From 9c976a7caafcd623cdf0e1e75d569fe12cbb6f6f Mon Sep 17 00:00:00 2001 From: Thomas Woerner Date: Thu, 9 Jan 2014 11:31:48 +0100 Subject: [PATCH] - no connlabel.conf upstream anymore - new version 1.4.21 - doc: clarify DEBUG usage macro - iptables: use autoconf to process .in man pages - extensions: libipt_ULOG: man page should mention NFLOG as replacement - extensions: libxt_connlabel: use libnetfilter_conntrack - Introduce a new revision for the set match with the counters support - libxt_CT: Add the "NOTRACK" alias - libip6t_mh: Correct command to list named mh types in manpage - extensions: libxt_DNAT, libxt_REDIRECT, libxt_NETMAP, libxt_SNAT, libxt_MASQUERADE, libxt_LOG: rename IPv4 manpage and tell about IPv6 support - extensions: libxt_LED: fix parsing of delay - ip{6}tables-restore: fix breakage due to new locking approach - libxt_recent: restore minimum value for --seconds - iptables-xml: fix parameter parsing (similar to 2165f38) - extensions: add copyright statements - xtables: improve get_modprobe handling - ip[6]tables: Add locking to prevent concurrent instances - iptables: Fix connlabel.conf install location - ip6tables: don't print out /128 - libip6t_LOG: target output is different to libipt_LOG - build: additional include path required after UAPI changes - iptables: iptables-xml: Fix various parsing bugs - libxt_recent: restore reap functionality to recent module - build: fail in configure on missing dependency with --enable-bpf-compiler - extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter - extensions: libxt_set, libxt_SET: check the set family too - ip6tables: Use consistent exit code for EAGAIN - iptables: libxt_hashlimit.man: correct address - iptables: libxt_conntrack.man extraneous commas - iptables: libip(6)t_REJECT.man default icmp types - iptables: iptables-xm1.1 correct man section - iptables: libxt_recent.{c,man} dead URL - iptables: libxt_string.man add examples - extensions: libxt_LOG: use generic syslog reference in manpage - iptables: extensions/GNUMakefile.in use CPPFLAGS - iptables: correctly reference generated file - ip[6]tables: fix incorrect alignment in commands_v_options - build: add software version to manpage first line at configure stage - extensions: libxt_cluster: add note on arptables-jf - utils: nfsynproxy: fix error while compiling the BPF filter - extensions: add SYNPROXY extension - utils: add nfsynproxy tool - iptables: state match incompatibilty across versions - libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks - iptables: improve chain name validation - iptables: spurious error in load_extension - xtables: trivial spelling fix --- .gitignore | 1 + iptables.spec | 55 +++++++++++++++++++++++++++++++++++++++++++++++---- sources | 2 +- 3 files changed, 53 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index 2402755..a75975a 100644 --- a/.gitignore +++ b/.gitignore @@ -20,3 +20,4 @@ iptables-1.4.9.tar.bz2 /iptables-1.4.16.2.tar.bz2 /iptables-1.4.18.tar.bz2 /iptables-1.4.19.1.tar.bz2 +/iptables-1.4.21.tar.bz2 diff --git a/iptables.spec b/iptables.spec index a6ea86a..0d52c4c 100644 --- a/iptables.spec +++ b/iptables.spec @@ -24,8 +24,8 @@ Name: iptables Summary: Tools for managing Linux kernel packet filtering capabilities -Version: 1.4.19.1 -Release: 2%{?dist} +Version: 1.4.21 +Release: 1%{?dist} Source: http://www.netfilter.org/projects/iptables/files/%{name}-%{version}.tar.bz2 Source1: iptables.init Source2: iptables-config @@ -251,8 +251,6 @@ fi %doc COPYING INCOMPATIBILITIES %config(noreplace) %attr(0600,root,root) /etc/sysconfig/iptables-config %config(noreplace) %attr(0600,root,root) /etc/sysconfig/ip6tables-config -%dir %{_sysconfdir}/xtables/ -%config(noreplace) %{_sysconfdir}/xtables/connlabel.conf %{_sbindir}/iptables* %{_sbindir}/ip6tables* %{_sbindir}/xtables-multi @@ -303,6 +301,55 @@ fi %changelog +* Thu Jan 9 2014 Thomas Woerner 1.4.21-1 +- no connlabel.conf upstream anymore +- new version 1.4.21 + - doc: clarify DEBUG usage macro + - iptables: use autoconf to process .in man pages + - extensions: libipt_ULOG: man page should mention NFLOG as replacement + - extensions: libxt_connlabel: use libnetfilter_conntrack + - Introduce a new revision for the set match with the counters support + - libxt_CT: Add the "NOTRACK" alias + - libip6t_mh: Correct command to list named mh types in manpage + - extensions: libxt_DNAT, libxt_REDIRECT, libxt_NETMAP, libxt_SNAT, libxt_MASQUERADE, libxt_LOG: rename IPv4 manpage and tell about IPv6 support + - extensions: libxt_LED: fix parsing of delay + - ip{6}tables-restore: fix breakage due to new locking approach + - libxt_recent: restore minimum value for --seconds + - iptables-xml: fix parameter parsing (similar to 2165f38) + - extensions: add copyright statements + - xtables: improve get_modprobe handling + - ip[6]tables: Add locking to prevent concurrent instances + - iptables: Fix connlabel.conf install location + - ip6tables: don't print out /128 + - libip6t_LOG: target output is different to libipt_LOG + - build: additional include path required after UAPI changes + - iptables: iptables-xml: Fix various parsing bugs + - libxt_recent: restore reap functionality to recent module + - build: fail in configure on missing dependency with --enable-bpf-compiler + - extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter + - extensions: libxt_set, libxt_SET: check the set family too + - ip6tables: Use consistent exit code for EAGAIN + - iptables: libxt_hashlimit.man: correct address + - iptables: libxt_conntrack.man extraneous commas + - iptables: libip(6)t_REJECT.man default icmp types + - iptables: iptables-xm1.1 correct man section + - iptables: libxt_recent.{c,man} dead URL + - iptables: libxt_string.man add examples + - extensions: libxt_LOG: use generic syslog reference in manpage + - iptables: extensions/GNUMakefile.in use CPPFLAGS + - iptables: correctly reference generated file + - ip[6]tables: fix incorrect alignment in commands_v_options + - build: add software version to manpage first line at configure stage + - extensions: libxt_cluster: add note on arptables-jf + - utils: nfsynproxy: fix error while compiling the BPF filter + - extensions: add SYNPROXY extension + - utils: add nfsynproxy tool + - iptables: state match incompatibilty across versions + - libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks + - iptables: improve chain name validation + - iptables: spurious error in load_extension + - xtables: trivial spelling fix + * Sun Dec 22 2013 Ville Skyttä - 1.4.19.1-2 - Drop INSTALL from docs, escape macros in %%changelog. diff --git a/sources b/sources index b3b2970..f8a1d71 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -be97ce9007fa42c867901b496c935a0a iptables-1.4.19.1.tar.bz2 +536d048c8e8eeebcd9757d0863ebb0c0 iptables-1.4.21.tar.bz2