- build: attempt to fix building under Linux 2.4
- build: bump soversion for recent data structure change
- build: install modules in arch-dependent location
- doc: fix group range in libxt_NFLOG's man
- doc: fix version string in ip6tables.8
- doc: include matches/targets in manpage again
- doc: mention multiple verbosity flags
- doc: the -m option cannot be inverted
- extensions: support for per-extension instance global variable space
- iptables-apply: select default rule file depending on call name
- iptables: consolidate target/match init call
- iptables: Coverity: DEADCODE
- iptables: Coverity: NEGATIVE_RETURNS
- iptables: Coverity: RESOURCE_LEAK
- iptables: Coverity: REVERSE_INULL
- iptables: Coverity: VARARGS
- iptables: restore negation for -f
- libip6t_HL: fix option names from ttl -> hl
- libipt_LOG: fix ignoring all but last flags
- libxtables: ignore whitespace in the multiaddress argument parser
- libxtables: properly reject empty hostnames
- libxtables: set clone's initial data to NULL
- libxt_conntrack: move more data into the xt_option_entry
- libxt_conntrack: restore network-byte order for v1,v2
- libxt_hashlimit: use a more obvious expiry value by default
- libxt_rateest: abolish global variables
- libxt_RATEEST: abolish global variables
- libxt_RATEEST: fix userspacesize field
- libxt_RATEEST: use guided option parser
- libxt_state: fix regression about inversion of main option
- option: remove last traces of intrapositional negation
- complete changelog:
http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.12.txt
- doc: xt_hashlimit: fix a typo
- doc: xt_LED: nroff formatting requirements
- doc: xt_string: correct copy-and-pasting in manpage
- extensions: add the LED target
- extensions: libxt_quota.c: Support option negation
- extensions: libxt_rateest: fix bps options for iptables-save
- extensions: libxt_rateest: fix typo in the man page
- extensions: REDIRECT: add random help
- includes: sync header files from Linux 2.6.35-rc1
- libxt_conntrack: do print netmask
- libxt_hashlimit: always print burst value
- libxt_set: new revision added
- utils: add missing include flags to Makefile
- xtables: another try at chain name length checking
- xtables: remove xtables_set_revision function
- xt_quota: also document negation
- xt_sctp: Trace DATA chunk that supports SACK-IMMEDIATELY extension
- xt_sctp: support FORWARD_TSN chunk type
