b1d8cbb34aDisabling parallel build to avoid build issues with xtables See http://patchwork.alpinelinux.org/patch/1787/ for reference This should be fixed in 1.6.1; parallel build can be restored after the update
Petr Šabata
2017-02-02 12:40:51 +0100
453291408a- Dropped bad provides for iptables in services sub package (RHBZ#1327786)
Thomas Woerner
2016-12-19 17:23:43 +0100
803e775de0Made /etc/ethertypes provide and conflict for setup < 2.10.4-1 fedora version dependant
Thomas Woerner
2016-07-22 13:45:10 +0200
faa3761f94- /etc/ethertypes has been moved into the setup package. (RHBZ#1329256)
Thomas Woerner
2016-07-22 13:29:16 +0200
28989740b2iMissing iptables-apply mktemp patch
Thomas Woerner
2016-04-13 19:07:50 +0200
6791134663- New upstream version 1.6.0 with nft-compat support and lots of fixes (RHBZ#1292990) Upstream changelog: http://netfilter.org/projects/iptables/files/changes-iptables-1.6.0.txt - New libs sub package containing libxtables and unstable libip*tc libraries (RHBZ#1323161) - Using scripts form RHEL-7 (RHBZ#1240366) - New compat sub package for nftables compatibility - Install iptables-apply (RHBZ#912047) - Fixed module uninstall (RHBZ#1324101) - Incorporated changes by Petr Pisar - Enabled bpf compiler (RHBZ#1170227) Thanks to Yanko Kaneti for the patch
Thomas Woerner
2016-04-13 19:00:02 +0200
b848c2b54cno need to support the pre-systemd things
Jiri Popelka
2014-01-09 16:12:00 +0100
0316b6eed1- fixed system hang at shutdown if root device is network based (RHBZ#1007934) Thanks to Rodrigo A B Freire for the patch
Thomas Woerner
2014-01-09 12:53:42 +0100
9c976a7caa- no connlabel.conf upstream anymore - new version 1.4.21 - doc: clarify DEBUG usage macro - iptables: use autoconf to process .in man pages - extensions: libipt_ULOG: man page should mention NFLOG as replacement - extensions: libxt_connlabel: use libnetfilter_conntrack - Introduce a new revision for the set match with the counters support - libxt_CT: Add the "NOTRACK" alias - libip6t_mh: Correct command to list named mh types in manpage - extensions: libxt_DNAT, libxt_REDIRECT, libxt_NETMAP, libxt_SNAT, libxt_MASQUERADE, libxt_LOG: rename IPv4 manpage and tell about IPv6 support - extensions: libxt_LED: fix parsing of delay - ip{6}tables-restore: fix breakage due to new locking approach - libxt_recent: restore minimum value for --seconds - iptables-xml: fix parameter parsing (similar to 2165f38) - extensions: add copyright statements - xtables: improve get_modprobe handling - ip[6]tables: Add locking to prevent concurrent instances - iptables: Fix connlabel.conf install location - ip6tables: don't print out /128 - libip6t_LOG: target output is different to libipt_LOG - build: additional include path required after UAPI changes - iptables: iptables-xml: Fix various parsing bugs - libxt_recent: restore reap functionality to recent module - build: fail in configure on missing dependency with --enable-bpf-compiler - extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter - extensions: libxt_set, libxt_SET: check the set family too - ip6tables: Use consistent exit code for EAGAIN - iptables: libxt_hashlimit.man: correct address - iptables: libxt_conntrack.man extraneous commas - iptables: libip(6)t_REJECT.man default icmp types - iptables: iptables-xm1.1 correct man section - iptables: libxt_recent.{c,man} dead URL - iptables: libxt_string.man add examples - extensions: libxt_LOG: use generic syslog reference in manpage - iptables: extensions/GNUMakefile.in use CPPFLAGS - iptables: correctly reference generated file - ip[6]tables: fix incorrect alignment in commands_v_options - build: add software version to manpage first line at configure stage - extensions: libxt_cluster: add note on arptables-jf - utils: nfsynproxy: fix error while compiling the BPF filter - extensions: add SYNPROXY extension - utils: add nfsynproxy tool - iptables: state match incompatibilty across versions - libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks - iptables: improve chain name validation - iptables: spurious error in load_extension - xtables: trivial spelling fix
Thomas Woerner
2014-01-09 11:31:48 +0100
875d810b85Drop INSTALL from docs, escape macros in %changelog.
Ville Skyttä
2013-12-22 22:48:34 +0200
234c14529e- new version 1.4.19.1 - libxt_NFQUEUE: fix bypass option documentation - extensions: add connlabel match - extensions: add connlabel match - ip[6]tables: show --protocol instead of --proto in usage - libxt_recent: Fix missing space in manpage for --mask option - extensions: libxt_multiport: Update manpage to list valid protocols - utils: nfnl_osf: use the right nfnetlink lib - libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency - Revert "build: resolve link failure for ip6t_NETMAP" - libxt_osf: fix missing --ttl and --log in save output - libxt_osf: fix bad location for location in --genre - libip6t_SNPT: add manpage - libip6t_DNPT: add manpage - utils: updates .gitignore to include nfbpf_compile - extensions: libxt_bpf: clarify --bytecode argument - libxtables: fix parsing of dotted network mask format - build: bump version to 1.4.19 - libxt_conntrack: fix state match alias state parsing - extensions: add libxt_bpf extension - utils: nfbpf_compile - doc: mention SNAT in INPUT chain since kernel 2.6.36 - fixed changelog date weekdays where needed
Thomas Woerner
2013-07-31 20:31:24 +0200
e6060d4640New version 1.4.18 - lots of documentation changes - Introduce match/target aliases - Add the "state" alias to the "conntrack" match - iptables: remove unused leftover definitions - libxtables: add xtables_rule_matches_free - libxtables: add xtables_print_num - extensions: libip6t_DNPT: fix wording in DNPT target - extension: libip6t_DNAT: allow port DNAT without address - extensions: libip6t_DNAT: set IPv6 DNAT --to-destination - extensions: S/DNPT: add missing save function - changes of 1.4.17: - libxt_time: add support to ignore day transition - Convert the NAT targets to use the kernel supplied nf_nat.h header - extensions: add IPv6 MASQUERADE extension - extensions: add IPv6 SNAT extension - extensions: add IPv6 DNAT target - extensions: add IPv6 REDIRECT extension - extensions: add IPv6 NETMAP extension - extensions: add NPT extension - extensions: libxt_statistic: Fix save output
Thomas Woerner
2013-03-04 16:37:19 +0100
1920e0d30aOwn unowned -services libexec dirs (#894464, Michael Scherer).
Ville Skyttä
2013-01-16 18:38:19 +0200
e34d762c5c- fixed path of ip6tables.init in ip6tables.service
Thomas Woerner
2012-11-08 13:03:44 +0100
dd96cc5585- fixed missing services for update of pre F-18 installations (rhbz#867960) - provide and obsolete old main package in services sub package - provide and obsolete old ipv6 sub package (pre F-17) in services sub package
Thomas Woerner
2012-11-02 13:48:53 +0100
fa59546b65fix the compat provides for all 64-bit arches
Dan Hor?k
2012-10-14 17:22:13 +0200
2fe636d5d4- new sub package services providing the systemd services (RHBZ#862922) - new sub package utils: provides nfnl_osf and the pf.os database - using %{_libexecdir}/iptables as script path for the original init scripts - added service iptables save funcitonality using the new way provided by initscripts 9.37.1 (RHBZ#748134) - added virtual provide for libxtables.so.7
Thomas Woerner
2012-10-12 16:23:05 +0200
79f3fa812b- new version 1.4.16.2 - build: support for automake-1.12 - build: separate AC variable replacements from xtables.h - build: have make clean remove dep files too - doc: grammatical updates to libxt_SET - doc: clean up interpunction in state list for xt_conntrack - doc: deduplicate extension descriptions into a new manpage - doc: trim "state" manpage and reference conntrack instead - doc: have NOTRACK manpage point to CT instead - doc: mention iptables-apply in the SEE ALSO sections - extensions: libxt_addrtype: fix type in help message - include: add missing linux/netfilter_ipv4/ip_queue.h - iptables: fix wrong error messages - iptables: support for match aliases - iptables: support for target aliases - iptables-restore: warn about -t in rule lines - ip[6]tables-restore: cleanup to reduce one level of indentation - libip6t_frag: match any frag id by default - libxtables: consolidate preference logic - libxt_devgroup: consolidate devgroup specification parsing - libxt_devgroup: guard against negative numbers - libxt_LED: guard against negative numbers - libxt_NOTRACK: replace as an alias to CT --notrack - libxt_state: replace as an alias to xt_conntrack - libxt_tcp: print space before, not after "flags:" - libxt_u32: do bounds checking for @'s operands - libxt_*limit: avoid division by zero - Merge branch 'master' of git://git.inai.de/iptables - Merge remote-tracking branch 'nf/stable' - New set match revision with --return-nomatch flag support - dropped fixrestore patch, upstream
Thomas Woerner
2012-10-08 15:36:30 +0200
0645ca64a7- added fixrestore patch submitted to upstream by fryasu (nfbz#774) (RHBZ#825796)
Thomas Woerner
2012-07-18 16:17:58 +0200
3670a98a72- added fixrestore patch submitted to upstream by fryasu (nfbz#774) (RHBZ#825796)
Thomas Woerner
2012-07-18 16:14:07 +0200
243a920c56- disabled libipq, removed upstream, not provided by kernel anymore
Thomas Woerner
2012-07-18 10:11:14 +0200
dde6759990- new version 1.4.14 - extensions: add IPv6 capable ECN match extension - extensions: add nfacct match - extensions: add rpfilter module - extensions: libxt_rateest: output all options in save hook - iptables: missing free() in function cache_add_entry() - iptables: missing free() in function delete_entry() - libiptc: fix retry path in TC_INIT - libiptc: Returns the position the entry was inserted - libipt_ULOG: fix --ulog-cprange - libxt_CT: add --timeout option - ip(6)tables-restore: make sure argv is NULL terminated - Revert "libiptc: Returns the position the entry was inserted" - src: mark newly opened fds as FD_CLOEXEC (close on exec) - tests: add rateest match rules - dropped patch5 (cloexec), merged upstream
Thomas Woerner
2012-07-18 09:23:34 +0200
566ade3bdb- reenable iptables default services
Thomas Woerner
2012-04-23 20:08:59 +0200
989a1ddebf- New global tag default_service
Thomas Woerner
2012-04-20 17:27:09 +0200
e71311de3ainstall everything in /usr
Harald Hoyer
2012-02-29 16:52:04 +0100
f586a1b819install everything in /usr
Harald Hoyer
2012-02-29 16:49:18 +0100
ba28c6a8b0- fixed auto enable check for Fedora > 16 and added rhel > 6 check
Thomas Woerner
2012-02-16 20:19:26 +0100
9b9f064100- disabled autostart and auto enable for iptables.service and ip6tables.service for Fedora > 16
Thomas Woerner
2012-02-15 19:52:36 +0100
0b45b2759a- new version 1.4.12.2
Thomas Woerner
2012-01-16 14:25:00 +0100
900581a58b- new version 1.4.12.2 with new pkgconfig/libip4tc.pc and pkgconfig/libip6tc.pc - build: make check stage not fail when building statically - build: restore build order of modules - build: scan for unreferenced symbols - build: sort file list before build - doc: clarification on the meaning of -p 0 - doc: document iptables-restore's -T option - doc: fix undesired newline in ip6tables-restore(8) - ip6tables-restore: implement missing -T option - iptables: move kernel version find routing into libxtables - libiptc: provide separate pkgconfig files - libipt_SAME: set PROTO_RANDOM on all ranges - libxtables: Fix file descriptor leak in xtables_lmap_init on error - libxt_connbytes: fix handling of --connbytes FROM - libxt_CONNSECMARK: fix spacing in output - libxt_conntrack: improve error message on parsing violation - libxt_NFQUEUE: fix --queue-bypass ipt-save output - libxt_RATEEST: link with -lm - libxt_statistic: link with -lm - Merge branch 'stable' - Merge branch 'stable' of git://dev.medozas.de/iptables - nfnl_osf: add missing libnfnetlink_CFLAGS to compile process - xtoptions: fill in fallback value for nvals - xtoptions: simplify xtables_parse_interface
Thomas Woerner
2012-01-16 14:23:44 +0100
697bb55852- removed include/linux/types.h before build to be able to compile
Thomas Woerner
2011-12-12 16:09:46 +0100
2830e77cd7- new version 1.4.12.1 with new pkgconfig/libipq.pc - build: abort autogen on subcommand failure - build: strengthen check for overlong lladdr components - build: workaround broken linux-headers on RHEL-5 - doc: clarify libxt_connlimit defaults - doc: fix typo in libxt_TRACE - extensions: use multi-target registration - libip6t_dst: restore setting IP6T_OPTS_LEN flag - libip6t_frag: restore inversion support - libip6t_hbh: restore setting IP6T_OPTS_LEN flag - libipq: add pkgconfig file - libipt_ttl: document that negation is available - libxt_conntrack: fix --ctproto 0 output - libxt_conntrack: remove one misleading comment - libxt_dccp: fix deprecated intrapositional ordering of ! - libxt_dccp: fix random output of ! on --dccp-option - libxt_dccp: provide man pages options in short help too - libxt_dccp: restore missing XTOPT_INVERT tags for options - libxt_dccp: spell out option name on save - libxt_dscp: restore inversion support - libxt_hashlimit: default htable-expire must be in milliseconds - libxt_hashlimit: observe new default gc-expire time when saving - libxt_hashlimit: remove inversion from hashlimit rev 0 - libxt_owner: restore inversion support - libxt_physdev: restore inversion support - libxt_policy: remove superfluous inversion - libxt_set: put differing variable names in directly - libxt_set: update man page about kernel support on the feature - libxt_string: define _GNU_SOURCE for strnlen - libxt_string: escape the escaping char too - libxt_string: fix space around arguments - libxt_string: replace hex codes by char equivalents - libxt_string: simplify hex output routine - libxt_tcp: always print the mask parts - libxt_TCPMSS: restore build with IPv6-less libcs - libxt_TOS: update linux kernel version list for backported fix - libxt_u32: fix missing allowance for inversion - src: remove unused IPTABLES_MULTI define - tests: add negation tests for libxt_statistic - xtoptions: flag use of XTOPT_POINTER without XTOPT_PUT
Thomas Woerner
2011-12-12 15:19:49 +0100
46fbaf570a- dropped temporary provide again
Thomas Woerner
2011-07-26 11:29:28 +0200
a74a2b4ef7- added temporary provides for libxtables.so.6 to be able to rebuild iproute, which is part of the standard build environment
Thomas Woerner
2011-07-26 09:59:58 +0200
60fba6574f- fixed sources
Thomas Woerner
2011-07-25 18:13:05 +0200
29d193fcc8- new version 1.4.12 with support of all new features of kernel 3.0 - build: attempt to fix building under Linux 2.4 - build: bump soversion for recent data structure change - build: install modules in arch-dependent location - doc: fix group range in libxt_NFLOG's man - doc: fix version string in ip6tables.8 - doc: include matches/targets in manpage again - doc: mention multiple verbosity flags - doc: the -m option cannot be inverted - extensions: support for per-extension instance global variable space - iptables-apply: select default rule file depending on call name - iptables: consolidate target/match init call - iptables: Coverity: DEADCODE - iptables: Coverity: NEGATIVE_RETURNS - iptables: Coverity: RESOURCE_LEAK - iptables: Coverity: REVERSE_INULL - iptables: Coverity: VARARGS - iptables: restore negation for -f - libip6t_HL: fix option names from ttl -> hl - libipt_LOG: fix ignoring all but last flags - libxtables: ignore whitespace in the multiaddress argument parser - libxtables: properly reject empty hostnames - libxtables: set clone's initial data to NULL - libxt_conntrack: move more data into the xt_option_entry - libxt_conntrack: restore network-byte order for v1,v2 - libxt_hashlimit: use a more obvious expiry value by default - libxt_rateest: abolish global variables - libxt_RATEEST: abolish global variables - libxt_RATEEST: fix userspacesize field - libxt_RATEEST: use guided option parser - libxt_state: fix regression about inversion of main option - option: remove last traces of intrapositional negation - complete changelog: http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.12.txt
Thomas Woerner
2011-07-25 18:12:15 +0200
1392835e93- merged ipv6 sub package into main package - renamed init scripts to /usr/libexec/ip*tables.init
Thomas Woerner
2011-07-21 15:53:48 +0200
48928b097d- added support for native systemd file (rhbz#694738) - new iptables.service file - additional requires - moved sysv init scripts to /usr/libexec - added new post, preun and postun scripts and triggers
Thomas Woerner
2011-07-15 16:21:02 +0200
9269623657- dropped temporary provide again - enabled smp build
Thomas Woerner
2011-07-12 14:07:48 +0200
bae0f3016a- added temporary provides for libxtables.so.5 to be able to rebuild iproute, which is part of the standard build environment
Thomas Woerner
2011-07-12 13:34:12 +0200
efe5bd8132- uploaded source archive
Thomas Woerner
2011-07-11 16:06:18 +0200
d2526b7251- new version 1.4.11.1, bug and doc fix release for 1.4.11
Thomas Woerner
2011-07-11 15:52:54 +0200
9ff5d90c9f- upload was working now, therefore .gitignore was changed
Thomas Woerner
2011-02-14 13:35:37 +0100
74f361e244- new version 1.4.10 with all new features of 2.6.36 - all: consistent syntax use in struct option - build: fix static linking - doc: let man(1) autoalign the text in xt_cpu - doc: remove extra empty line from xt_cpu - doc: minimal spelling updates to xt_cpu - doc: consistent use of markup - extensions: libxt_quota: don't ignore the quota value on deletion - extensions: REDIRECT: add random help - extensions: add xt_cpu match - extensions: add idletimer xt target extension - extensions: libxt_IDLETIMER: use xtables_param_act when checking options - extensions: libxt_CHECKSUM extension - extensions: libipt_LOG/libip6t_LOG: support macdecode option - extensions: fix compilation of the new CHECKSUM target - extensions: libxt_ipvs: user-space lib for netfilter matcher xt_ipvs - iptables-xml: resolve compiler warnings - iptables: limit chain name length to be consistent with targets - libiptc: add Libs.private to pkgconfig files - libiptc: build with -Wl,--no-as-needed - xtables: remove unnecessary cast - dropped xt_CHECKSUM, added upstream
Thomas Woerner
2011-01-10 17:05:15 +0100
668046c0c7- added xt_CHECKSUM patch from Michael S. Tsirkin (rhbz#612587)
Thomas Woerner
2010-10-12 19:42:44 +0200
f7ec09d02c- new version 1.4.9 with all new features of 2.6.35 - doc: xt_hashlimit: fix a typo - doc: xt_LED: nroff formatting requirements - doc: xt_string: correct copy-and-pasting in manpage - extensions: add the LED target - extensions: libxt_quota.c: Support option negation - extensions: libxt_rateest: fix bps options for iptables-save - extensions: libxt_rateest: fix typo in the man page - extensions: REDIRECT: add random help - includes: sync header files from Linux 2.6.35-rc1 - libxt_conntrack: do print netmask - libxt_hashlimit: always print burst value - libxt_set: new revision added - utils: add missing include flags to Makefile - xtables: another try at chain name length checking - xtables: remove xtables_set_revision function - xt_quota: also document negation - xt_sctp: Trace DATA chunk that supports SACK-IMMEDIATELY extension - xt_sctp: support FORWARD_TSN chunk type
Thomas Woerner
2010-08-04 16:50:25 +0200
Phil Sutter
Michael Cronenworth
Fedora Release Engineering
Phil Sutter
Kevin Fenzi
Mike Gahagan
Thomas Woerner
Petr Šabata
Dennis Gilmore
Jiri Popelka
Peter Robinson
Tom Callaway
Ville Skyttä
Dan Hor?k
Harald Hoyer