diff --git a/.cvsignore b/.cvsignore
index 9a5d4d9..b41a2c7 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -4,3 +4,4 @@ iptables-1.3.1.tar.bz2
 iptables-1.3.2.tar.bz2
 iptables-1.3.4.tar.bz2
 iptables-1.3.5.tar.bz2
+iptables-1.3.7.tar.bz2
diff --git a/iptables-1.3.7-nolibnsl.patch b/iptables-1.3.7-nolibnsl.patch
new file mode 100644
index 0000000..5940458
--- /dev/null
+++ b/iptables-1.3.7-nolibnsl.patch
@@ -0,0 +1,11 @@
+--- iptables-1.3.7/Makefile.nolibnsl	2006-12-04 12:16:01.000000000 +0100
++++ iptables-1.3.7/Makefile	2007-01-09 19:34:28.000000000 +0100
+@@ -103,7 +103,7 @@
+ STATIC_LIBS  =
+ STATIC6_LIBS =
+ LDFLAGS      = -rdynamic
+-LDLIBS       = -ldl -lnsl
++LDLIBS       = -ldl
+ ifeq ($(DO_SELINUX), 1)
+ LDLIBS       += -lselinux
+ endif
diff --git a/iptables.spec b/iptables.spec
index a573247..e1aba11 100644
--- a/iptables.spec
+++ b/iptables.spec
@@ -2,19 +2,18 @@
 
 Name: iptables
 Summary: Tools for managing Linux kernel packet filtering capabilities.
-Version: 1.3.5
-Release: 2
+Version: 1.3.7
+Release: 1
 Source: http://www.netfilter.org/%{name}-%{version}.tar.bz2
 Source1: iptables.init
 Source2: iptables-config
-Patch2: iptables-1.2.8-nolibnsl.patch
+Patch2: iptables-1.3.7-nolibnsl.patch
 Patch4: iptables-1.2.9-netlink.patch
 Patch5: iptables-1.3.0-selinux.patch
 Patch6: iptables-1.2.10-counters.patch
 Patch8: iptables-1.3.0-cleanup.patch
 Patch9: iptables-1.3.0-autoload.patch
 Patch10: iptables-1.3.0-no_root.patch
-Patch11: iptables-1.3.5-secmark.patch
 Group: System Environment/Base
 URL: http://www.netfilter.org/
 BuildRoot: %{_tmppath}/%{name}-buildroot
@@ -69,7 +68,6 @@ rm -rf %{buildroot}
 %patch8 -p1 -b .cleanup
 %patch9 -p1 -b .autoload
 %patch10 -p1 -b .no_root
-%patch11 -p1 -b .secmark
 
 # Put it to a reasonable place
 find . -type f -exec perl -pi -e "s,/usr/local,%{prefix},g" {} \;
@@ -150,11 +148,15 @@ fi
 %{_includedir}/ip*.h
 %{_includedir}/libipq.h
 %{_libdir}/libipq.a
-%{_libdir}/libiptc.a
 %{_mandir}/man3/*
 %endif
 
 %changelog
+* Tue Jan  9 2007 Thomas Woerner <twoerner@redhat.com> 1.3.7-1
+- new verison 1.3.7
+- iptc is not a public interface and therefore not installed anymore
+- dropped upstream secmark patch
+
 * Thu Sep 19 2006 Thomas Woerner <twoerner@redhat.com> 1.3.5-2
 - added secmark iptables patches (#201573)
 
diff --git a/sources b/sources
index aa2ffe0..3af7690 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-00fb916fa8040ca992a5ace56d905ea5  iptables-1.3.5.tar.bz2
+dd965bdacbb86ce2a6498829fddda6b7  iptables-1.3.7.tar.bz2