: Add translation to nft
extensions: libipt_ttl: Add translation to nft
extensions: libip6t_REJECT: Add translation to nft
extensions: libipt_LOG: Add translation to nft
extensions: libip6t_LOG: Add translation to nft
extensions: libip6t_hl: Add translation to nft
extensions: libipt_REDIRECT: Add translation to nft
extensions: libip6t_REDIRECT: Add translation to nft
iptables: nft-ipv6: Fix ipv6 flags
extensions: libxt_NFQUEUE: Add translation to nft
comment: Add translation to nft
extensions: libipt_MASQUERADE: Add translation to nft
extensions: libip6t_MASQUERADE: Add translation to nft
iptables: nft-ipv6: Use meta l4proto instead of nexthdr
extensions: libip6t_mh: Add translation to nft
extensions: libxt_owner: Add translation to nft
extensions: libxt_sctp: Add translation to nft
extensions: libxt_dccp: Add translation to nft
configure: Show support for connlabel
extensions: libxt_NFQUEUE: Fix bug with order of fanout and bypass
extensions: libxt_NFQUEUE: Unstack different versions
extensions: libxt_NFQUEUE: Add missing tests
extensions: libxt_connmark: Fix order of mask and mark
extensions: libxt_devgroup: Fix order of mask and id
configure: Remove flex check warning
configure: Fix assignment statement
iptables: xtables-arp: Use getaddrinfo()
extensions: libxt_mangle: Use getaddrinfo()
Shyam Saini (3):
libxtables: xtables: remove unnecessary debug code
libxtables: xtables: Use getnameinfo()
iptables: fix the wrong appending of jump verdict after the comment.
Subash Abhinov Kasiviswanathan (1):
xtables: Add an interval option for xtables lock wait
Tejun Heo (3):
libxt_cgroup: prepare for multi revisions
libxt_cgroup2: add support for cgroup2 path matching
extensions: libxt_cgroup: add unit test
Thomas Habets (1):
iptables-save: exit with error if unable to open proc file
Thomas Woerner (1):
ip6tables: Warn about use of DROP in nat table
Vishwanath Pai (3):
extensions: libxt_NFLOG: nflog-range does not truncate packets
extensions: libxt_hashlimit: Prepare libxt_hashlimit.c for revision 2
extensions: libxt_hashlimit: Create revision 2 of xt_hashlimit to support
higher pps rates
Willem de Bruijn (3):
extensions/libxt_bpf.man: clarify BPF code generation with tcpdump
extensions: libxt_bpf: support ebpf pinned objects
iptables: on revision mismatch, do not call print/save
Xose Vazquez Perez (1):
iptables: update pf.os
