rpms/iptables
7
0
Fork 0
Code Issues Pull Requests Releases Activity
77638b4505
iptables/.gitignore

24 lines
565 B
Plaintext
Raw Normal View History

Rebase to upstream release 1.3.8
2007-07-16 22:03:39 +00:00
iptables-1.3.8.tar.bz2
- new version 1.4.0 - fixed condrestart (rhbz#428148) - report the module in rmmod_r if there is an error
2008-02-11 13:56:53 +00:00
iptables-1.4.0.tar.bz2
- new version 1.4.1 with new build environment - additional ipv6 network mask patch from Jan Engelhardt - spec file cleanup - removed old patches
2008-06-10 13:08:35 +00:00
iptables-1.4.1.tar.bz2
- upstream bug fix release 1.4.1.1 - dropped extra patch for 1.4.1 - not needed anymore
2008-07-01 09:57:56 +00:00
iptables-1.4.1.1.tar.bz2
- new version 1.4.2 - removed TOS value mask patch (upstream) - more review fixes (rhbz#225906) - install all header files (rhbz#462207) - dropped nf_ext_init (rhbz#472548)
2009-02-20 13:44:58 +00:00
iptables-1.4.2.tar.bz2
- new version 1.4.3.1 - libiptc is now shared - supports all new features of the 2.6.29 kernel - dropped typo_latter patch
2009-03-30 12:53:21 +00:00
iptables-1.4.3.1.tar.bz2
- new version 1.4.3.2 - also install iptables/internal.h, needed for iptables.h and ip6tables.h
2009-04-15 12:29:01 +00:00
iptables-1.4.3.2.tar.bz2
- new version 1.4.4 with support for all new features of 2.6.30 - several man page fixes - iptables: replace open-coded sizeof by ARRAY_SIZE - libip6t_policy: remove redundant functions - policy: use direct xt_policy_info instead of ipt/ip6t - policy: merge ipv6 and ipv4 variant - extensions: add `cluster' match support - extensions: add const qualifiers in print/save functions - extensions: use NFPROTO_UNSPEC for .family field - extensions: remove redundant casts - iptables: close open file descriptors - fix segfault if incorrect protocol name is used - replace open-coded sizeof by ARRAY_SIZE - do not include v4-only modules in ip6tables manpage - use direct xt_policy_info instead of ipt/ip6t - xtables: fix segfault if incorrect protocol name is used - libxt_connlimit: initialize v6_mask - SNAT/DNAT: add support for persistent multi-range NAT mappings
2009-08-25 13:45:19 +00:00
iptables-1.4.4.tar.bz2
- new version 1.4.5 with support for all new features of 2.6.31 - libxt_NFQUEUE: add new v1 version with queue-balance option - xt_conntrack: revision 2 for enlarged state_mask member - libxt_helper: fix invalid passed option to check_inverse - libiptc: split v4 and v6 - extensions: collapse registration structures - iptables: allow for parse-less extensions - iptables: allow for help-less extensions - extensions: remove empty help and parse functions - xtables: add multi-registration functions - extensions: collapse data variables to use multi-reg calls - xtables: warn of missing version identifier in extensions - multi binary: allow subcommand via argv[1] - iptables: accept multiple IP address specifications for -s, -d - several build fixes - several man page fixes - fixed two leaked file descriptors on sockets (rhbz#521397)
2009-09-17 09:13:09 +00:00
iptables-1.4.5.tar.bz2
- new version 1.4.6 with support for all new features of 2.6.32 - several man page fixes - Support for nommu arches - realm: remove static initializations - libiptc: remove unused functions - libiptc: avoid strict-aliasing warnings - iprange: do accept non-ranges for xt_iprange v1 - iprange: warn on reverse range - iprange: roll address parsing into a loop - iprange: do accept non-ranges for xt_iprange v1 (log) - iprange: warn on reverse range (log) - libiptc: fix wrong maptype of base chain counters on restore - iptables: fix undersized deletion mask creation - style: reduce indent in xtables_check_inverse - libxtables: hand argv to xtables_check_inverse - iptables/extensions: make bundled options work again - CONNMARK: print mark rules with mask 0xffffffff as set instead of xset - iptables: take masks into consideration for replace command - doc: explain experienced --hitcount limit - doc: name resolution clarification - iptables: expose option to zero packet/byte counters for a specific rule - build: restore --disable-ipv6 functionality on system w/o v6 headers - MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark - DNAT: fix incorrect check during parsing - extensions: add osf extension - conntrack: fix --expires parsing - dropped nf_ext_init remains from cloexec patch
2010-01-13 15:34:55 +00:00
iptables-1.4.6.tar.bz2
- new version 1.4.7 with support for all new features of 2.6.33 (rhbz#570767) - libip4tc: Add static qualifier to dump_entry() - libipq: build as shared library - recent: reorder cases in code (cosmetic cleanup) - several man page and documentation fixes - policy: fix error message showing wrong option - includes: header updates - Lift restrictions on interface names - fixed licensea and moved iptables-xml into base package according to review
2010-03-05 14:01:22 +00:00
iptables-1.4.7.tar.bz2
- new version 1.4.8 all new features of 2.6.34 (rhbz#) - extensions: REDIRECT: fix --to-ports parser - iptables: add noreturn attribute to exit_tryhelp() - extensions: MASQUERADE: fix --to-ports parser - libxt_comment: avoid use of IPv4-specific examples - libxt_CT: add a manpage - iptables: correctly check for too-long chain/target/match names - doc: libxt_MARK: no longer restricted to mangle table - doc: remove claim that TCPMSS is limited to mangle - libxt_recent: add a missing space in output - doc: add manpage for libxt_osf - libxt_osf: import nfnl_osf program - extensions: add support for xt_TEE - CT: fix --ctevents parsing - extensions: add CT extension - libxt_CT: print conntrack zone in ->print/->save - xtables: fix compilation when debugging is enabled - libxt_conntrack: document --ctstate UNTRACKED - iprange: fix xt_iprange v0 parsing
2010-07-02 08:34:08 +00:00
iptables-1.4.8.tar.bz2
- new version 1.4.9 with all new features of 2.6.35 - doc: xt_hashlimit: fix a typo - doc: xt_LED: nroff formatting requirements - doc: xt_string: correct copy-and-pasting in manpage - extensions: add the LED target - extensions: libxt_quota.c: Support option negation - extensions: libxt_rateest: fix bps options for iptables-save - extensions: libxt_rateest: fix typo in the man page - extensions: REDIRECT: add random help - includes: sync header files from Linux 2.6.35-rc1 - libxt_conntrack: do print netmask - libxt_hashlimit: always print burst value - libxt_set: new revision added - utils: add missing include flags to Makefile - xtables: another try at chain name length checking - xtables: remove xtables_set_revision function - xt_quota: also document negation - xt_sctp: Trace DATA chunk that supports SACK-IMMEDIATELY extension - xt_sctp: support FORWARD_TSN chunk type
2010-08-04 14:50:25 +00:00
iptables-1.4.9.tar.bz2
- upload was working now, therefore .gitignore was changed
2011-02-14 12:35:37 +00:00
/iptables-1.4.10.tar.bz2
- uploaded source archive
2011-07-11 14:06:18 +00:00
/iptables-1.4.11.1.tar.bz2
- new version 1.4.12 with support of all new features of kernel 3.0 - build: attempt to fix building under Linux 2.4 - build: bump soversion for recent data structure change - build: install modules in arch-dependent location - doc: fix group range in libxt_NFLOG's man - doc: fix version string in ip6tables.8 - doc: include matches/targets in manpage again - doc: mention multiple verbosity flags - doc: the -m option cannot be inverted - extensions: support for per-extension instance global variable space - iptables-apply: select default rule file depending on call name - iptables: consolidate target/match init call - iptables: Coverity: DEADCODE - iptables: Coverity: NEGATIVE_RETURNS - iptables: Coverity: RESOURCE_LEAK - iptables: Coverity: REVERSE_INULL - iptables: Coverity: VARARGS - iptables: restore negation for -f - libip6t_HL: fix option names from ttl -> hl - libipt_LOG: fix ignoring all but last flags - libxtables: ignore whitespace in the multiaddress argument parser - libxtables: properly reject empty hostnames - libxtables: set clone's initial data to NULL - libxt_conntrack: move more data into the xt_option_entry - libxt_conntrack: restore network-byte order for v1,v2 - libxt_hashlimit: use a more obvious expiry value by default - libxt_rateest: abolish global variables - libxt_RATEEST: abolish global variables - libxt_RATEEST: fix userspacesize field - libxt_RATEEST: use guided option parser - libxt_state: fix regression about inversion of main option - option: remove last traces of intrapositional negation - complete changelog: http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.12.txt
2011-07-25 16:12:15 +00:00
/iptables-1.4.12.tar.bz2
- new version 1.4.12.1 with new pkgconfig/libipq.pc - build: abort autogen on subcommand failure - build: strengthen check for overlong lladdr components - build: workaround broken linux-headers on RHEL-5 - doc: clarify libxt_connlimit defaults - doc: fix typo in libxt_TRACE - extensions: use multi-target registration - libip6t_dst: restore setting IP6T_OPTS_LEN flag - libip6t_frag: restore inversion support - libip6t_hbh: restore setting IP6T_OPTS_LEN flag - libipq: add pkgconfig file - libipt_ttl: document that negation is available - libxt_conntrack: fix --ctproto 0 output - libxt_conntrack: remove one misleading comment - libxt_dccp: fix deprecated intrapositional ordering of ! - libxt_dccp: fix random output of ! on --dccp-option - libxt_dccp: provide man pages options in short help too - libxt_dccp: restore missing XTOPT_INVERT tags for options - libxt_dccp: spell out option name on save - libxt_dscp: restore inversion support - libxt_hashlimit: default htable-expire must be in milliseconds - libxt_hashlimit: observe new default gc-expire time when saving - libxt_hashlimit: remove inversion from hashlimit rev 0 - libxt_owner: restore inversion support - libxt_physdev: restore inversion support - libxt_policy: remove superfluous inversion - libxt_set: put differing variable names in directly - libxt_set: update man page about kernel support on the feature - libxt_string: define _GNU_SOURCE for strnlen - libxt_string: escape the escaping char too - libxt_string: fix space around arguments - libxt_string: replace hex codes by char equivalents - libxt_string: simplify hex output routine - libxt_tcp: always print the mask parts - libxt_TCPMSS: restore build with IPv6-less libcs - libxt_TOS: update linux kernel version list for backported fix - libxt_u32: fix missing allowance for inversion - src: remove unused IPTABLES_MULTI define - tests: add negation tests for libxt_statistic - xtoptions: flag use of XTOPT_POINTER without XTOPT_PUT
2011-12-12 14:19:49 +00:00
/iptables-1.4.12.1.tar.bz2
- new version 1.4.12.2
2012-01-16 13:25:00 +00:00
/iptables-1.4.12.2.tar.bz2
- new version 1.4.14 - extensions: add IPv6 capable ECN match extension - extensions: add nfacct match - extensions: add rpfilter module - extensions: libxt_rateest: output all options in save hook - iptables: missing free() in function cache_add_entry() - iptables: missing free() in function delete_entry() - libiptc: fix retry path in TC_INIT - libiptc: Returns the position the entry was inserted - libipt_ULOG: fix --ulog-cprange - libxt_CT: add --timeout option - ip(6)tables-restore: make sure argv is NULL terminated - Revert "libiptc: Returns the position the entry was inserted" - src: mark newly opened fds as FD_CLOEXEC (close on exec) - tests: add rateest match rules - dropped patch5 (cloexec), merged upstream
2012-07-18 07:23:34 +00:00
/iptables-1.4.14.tar.bz2
- new version 1.4.16.2 - build: support for automake-1.12 - build: separate AC variable replacements from xtables.h - build: have `make clean` remove dep files too - doc: grammatical updates to libxt_SET - doc: clean up interpunction in state list for xt_conntrack - doc: deduplicate extension descriptions into a new manpage - doc: trim "state" manpage and reference conntrack instead - doc: have NOTRACK manpage point to CT instead - doc: mention iptables-apply in the SEE ALSO sections - extensions: libxt_addrtype: fix type in help message - include: add missing linux/netfilter_ipv4/ip_queue.h - iptables: fix wrong error messages - iptables: support for match aliases - iptables: support for target aliases - iptables-restore: warn about -t in rule lines - ip[6]tables-restore: cleanup to reduce one level of indentation - libip6t_frag: match any frag id by default - libxtables: consolidate preference logic - libxt_devgroup: consolidate devgroup specification parsing - libxt_devgroup: guard against negative numbers - libxt_LED: guard against negative numbers - libxt_NOTRACK: replace as an alias to CT --notrack - libxt_state: replace as an alias to xt_conntrack - libxt_tcp: print space before, not after "flags:" - libxt_u32: do bounds checking for @'s operands - libxt_*limit: avoid division by zero - Merge branch 'master' of git://git.inai.de/iptables - Merge remote-tracking branch 'nf/stable' - New set match revision with --return-nomatch flag support - dropped fixrestore patch, upstream
2012-10-08 13:36:30 +00:00
/iptables-1.4.16.2.tar.bz2
New version 1.4.18 - lots of documentation changes - Introduce match/target aliases - Add the "state" alias to the "conntrack" match - iptables: remove unused leftover definitions - libxtables: add xtables_rule_matches_free - libxtables: add xtables_print_num - extensions: libip6t_DNPT: fix wording in DNPT target - extension: libip6t_DNAT: allow port DNAT without address - extensions: libip6t_DNAT: set IPv6 DNAT --to-destination - extensions: S/DNPT: add missing save function - changes of 1.4.17: - libxt_time: add support to ignore day transition - Convert the NAT targets to use the kernel supplied nf_nat.h header - extensions: add IPv6 MASQUERADE extension - extensions: add IPv6 SNAT extension - extensions: add IPv6 DNAT target - extensions: add IPv6 REDIRECT extension - extensions: add IPv6 NETMAP extension - extensions: add NPT extension - extensions: libxt_statistic: Fix save output
2013-03-04 15:37:19 +00:00
/iptables-1.4.18.tar.bz2
- new version 1.4.19.1 - libxt_NFQUEUE: fix bypass option documentation - extensions: add connlabel match - extensions: add connlabel match - ip[6]tables: show --protocol instead of --proto in usage - libxt_recent: Fix missing space in manpage for --mask option - extensions: libxt_multiport: Update manpage to list valid protocols - utils: nfnl_osf: use the right nfnetlink lib - libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency - Revert "build: resolve link failure for ip6t_NETMAP" - libxt_osf: fix missing --ttl and --log in save output - libxt_osf: fix bad location for location in --genre - libip6t_SNPT: add manpage - libip6t_DNPT: add manpage - utils: updates .gitignore to include nfbpf_compile - extensions: libxt_bpf: clarify --bytecode argument - libxtables: fix parsing of dotted network mask format - build: bump version to 1.4.19 - libxt_conntrack: fix state match alias state parsing - extensions: add libxt_bpf extension - utils: nfbpf_compile - doc: mention SNAT in INPUT chain since kernel 2.6.36 - fixed changelog date weekdays where needed
2013-07-31 18:31:24 +00:00
/iptables-1.4.19.1.tar.bz2
- no connlabel.conf upstream anymore - new version 1.4.21 - doc: clarify DEBUG usage macro - iptables: use autoconf to process .in man pages - extensions: libipt_ULOG: man page should mention NFLOG as replacement - extensions: libxt_connlabel: use libnetfilter_conntrack - Introduce a new revision for the set match with the counters support - libxt_CT: Add the "NOTRACK" alias - libip6t_mh: Correct command to list named mh types in manpage - extensions: libxt_DNAT, libxt_REDIRECT, libxt_NETMAP, libxt_SNAT, libxt_MASQUERADE, libxt_LOG: rename IPv4 manpage and tell about IPv6 support - extensions: libxt_LED: fix parsing of delay - ip{6}tables-restore: fix breakage due to new locking approach - libxt_recent: restore minimum value for --seconds - iptables-xml: fix parameter parsing (similar to 2165f38) - extensions: add copyright statements - xtables: improve get_modprobe handling - ip[6]tables: Add locking to prevent concurrent instances - iptables: Fix connlabel.conf install location - ip6tables: don't print out /128 - libip6t_LOG: target output is different to libipt_LOG - build: additional include path required after UAPI changes - iptables: iptables-xml: Fix various parsing bugs - libxt_recent: restore reap functionality to recent module - build: fail in configure on missing dependency with --enable-bpf-compiler - extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter - extensions: libxt_set, libxt_SET: check the set family too - ip6tables: Use consistent exit code for EAGAIN - iptables: libxt_hashlimit.man: correct address - iptables: libxt_conntrack.man extraneous commas - iptables: libip(6)t_REJECT.man default icmp types - iptables: iptables-xm1.1 correct man section - iptables: libxt_recent.{c,man} dead URL - iptables: libxt_string.man add examples - extensions: libxt_LOG: use generic syslog reference in manpage - iptables: extensions/GNUMakefile.in use CPPFLAGS - iptables: correctly reference generated file - ip[6]tables: fix incorrect alignment in commands_v_options - build: add software version to manpage first line at configure stage - extensions: libxt_cluster: add note on arptables-jf - utils: nfsynproxy: fix error while compiling the BPF filter - extensions: add SYNPROXY extension - utils: add nfsynproxy tool - iptables: state match incompatibilty across versions - libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks - iptables: improve chain name validation - iptables: spurious error in load_extension - xtables: trivial spelling fix
2014-01-09 10:31:48 +00:00
/iptables-1.4.21.tar.bz2
Reference in New Issue Copy Permalink