| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: iptables | Distribution: CentOS |
| Version: 1.8.5 | Vendor: CentOS |
| Release: 10.el8 | Build date: Fri Sep 8 13:19:51 2023 |
| Group: Unspecified | Build host: aarch64-03.stream.rdu2.redhat.com |
| Size: 8963824 | Source RPM: iptables-1.8.5-10.el8.src.rpm |
| Packager: builder@centos.org | |
| Url: http://www.netfilter.org/projects/iptables | |
| Summary: Tools for managing Linux kernel packet filtering capabilities | |
The iptables utility controls the network packet filtering code in the Linux kernel. If you need to set up firewalls and/or IP masquerading, you should either install nftables or this package. Note: This package contains the nftables-based variants of iptables and ip6tables, which are drop-in replacements of the legacy tools.
GPLv2 and Artistic 2.0 and ISC
* Fri Sep 08 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-10
- Bump NVR to fix for wrong build tag
* Wed Sep 06 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-9
- iptables-nft: fix basechain policy configuration
* Fri Jul 28 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-8
- Update fixes from upstream once more
* Wed Jul 19 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-7
- Fix shell test-case for older gawk version
* Tue Jul 18 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-6
- Fix shell testcase for rebased libnftnl package
* Tue Jul 18 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-5
- Missed to copy expected results file to destination.
* Sat Jul 15 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-4
- Bump release for CI.
* Tue Jul 04 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-3
- Add expected test results
- Prepare testsuites for expected results
* Wed Jun 28 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-2
- libnftnl package was rebased, depending on 1.1.6 is fine
* Wed May 10 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-1
- Rebase to version 1.8.5 plus upstream-indicated fixes
- Fix for duplicate files in RPM due to imprecise globbing
- Drop bootstrap code again
* Wed Nov 23 2022 Phil Sutter <psutter@redhat.com> - 1.8.4-24
- ebtables: Support '-p Length'
- nft-shared: Introduce __get_cmp_data()
* Fri Jul 01 2022 Phil Sutter <psutter@redhat.com> - 1.8.4-23
- libxtables: Fix unsupported extension warning corner case
- tests: shell: Check overhead in iptables-save and -restore
- nft: Fix EPERM handling for extensions without rev 0
- Improve error messages for unsupported extensions
- xshared: Fix response to unprivileged users
- libxtables: Register only the highest revision extension
- Use proto_to_name() from xshared in more places
- libxtables: Boost rule target checks by announcing chain names
- libxtables: Implement notargets hash table
- nft: Reject standard targets as chain names when restoring
- xshared: Merge and share parse_chain()
- xshared: Prefer xtables_chain_protos lookup over getprotoent
- nft: Speed up immediate parsing
- nft: Simplify immediate parsing
* Mon Nov 29 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-22
- extensions: hashlimit: Fix tests with HZ=1000
* Thu Oct 07 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-21
- extensions: hashlimit: Fix tests with HZ=100
- ebtables: Dump atomic waste
- doc: ebtables-nft.8: Adjust for missing atomic-options
* Wed Aug 04 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-20
- extensions: SECMARK: Use a better context in test case
- extensions: sctp: Translate --chunk-types option
- extensions: sctp: Fix nftables translation
- extensions: SECMARK: Implement revision 1
- nft: cache: Retry if kernel returns EINTR
* Fri Jun 18 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-19
- Fix for rpminspect results
* Mon May 24 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-18
- xtables-translate: Fix translation of odd netmasks
- nft: Fix bitwise expression avoidance detection
- xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
- xtables-monitor: print packet first
- xtables-monitor: fix packet family protocol
- xtables-monitor: fix rule printing
- xtables-monitor: Fix ip6tables rule printing
* Thu Dec 10 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-17
- extensions: dccp: Fix for DCCP type 'INVALID'
- tests: shell: Merge and extend return codes test
- nft: Fix command name in ip6tables error message
- extensions: libxt_CT: add translation for NOTRACK
- extensions: libipt_icmp: Fix translation of type 'any'
- tests/shell: Test for fixed extension registration
- libxtables: Register multiple extensions in ascending order
- libxtables: Simplify pending extension registration
- libxtables: Make sure extensions register in revision order
* Wed Oct 28 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-16
- tests/shell: Add test for bitwise avoidance fixes
- ebtables: Optimize masked MAC address matches
- nft: Optimize class-based IP prefix matches
- nft: Fix for broken address mask match detection
- nft: cache: Make nft_rebuild_cache() respect fake cache
- tests: shell: Improve concurrent noflush restore test a bit
- nft: Fix for concurrent noflush restore calls
- nft: Fix error reporting for refreshed transactions
- nft: Make batch_add_chain() return the added batch object
* Sat Aug 15 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-15
- Ignore sysctl files not suffixed '.conf'
* Wed Jun 24 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-14
- nft: Fix for '-F' in iptables dumps
- tests: shell: Test -F in dump files
* Fri May 29 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-13
- Fix for endless loop in iptables-restore --test
* Tue May 26 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-12
- Unbreak nfnl_osf tool
* Tue May 19 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-11
- Complete ebtables-nft among match support
- Replace RHEL-only xtables-monitor fix with upstream solution
- xtables: Align effect of -4/-6 options with legacy
- xtables: Drop -4 and -6 support from xtables-{save,restore}
- Review systemd unit files
* Tue Mar 17 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-10
- Fix for iptables-restore segfault under pressure
- Fix for iptables-save segfault under pressure
* Mon Feb 24 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-9
- iptables-test.py: Fix --host mode
- xtables-monitor: Fix segfault when tracing
* Sat Feb 15 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-8
- xtables-translate: Fix for iface++
- tests: shell: Fix skip checks with --host mode
- xtables-restore: fix for --noflush and empty lines
* Wed Feb 12 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-7
- xtables-translate: Fix for interface name corner-cases
* Mon Dec 09 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-6
- Add missing patch in last release, uAPI covscan fix
* Mon Dec 09 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-5
- Fix covscan-indicated problems
* Wed Dec 04 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-4
- Fix for broken xtables-restore --noflush
* Tue Dec 03 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-3
- Reduce globbing in library file names to expose future SONAME changes
- Add bootstrapping for libip*tc SONAME bump
* Mon Dec 02 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-2
- Use upstream-provided man pages for ebtables and arptables
* Mon Dec 02 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-1
- Rebase onto upstream release 1.8.4
* Thu Aug 08 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-16
- nft: Set socket receive buffer
* Wed Jul 31 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-15
- doc: Install ip{6,}tables-restore-translate.8 man pages
* Tue Jul 02 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-14
- arptables: Print space before comma and counters
- extensions: Fix ipvs vproto parsing
- extensions: Fix ipvs vproto option printing
- extensions: Add testcase for libxt_ipvs
* Mon Jul 01 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-13
- doc: Install ip{6,}tables-translate.8 manpages
- nft: Eliminate dead code in __nft_rule_list
* Wed Jun 12 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-12
- Add iptables-test.py testsuite to sources
- extensions: libip6t_mh: fix bogus translation error
- extensions: AUDIT: Document ineffective --type option
- xtables-restore: Fix program names in help texts
- xtables-save: Point at existing man page in help text
- utils: Add a manpage for nfbpf_compile
- Mark man pages in base package as documentation files
* Thu May 23 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-11
- Enable verbose output when building
* Thu May 09 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-10
- arptables-nft: fix decoding of hlen on bigendian platforms
- xtables-save: Fix table not found error message
- xtables: Catch errors when zeroing rule rounters
- extensions: TRACE: Point at xtables-monitor in documentation
- extensions: libipt_realm: Document allowed realm values
* Fri Feb 08 2019 Phil Sutter - 1.8.2-9
- ebtables-nft: Support user-defined chain policies
* Thu Feb 07 2019 Phil Sutter - 1.8.2-8
- arptables.8: Document --set-counters option
* Thu Feb 07 2019 Phil Sutter - 1.8.2-7
- arptables: Support --set-counters option
* Fri Feb 01 2019 Phil Sutter - 1.8.2-6
- Improve performance with large rulesets
- Fix for changes in arptables output
- Fix for inserting rules at wrong position
- Fix segfault when comparing rules with standard target
- Fix ebtables output for negated values
- Document missing arptables FORWARD chain
* Tue Dec 18 2018 Phil Sutter - 1.8.2-5
- Drop change to test snippet not included in tarball from Patch4
* Tue Dec 18 2018 Phil Sutter - 1.8.2-4
- Fix iptables init script for nftables-backend
- Drop references to unsupported broute table from ebtables man page
- xtables: Don't use native nftables comments
* Thu Dec 06 2018 Phil Sutter - 1.8.2-3
- Drop change to test snippet not included in tarball from Patch3
* Thu Dec 06 2018 Phil Sutter - 1.8.2-2
- Point out that nftables-variants are installed in package description
- Fix for deleting arptables rules by referencing them
* Thu Dec 06 2018 Phil Sutter - 1.8.2-1
- Rebase onto upstream version 1.8.2
* Thu Oct 25 2018 Phil Sutter - 1.8.1-2
- Add upstream fixes to 1.8.1 release
* Thu Oct 25 2018 Phil Sutter - 1.8.1-1
- Rebase onto upstream version 1.8.1
* Thu Sep 27 2018 Phil Sutter - 1.8.0-11
- Fix for covscan warnings in init scripts
* Wed Sep 26 2018 Phil Sutter - 1.8.0-10
- Fix short name of Artistic Licence
* Wed Sep 26 2018 Phil Sutter - 1.8.0-9
- Add further fixes for issues identified by covscan
- Fix for bogus "is incompatible" warnings
- Fix layout in License tag
- Replace "Fedora" with "RHEL" in description
- Make devel sub-package depend on libs sub-package
* Mon Sep 17 2018 Phil Sutter - 1.8.0-8
- Fix issues identified by covscan
- xtables-restore: Fix flushing referenced custom chains
- xtables: Accept --wait in iptables-nft-restore
* Mon Sep 03 2018 Phil Sutter - 1.8.0-7
- xtables: Align return codes with legacy iptables
- xtables: Drop use of IP6T_F_PROTO
* Wed Aug 29 2018 Phil Sutter - 1.8.0-6
- xtables: Fix for deleting rules with comment
* Fri Aug 24 2018 Phil Sutter - 1.8.0-5
- xtables: Use meta l4proto for -p match
- ebtables: Fix for listing of non-existent chains
- xtables: Fix for no output in iptables-nft -S
* Sat Aug 18 2018 Phil Sutter - 1.8.0-4
- xtables: Fix for segfault in iptables-nft
- ebtables: Fix entries count in chain listing
- Use %autosetup macro in %prep
* Fri Aug 17 2018 Phil Sutter - 1.8.0-3
- xtables: Make 'iptables -S nonexisting' return non-zero
* Fri Aug 10 2018 Phil Sutter - 1.8.0-2
- Rebase onto upstream master commit 514de4801b731db4712
- Add arptables and ebtables sub-packages
* Wed Jul 11 2018 Phil Sutter - 1.8.0-1
- New upstream version 1.8.0
- Drop compat sub-package
- Use nft tool versions, drop legacy ones
* Thu Mar 01 2018 Phil Sutter <psutter@redhat.com> - 1.6.2-2
- Kill module unloading support
- Support /etc/sysctl.d
- Don't restart services after package update
- Add support for --wait options to restore commands
* Wed Feb 21 2018 Michael Cronenworth <mike@cchtml.com> - 1.6.2-1
- New upstream version 1.6.2
http://www.netfilter.org/projects/iptables/files/changes-iptables-1.6.2.txt
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.1-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sun Oct 22 2017 Kevin Fenzi <kevin@scrye.com> - 1.6.1-5
- Rebuild for new libnftnl
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Thu Feb 02 2017 Thomas Woerner <twoerner@redhat.com> - 1.6.1-1
- New upstream version 1.6.1 with enhanced translation to nft support and
several fixes (RHBZ#1417323)
http://netfilter.org/projects/iptables/files/changes-iptables-1.6.1.txt
- Enable parallel build again
* Thu Feb 02 2017 Petr Šabata <contyk@redhat.com> - 1.6.0-4
- Disabling parallel build to avoid build issues with xtables
- See http://patchwork.alpinelinux.org/patch/1787/ for reference
- This should be fixed in 1.6.1; parallel build can be restored after the
update
* Mon Dec 19 2016 Thomas Woerner <twoerner@redhat.com> - 1.6.0-3
- Dropped bad provides for iptables in services sub package (RHBZ#1327786)
* Fri Jul 22 2016 Thomas Woerner <twoerner@redhat.com> - 1.6.0-2
- /etc/ethertypes has been moved into the setup package for F-25+.
(RHBZ#1329256)
* Wed Apr 13 2016 Thomas Woerner <twoerner@redhat.com> - 1.6.0-1
- New upstream version 1.6.0 with nft-compat support and lots of fixes (RHBZ#1292990)
Upstream changelog:
http://netfilter.org/projects/iptables/files/changes-iptables-1.6.0.txt
- New libs sub package containing libxtables and unstable libip*tc libraries (RHBZ#1323161)
- Using scripts form RHEL-7 (RHBZ#1240366)
- New compat sub package for nftables compatibility
- Install iptables-apply (RHBZ#912047)
- Fixed module uninstall (RHBZ#1324101)
- Incorporated changes by Petr Pisar
- Enabled bpf compiler (RHBZ#1170227) Thanks to Yanko Kaneti for the patch
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.21-16
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.21-15
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Mon Dec 01 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-14
- add dhcpv6-client to /etc/sysconfig/ip6tables (RHBZ#1169036)
* Mon Nov 03 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-13
- iptables.init: use /run/lock/subsys/ instead of /var/lock/subsys/ (RHBZ#1159573)
* Mon Sep 29 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-12
- ip[6]tables.init: change shebang from /bin/sh to /bin/bash (RHBZ#1147272)
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.21-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jul 12 2014 Tom Callaway <spot@fedoraproject.org> - 1.4.21-10
- fix license handling
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.21-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Wed Mar 12 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-8
- add missing reload and panic actions
- BuildRequires: pkgconfig(x) instead of x-devel
- no need to specify file mode bits twice (in %install and %files)
* Sun Jan 19 2014 Ville Skyttä <ville.skytta@iki.fi> - 1.4.21-7
- Don't order services after syslog.target.
* Wed Jan 15 2014 Thomas Woerner <twoerner@redhat.com> 1.4.21-6
- Enable connlabel support again, needs libnetfilter_conntrack
* Wed Jan 15 2014 Thomas Woerner <twoerner@redhat.com> 1.4.21-6
- fixed update from RHEL-6 to RHEL-7 (RHBZ#1043901)
* Tue Jan 14 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-5
- chmod /etc/sysconfig/ip[6]tables 755 -> 600
* Fri Jan 10 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-4
- drop virtual provide for xtables.so.9
- add default /etc/sysconfig/ip[6]tables (RHBZ#1034494)
* Thu Jan 09 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-3
- no need to support the pre-systemd things
- use systemd macros (#850166)
- remove scriptlets for migrating to a systemd unit from a SysV initscripts
- ./configure -> %configure
- spec clean up
- fix self-obsoletion
* Thu Jan 09 2014 Thomas Woerner <twoerner@redhat.com> 1.4.21-2
- fixed system hang at shutdown if root device is network based (RHBZ#1007934)
Thanks to Rodrigo A B Freire for the patch
* Thu Jan 09 2014 Thomas Woerner <twoerner@redhat.com> 1.4.21-1
- no connlabel.conf upstream anymore
- new version 1.4.21
- doc: clarify DEBUG usage macro
- iptables: use autoconf to process .in man pages
- extensions: libipt_ULOG: man page should mention NFLOG as replacement
- extensions: libxt_connlabel: use libnetfilter_conntrack
- Introduce a new revision for the set match with the counters support
- libxt_CT: Add the "NOTRACK" alias
- libip6t_mh: Correct command to list named mh types in manpage
- extensions: libxt_DNAT, libxt_REDIRECT, libxt_NETMAP, libxt_SNAT, libxt_MASQUERADE, libxt_LOG: rename IPv4 manpage and tell about IPv6 support
- extensions: libxt_LED: fix parsing of delay
- ip{6}tables-restore: fix breakage due to new locking approach
- libxt_recent: restore minimum value for --seconds
- iptables-xml: fix parameter parsing (similar to 2165f38)
- extensions: add copyright statements
- xtables: improve get_modprobe handling
- ip[6]tables: Add locking to prevent concurrent instances
- iptables: Fix connlabel.conf install location
- ip6tables: don't print out /128
- libip6t_LOG: target output is different to libipt_LOG
- build: additional include path required after UAPI changes
- iptables: iptables-xml: Fix various parsing bugs
- libxt_recent: restore reap functionality to recent module
- build: fail in configure on missing dependency with --enable-bpf-compiler
- extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter
- extensions: libxt_set, libxt_SET: check the set family too
- ip6tables: Use consistent exit code for EAGAIN
- iptables: libxt_hashlimit.man: correct address
- iptables: libxt_conntrack.man extraneous commas
- iptables: libip(6)t_REJECT.man default icmp types
- iptables: iptables-xm1.1 correct man section
- iptables: libxt_recent.{c,man} dead URL
- iptables: libxt_string.man add examples
- extensions: libxt_LOG: use generic syslog reference in manpage
- iptables: extensions/GNUMakefile.in use CPPFLAGS
- iptables: correctly reference generated file
- ip[6]tables: fix incorrect alignment in commands_v_options
- build: add software version to manpage first line at configure stage
- extensions: libxt_cluster: add note on arptables-jf
- utils: nfsynproxy: fix error while compiling the BPF filter
- extensions: add SYNPROXY extension
- utils: add nfsynproxy tool
- iptables: state match incompatibilty across versions
- libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks
- iptables: improve chain name validation
- iptables: spurious error in load_extension
- xtables: trivial spelling fix
* Sun Dec 22 2013 Ville Skyttä <ville.skytta@iki.fi> - 1.4.19.1-2
- Drop INSTALL from docs, escape macros in %changelog.
* Wed Jul 31 2013 Thomas Woerner <twoerner@redhat.com> 1.4.19.1-1
- new version 1.4.19.1
- libxt_NFQUEUE: fix bypass option documentation
- extensions: add connlabel match
- extensions: add connlabel match
- ip[6]tables: show --protocol instead of --proto in usage
- libxt_recent: Fix missing space in manpage for --mask option
- extensions: libxt_multiport: Update manpage to list valid protocols
- utils: nfnl_osf: use the right nfnetlink lib
- libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency
- Revert "build: resolve link failure for ip6t_NETMAP"
- libxt_osf: fix missing --ttl and --log in save output
- libxt_osf: fix bad location for location in --genre
- libip6t_SNPT: add manpage
- libip6t_DNPT: add manpage
- utils: updates .gitignore to include nfbpf_compile
- extensions: libxt_bpf: clarify --bytecode argument
- libxtables: fix parsing of dotted network mask format
- build: bump version to 1.4.19
- libxt_conntrack: fix state match alias state parsing
- extensions: add libxt_bpf extension
- utils: nfbpf_compile
- doc: mention SNAT in INPUT chain since kernel 2.6.36
- fixed changelog date weekdays where needed
* Mon Mar 04 2013 Thomas Woerner <twoerner@redhat.com> 1.4.18-1
- new version 1.4.18
- lots of documentation changes
- Introduce match/target aliases
- Add the "state" alias to the "conntrack" match
- iptables: remove unused leftover definitions
- libxtables: add xtables_rule_matches_free
- libxtables: add xtables_print_num
- extensions: libip6t_DNPT: fix wording in DNPT target
- extension: libip6t_DNAT: allow port DNAT without address
- extensions: libip6t_DNAT: set IPv6 DNAT --to-destination
- extensions: S/DNPT: add missing save function
- changes of 1.4.17:
- libxt_time: add support to ignore day transition
- Convert the NAT targets to use the kernel supplied nf_nat.h header
- extensions: add IPv6 MASQUERADE extension
- extensions: add IPv6 SNAT extension
- extensions: add IPv6 DNAT target
- extensions: add IPv6 REDIRECT extension
- extensions: add IPv6 NETMAP extension
- extensions: add NPT extension
- extensions: libxt_statistic: Fix save output
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.16.2-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Wed Jan 16 2013 Ville Skyttä <ville.skytta@iki.fi> - 1.4.16.2-6
- Own unowned -services libexec dirs (#894464, Michael Scherer).
- Fix -services unit file permissions (#732936, Michal Schmidt).
* Thu Nov 08 2012 Thomas Woerner <twoerner@redhat.com> 1.4.16.2-5
- fixed path of ip6tables.init in ip6tables.service
* Fri Nov 02 2012 Thomas Woerner <twoerner@redhat.com> 1.4.16.2-4
- fixed missing services for update of pre F-18 installations (rhbz#867960)
- provide and obsolete old main package in services sub package
- provide and obsolete old ipv6 sub package (pre F-17) in services sub package
* Sun Oct 14 2012 Dan Horák <dan[at]dany.cz> 1.4.16.2-3
- fix the compat provides for all 64-bit arches
* Fri Oct 12 2012 Thomas Woerner <twoerner@redhat.com> 1.4.16.2-2
- new sub package services providing the systemd services (RHBZ#862922)
- new sub package utils: provides nfnl_osf and the pf.os database
- using %{_libexecdir}/iptables as script path for the original init scripts
- added service iptables save funcitonality using the new way provided by
initscripts 9.37.1 (RHBZ#748134)
- added virtual provide for libxtables.so.7
* Mon Oct 08 2012 Thomas Woerner <twoerner@redhat.com> 1.4.16.2-1
- new version 1.4.16.2
- build: support for automake-1.12
- build: separate AC variable replacements from xtables.h
- build: have `make clean` remove dep files too
- doc: grammatical updates to libxt_SET
- doc: clean up interpunction in state list for xt_conntrack
- doc: deduplicate extension descriptions into a new manpage
- doc: trim "state" manpage and reference conntrack instead
- doc: have NOTRACK manpage point to CT instead
- doc: mention iptables-apply in the SEE ALSO sections
- extensions: libxt_addrtype: fix type in help message
- include: add missing linux/netfilter_ipv4/ip_queue.h
- iptables: fix wrong error messages
- iptables: support for match aliases
- iptables: support for target aliases
- iptables-restore: warn about -t in rule lines
- ip[6]tables-restore: cleanup to reduce one level of indentation
- libip6t_frag: match any frag id by default
- libxtables: consolidate preference logic
- libxt_devgroup: consolidate devgroup specification parsing
- libxt_devgroup: guard against negative numbers
- libxt_LED: guard against negative numbers
- libxt_NOTRACK: replace as an alias to CT --notrack
- libxt_state: replace as an alias to xt_conntrack
- libxt_tcp: print space before, not after "flags:"
- libxt_u32: do bounds checking for @'s operands
- libxt_*limit: avoid division by zero
- Merge branch 'master' of git://git.inai.de/iptables
- Merge remote-tracking branch 'nf/stable'
- New set match revision with --return-nomatch flag support
- dropped fixrestore patch, upstream
* Wed Aug 01 2012 Thomas Woerner <twoerner@redhat.com> 1.4.15-1
- new version 1.4.15
- extensions: add HMARK target
- iptables-restore: fix parameter parsing (shows up with gcc-4.7)
- iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)
- libxtables: add xtables_ip[6]mask_to_cidr
- libxt_devgroup: add man page snippet
- libxt_hashlimit: add support for byte-based operation
- libxt_recent: add --mask netmask
- libxt_recent: remove unused variable
- libxt_HMARK: correct a number of errors introduced by Pablo's rework
- libxt_HMARK: fix ct case example
- libxt_HMARK: fix output of iptables -L
- Revert "iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)"
* Wed Jul 18 2012 Thomas Woerner <twoerner@redhat.com> 1.4.14-3
- added fixrestore patch submitted to upstream by fryasu (nfbz#774)
(RHBZ#825796)
* Wed Jul 18 2012 Thomas Woerner <twoerner@redhat.com> 1.4.14-2
- disabled libipq, removed upstream, not provided by kernel anymore
* Wed Jul 18 2012 Thomas Woerner <twoerner@redhat.com> 1.4.14-1
- new version 1.4.14
- extensions: add IPv6 capable ECN match extension
- extensions: add nfacct match
- extensions: add rpfilter module
- extensions: libxt_rateest: output all options in save hook
- iptables: missing free() in function cache_add_entry()
- iptables: missing free() in function delete_entry()
- libiptc: fix retry path in TC_INIT
- libiptc: Returns the position the entry was inserted
- libipt_ULOG: fix --ulog-cprange
- libxt_CT: add --timeout option
- ip(6)tables-restore: make sure argv is NULL terminated
- Revert "libiptc: Returns the position the entry was inserted"
- src: mark newly opened fds as FD_CLOEXEC (close on exec)
- tests: add rateest match rules
- dropped patch5 (cloexec), merged upstream
* Mon Apr 23 2012 Thomas Woerner <twoerner@redhat.com> 1.4.12.2-5
- reenable iptables default services
* Wed Feb 29 2012 Harald Hoyer <harald@redhat.com> 1.4.12.2-4
- install everything in /usr
https://fedoraproject.org/wiki/Features/UsrMove
* Thu Feb 16 2012 Thomas Woerner <twoerner@redhat.com> 1.4.12.2-3
- fixed auto enable check for Fedora > 16 and added rhel > 6 check
* Wed Feb 15 2012 Thomas Woerner <twoerner@redhat.com> 1.4.12.2-2
- disabled autostart and auto enable for iptables.service and ip6tables.service
for Fedora > 16
* Mon Jan 16 2012 Thomas Woerner <twoerner@redhat.com> 1.4.12.2-1
- new version 1.4.12.2 with new pkgconfig/libip4tc.pc and pkgconfig/libip6tc.pc
- build: make check stage not fail when building statically
- build: restore build order of modules
- build: scan for unreferenced symbols
- build: sort file list before build
- doc: clarification on the meaning of -p 0
- doc: document iptables-restore's -T option
- doc: fix undesired newline in ip6tables-restore(8)
- ip6tables-restore: implement missing -T option
- iptables: move kernel version find routing into libxtables
- libiptc: provide separate pkgconfig files
- libipt_SAME: set PROTO_RANDOM on all ranges
- libxtables: Fix file descriptor leak in xtables_lmap_init on error
- libxt_connbytes: fix handling of --connbytes FROM
- libxt_CONNSECMARK: fix spacing in output
- libxt_conntrack: improve error message on parsing violation
- libxt_NFQUEUE: fix --queue-bypass ipt-save output
- libxt_RATEEST: link with -lm
- libxt_statistic: link with -lm
- Merge branch 'stable'
- Merge branch 'stable' of git://dev.medozas.de/iptables
- nfnl_osf: add missing libnfnetlink_CFLAGS to compile process
- xtoptions: fill in fallback value for nvals
- xtoptions: simplify xtables_parse_interface
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.12.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Mon Dec 12 2011 Thomas Woerner <twoerner@redhat.com> 1.4.12.1-1
- new version 1.4.12.1 with new pkgconfig/libipq.pc
- build: abort autogen on subcommand failure
- build: strengthen check for overlong lladdr components
- build: workaround broken linux-headers on RHEL-5
- doc: clarify libxt_connlimit defaults
- doc: fix typo in libxt_TRACE
- extensions: use multi-target registration
- libip6t_dst: restore setting IP6T_OPTS_LEN flag
- libip6t_frag: restore inversion support
- libip6t_hbh: restore setting IP6T_OPTS_LEN flag
- libipq: add pkgconfig file
- libipt_ttl: document that negation is available
- libxt_conntrack: fix --ctproto 0 output
- libxt_conntrack: remove one misleading comment
- libxt_dccp: fix deprecated intrapositional ordering of !
- libxt_dccp: fix random output of ! on --dccp-option
- libxt_dccp: provide man pages options in short help too
- libxt_dccp: restore missing XTOPT_INVERT tags for options
- libxt_dccp: spell out option name on save
- libxt_dscp: restore inversion support
- libxt_hashlimit: default htable-expire must be in milliseconds
- libxt_hashlimit: observe new default gc-expire time when saving
- libxt_hashlimit: remove inversion from hashlimit rev 0
- libxt_owner: restore inversion support
- libxt_physdev: restore inversion support
- libxt_policy: remove superfluous inversion
- libxt_set: put differing variable names in directly
- libxt_set: update man page about kernel support on the feature
- libxt_string: define _GNU_SOURCE for strnlen
- libxt_string: escape the escaping char too
- libxt_string: fix space around arguments
- libxt_string: replace hex codes by char equivalents
- libxt_string: simplify hex output routine
- libxt_tcp: always print the mask parts
- libxt_TCPMSS: restore build with IPv6-less libcs
- libxt_TOS: update linux kernel version list for backported fix
- libxt_u32: fix missing allowance for inversion
- src: remove unused IPTABLES_MULTI define
- tests: add negation tests for libxt_statistic
- xtoptions: flag use of XTOPT_POINTER without XTOPT_PUT
- removed include/linux/types.h before build to be able to compile
* Tue Jul 26 2011 Thomas Woerner <twoerner@redhat.com> 1.4.12-2
- dropped temporary provide again
* Tue Jul 26 2011 Thomas Woerner <twoerner@redhat.com> 1.4.12-1.1
- added temporary provides for libxtables.so.6 to be able to rebuild iproute,
which is part of the standard build environment
* Mon Jul 25 2011 Thomas Woerner <twoerner@redhat.com> 1.4.12-1
- new version 1.4.12 with support of all new features of kernel 3.0
- build: attempt to fix building under Linux 2.4
- build: bump soversion for recent data structure change
- build: install modules in arch-dependent location
- doc: fix group range in libxt_NFLOG's man
- doc: fix version string in ip6tables.8
- doc: include matches/targets in manpage again
- doc: mention multiple verbosity flags
- doc: the -m option cannot be inverted
- extensions: support for per-extension instance global variable space
- iptables-apply: select default rule file depending on call name
- iptables: consolidate target/match init call
- iptables: Coverity: DEADCODE
- iptables: Coverity: NEGATIVE_RETURNS
- iptables: Coverity: RESOURCE_LEAK
- iptables: Coverity: REVERSE_INULL
- iptables: Coverity: VARARGS
- iptables: restore negation for -f
- libip6t_HL: fix option names from ttl -> hl
- libipt_LOG: fix ignoring all but last flags
- libxtables: ignore whitespace in the multiaddress argument parser
- libxtables: properly reject empty hostnames
- libxtables: set clone's initial data to NULL
- libxt_conntrack: move more data into the xt_option_entry
- libxt_conntrack: restore network-byte order for v1,v2
- libxt_hashlimit: use a more obvious expiry value by default
- libxt_rateest: abolish global variables
- libxt_RATEEST: abolish global variables
- libxt_RATEEST: fix userspacesize field
- libxt_RATEEST: use guided option parser
- libxt_state: fix regression about inversion of main option
- option: remove last traces of intrapositional negation
- complete changelog:
http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.12.txt
* Thu Jul 21 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11.1-4
- merged ipv6 sub package into main package
- renamed init scripts to /usr/libexec/ip*tables.init
* Fri Jul 15 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11.1-3
- added support for native systemd file (rhbz#694738)
- new iptables.service file
- additional requires
- moved sysv init scripts to /usr/libexec
- added new post, preun and postun scripts and triggers
* Tue Jul 12 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11.1-2
- dropped temporary provide again
- enabled smp build
* Tue Jul 12 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11.1-1.1
- added temporary provides for libxtables.so.5 to be able to rebuild iproute,
which is part of the standard build environment
* Mon Jul 11 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11.1-1
- new version 1.4.11.1, bug and doc fix release for 1.4.11
* Tue Jun 07 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11-1
- new version 1.4.11 with all new features of 2.6.37-39 (not usable)
- lots of changes and bugfixes for base and extensions
- complete changelog:
http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.11.txt
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.10-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Mon Jan 10 2011 Thomas Woerner <twoerner@redhat.com> 1.4.10-1
- new version 1.4.10 with all new features of 2.6.36
- all: consistent syntax use in struct option
- build: fix static linking
- doc: let man(1) autoalign the text in xt_cpu
- doc: remove extra empty line from xt_cpu
- doc: minimal spelling updates to xt_cpu
- doc: consistent use of markup
- extensions: libxt_quota: don't ignore the quota value on deletion
- extensions: REDIRECT: add random help
- extensions: add xt_cpu match
- extensions: add idletimer xt target extension
- extensions: libxt_IDLETIMER: use xtables_param_act when checking options
- extensions: libxt_CHECKSUM extension
- extensions: libipt_LOG/libip6t_LOG: support macdecode option
- extensions: fix compilation of the new CHECKSUM target
- extensions: libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
- iptables-xml: resolve compiler warnings
- iptables: limit chain name length to be consistent with targets
- libiptc: add Libs.private to pkgconfig files
- libiptc: build with -Wl,--no-as-needed
- xtables: remove unnecessary cast
- dropped xt_CHECKSUM, added upstream
* Tue Oct 12 2010 Thomas Woerner <twoerner@redhat.com> 1.4.9-2
- added xt_CHECKSUM patch from Michael S. Tsirkin (rhbz#612587)
* Wed Aug 04 2010 Thomas Woerner <twoerner@redhat.com> 1.4.9-1
- new version 1.4.9 with all new features of 2.6.35
- doc: xt_hashlimit: fix a typo
- doc: xt_LED: nroff formatting requirements
- doc: xt_string: correct copy-and-pasting in manpage
- extensions: add the LED target
- extensions: libxt_quota.c: Support option negation
- extensions: libxt_rateest: fix bps options for iptables-save
- extensions: libxt_rateest: fix typo in the man page
- extensions: REDIRECT: add random help
- includes: sync header files from Linux 2.6.35-rc1
- libxt_conntrack: do print netmask
- libxt_hashlimit: always print burst value
- libxt_set: new revision added
- utils: add missing include flags to Makefile
- xtables: another try at chain name length checking
- xtables: remove xtables_set_revision function
- xt_quota: also document negation
- xt_sctp: Trace DATA chunk that supports SACK-IMMEDIATELY extension
- xt_sctp: support FORWARD_TSN chunk type
* Fri Jul 02 2010 Thomas Woerner <twoerner@redhat.com> 1.4.8-1
- new version 1.4.8 all new features of 2.6.34 (rhbz#)
- extensions: REDIRECT: fix --to-ports parser
- iptables: add noreturn attribute to exit_tryhelp()
- extensions: MASQUERADE: fix --to-ports parser
- libxt_comment: avoid use of IPv4-specific examples
- libxt_CT: add a manpage
- iptables: correctly check for too-long chain/target/match names
- doc: libxt_MARK: no longer restricted to mangle table
- doc: remove claim that TCPMSS is limited to mangle
- libxt_recent: add a missing space in output
- doc: add manpage for libxt_osf
- libxt_osf: import nfnl_osf program
- extensions: add support for xt_TEE
- CT: fix --ctevents parsing
- extensions: add CT extension
- libxt_CT: print conntrack zone in ->print/->save
- xtables: fix compilation when debugging is enabled
- libxt_conntrack: document --ctstate UNTRACKED
- iprange: fix xt_iprange v0 parsing
* Wed Mar 24 2010 Thomas Woerner <twoerner@redhat.com> 1.4.7-2
- added default values for IPTABLES_STATUS_VERBOSE and
IPTABLES_STATUS_LINENUMBERS in init script
- added missing lsb keywords Required-Start and Required-Stop to init script
* Fri Mar 05 2010 Thomas Woerner <twoerner@redhat.com> 1.4.7-1
- new version 1.4.7 with support for all new features of 2.6.33 (rhbz#570767)
- libip4tc: Add static qualifier to dump_entry()
- libipq: build as shared library
- recent: reorder cases in code (cosmetic cleanup)
- several man page and documentation fixes
- policy: fix error message showing wrong option
- includes: header updates
- Lift restrictions on interface names
- fixed license and moved iptables-xml into base package according to review
* Wed Jan 27 2010 Thomas Woerner <twoerner@redhat.com> 1.4.6-2
- moved libip*tc and libxtables libs to /lib[64], added symlinks for .so libs
to /usr/lib[64] for compatibility (rhbz#558796)
* Wed Jan 13 2010 Thomas Woerner <twoerner@redhat.com> 1.4.6-1
- new version 1.4.6 with support for all new features of 2.6.32
- several man page fixes
- Support for nommu arches
- realm: remove static initializations
- libiptc: remove unused functions
- libiptc: avoid strict-aliasing warnings
- iprange: do accept non-ranges for xt_iprange v1
- iprange: warn on reverse range
- iprange: roll address parsing into a loop
- iprange: do accept non-ranges for xt_iprange v1 (log)
- iprange: warn on reverse range (log)
- libiptc: fix wrong maptype of base chain counters on restore
- iptables: fix undersized deletion mask creation
- style: reduce indent in xtables_check_inverse
- libxtables: hand argv to xtables_check_inverse
- iptables/extensions: make bundled options work again
- CONNMARK: print mark rules with mask 0xffffffff as set instead of xset
- iptables: take masks into consideration for replace command
- doc: explain experienced --hitcount limit
- doc: name resolution clarification
- iptables: expose option to zero packet/byte counters for a specific rule
- build: restore --disable-ipv6 functionality on system w/o v6 headers
- MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark
- DNAT: fix incorrect check during parsing
- extensions: add osf extension
- conntrack: fix --expires parsing
* Thu Dec 17 2009 Thomas Woerner <twoerner@redhat.com> 1.4.5-2
- dropped nf_ext_init remains from cloexec patch
* Thu Sep 17 2009 Thomas Woerner <twoerner@redhat.com> 1.4.5-1
- new version 1.4.5 with support for all new features of 2.6.31
- libxt_NFQUEUE: add new v1 version with queue-balance option
- xt_conntrack: revision 2 for enlarged state_mask member
- libxt_helper: fix invalid passed option to check_inverse
- libiptc: split v4 and v6
- extensions: collapse registration structures
- iptables: allow for parse-less extensions
- iptables: allow for help-less extensions
- extensions: remove empty help and parse functions
- xtables: add multi-registration functions
- extensions: collapse data variables to use multi-reg calls
- xtables: warn of missing version identifier in extensions
- multi binary: allow subcommand via argv[1]
- iptables: accept multiple IP address specifications for -s, -d
- several build fixes
- several man page fixes
- fixed two leaked file descriptors on sockets (rhbz#521397)
* Mon Aug 24 2009 Thomas Woerner <twoerner@redhat.com> 1.4.4-1
- new version 1.4.4 with support for all new features of 2.6.30
- several man page fixes
- iptables: replace open-coded sizeof by ARRAY_SIZE
- libip6t_policy: remove redundant functions
- policy: use direct xt_policy_info instead of ipt/ip6t
- policy: merge ipv6 and ipv4 variant
- extensions: add `cluster' match support
- extensions: add const qualifiers in print/save functions
- extensions: use NFPROTO_UNSPEC for .family field
- extensions: remove redundant casts
- iptables: close open file descriptors
- fix segfault if incorrect protocol name is used
- replace open-coded sizeof by ARRAY_SIZE
- do not include v4-only modules in ip6tables manpage
- use direct xt_policy_info instead of ipt/ip6t
- xtables: fix segfault if incorrect protocol name is used
- libxt_connlimit: initialize v6_mask
- SNAT/DNAT: add support for persistent multi-range NAT mappings
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.3.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Wed Apr 15 2009 Thomas Woerner <twoerner@redhat.com> 1.4.3.2-1
- new version 1.4.3.2
- also install iptables/internal.h, needed for iptables.h and ip6tables.h
* Mon Mar 30 2009 Thomas Woerner <twoerner@redhat.com> 1.4.3.1-1
- new version 1.4.3.1
- libiptc is now shared
- supports all new features of the 2.6.29 kernel
- dropped typo_latter patch
* Thu Mar 05 2009 Thomas Woerner <twoerner@redhat.com> 1.4.2-3
- still more review fixes (rhbz#225906)
- consistent macro usage
- use sed instead of perl for rpath removal
- use standard RPM CFLAGS, but also -fno-strict-aliasing (needed for libiptc*)
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Fri Feb 20 2009 Thomas Woerner <twoerner@redhat.com> 1.4.2-1
- new version 1.4.2
- removed TOS value mask patch (upstream)
- more review fixes (rhbz#225906)
- install all header files (rhbz#462207)
- dropped nf_ext_init (rhbz#472548)
* Tue Jul 22 2008 Thomas Woerner <twoerner@redhat.com> 1.4.1.1-2
- fixed TOS value mask problem (rhbz#456244) (upstream patch)
- two more cloexec fixes
* Tue Jul 01 2008 Thomas Woerner <twoerner@redhat.com> 1.4.1.1-1
- upstream bug fix release 1.4.1.1
- dropped extra patch for 1.4.1 - not needed anymore
* Tue Jun 10 2008 Thomas Woerner <twoerner@redhat.com> 1.4.1-1
- new version 1.4.1 with new build environment
- additional ipv6 network mask patch from Jan Engelhardt
- spec file cleanup
- removed old patches
* Fri Jun 06 2008 Tom "spot" Callaway <tcallawa@redhat.com> 1.4.0-5
- use normal kernel headers, not linux/compiler.h
- change BuildRequires: kernel-devel to kernel-headers
- We need to do this to be able to build for both sparcv9 and sparc64
(there is no kernel-devel.sparcv9)
* Thu Mar 20 2008 Thomas Woerner <twoerner@redhat.com> 1.4.0-4
- use O_CLOEXEC for all opened files in all applications (rhbz#438189)
* Mon Mar 03 2008 Thomas Woerner <twoerner@redhat.com> 1.4.0-3
- use the kernel headers from the build tree for iptables for now to be able to
compile this package, but this makes the package more kernel dependant
- use s6_addr32 instead of in6_u.u6_addr32
* Wed Feb 20 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.4.0-2
- Autorebuild for GCC 4.3
* Mon Feb 11 2008 Thomas Woerner <twoerner@redhat.com> 1.4.0-1
- new version 1.4.0
- fixed condrestart (rhbz#428148)
- report the module in rmmod_r if there is an error
- use nf_ext_init instead of my_init for extension constructors
* Mon Nov 05 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-6
- fixed leaked file descriptor before fork/exec (rhbz#312191)
- blacklisting is not working, use "install X /bin/(true|false)" test instead
- return private exit code 150 for disabled ipv6 support
- use script name for output messages
* Tue Oct 16 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-5
- fixed error code for stopping a already stopped firewall (rhbz#321751)
- moved blacklist test into start
* Wed Sep 26 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-4.1
- do not start ip6tables if ipv6 is blacklisted (rhbz#236888)
- use simpler fix for (rhbz#295611)
Thanks to Linus Torvalds for the patch.
* Mon Sep 24 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-4
- fixed IPv6 reject type (rhbz#295181)
- fixed init script: start, stop and status
- support netfilter compiled into kernel in init script (rhbz#295611)
- dropped inversion for limit modules from man pages (rhbz#220780)
- fixed typo in ip6tables man page (rhbz#236185)
* Wed Sep 19 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-3
- do not depend on local_fs in lsb header - this delayes start after network
- fixed exit code for initscript usage
* Mon Sep 17 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-2.1
- do not use lock file for condrestart test
* Thu Aug 23 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-2
- fixed initscript for LSB conformance (rhbz#246953, rhbz#242459)
- provide iptc interface again, but unsupported (rhbz#216733)
- compile all extension, which are supported by the kernel-headers package
- review fixes (rhbz#225906)
* Tue Jul 31 2007 Thomas Woerner <twoerner@redhat.com>
- reverted ipv6 fix, because it disables the ipv6 at all (rhbz#236888)
* Fri Jul 13 2007 Steve Conklin <sconklin@redhat.com> - 1.3.8-1
- New version 1.3.8
* Mon Apr 23 2007 Jeremy Katz <katzj@redhat.com> - 1.3.7-2
- fix error when ipv6 support isn't loaded in the kernel (#236888)
* Wed Jan 10 2007 Thomas Woerner <twoerner@redhat.com> 1.3.7-1.1
- fixed installation of secmark modules
* Tue Jan 09 2007 Thomas Woerner <twoerner@redhat.com> 1.3.7-1
- new verison 1.3.7
- iptc is not a public interface and therefore not installed anymore
- dropped upstream secmark patch
* Tue Sep 19 2006 Thomas Woerner <twoerner@redhat.com> 1.3.5-2
- added secmark iptables patches (#201573)
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.2.1
- rebuild
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.2
- bump again for double-long bug on ppc(64)
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.1
- rebuilt for new gcc4.1 snapshot and glibc changes
* Thu Feb 02 2006 Thomas Woerner <twoerner@redhat.com> 1.3.5-1
- new version 1.3.5
- fixed init script to set policy for raw tables, too (#179094)
* Tue Jan 24 2006 Thomas Woerner <twoerner@redhat.com> 1.3.4-3
- added important iptables header files to devel package
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
- rebuilt
* Fri Nov 25 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-2
- fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and
replace "_init" with "__attribute((constructor)) my_init"
* Fri Nov 25 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-1.1
- rebuild due to unresolved symbols in shared libraries
* Fri Nov 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-1
- new version 1.3.4
- dropped free_opts patch (upstream fixed)
- made libipq PIC (#158623)
- additional configuration options for iptables startup script (#172929)
Thanks to Jan Gruenwald for the patch
- spec file cleanup (dropped linux_header define and usage)
* Mon Jul 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.2-1
- new version 1.3.2 with additional patch for the misplaced free_opts call
from Marcus Sundberg
* Wed May 11 2005 Thomas Woerner <twoerner@redhat.com> 1.3.1-1
- new version 1.3.1
* Fri Mar 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-2
- Remove unnecessary explicit kernel dep (#146142)
- Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
for the patch
- Adapted iptables-config to reference to modprobe.conf (#150143)
- Remove misleading message (#140154): Thanks to Ulrich Drepper
for the patch
* Mon Feb 21 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-1
- new version 1.3.0
* Thu Nov 11 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3.2
- fixed autoload problem in iptables and ip6tables (CAN-2004-0986)
* Fri Sep 17 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1
- changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
- modified config file to match this change and un-commented variables with
default values
* Thu Sep 16 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3
- applied second part of cleanup patch from (#131848): thanks to Steve Grubb
for the patch
* Wed Aug 25 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-2
- fixed free bug in iptables (#128322)
* Tue Jun 22 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-1
- new version 1.2.11
* Thu Jun 17 2004 Thomas Woerner <twoerner@redhat.com> 1.2.10-1
- new version 1.2.10
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
* Thu Feb 26 2004 Thomas Woerner <twoerner@redhat.com> 1.2.9-2.3
- fixed iptables-restore -c fault if there are no counters (#116421)
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
* Sun Jan 25 2004 Dan Walsh <dwalsh@redhat.com> 1.2.9-1.2
- Close File descriptors to prevent SELinux error message
* Wed Jan 07 2004 Thomas Woerner <twoerner@redhat.com> 1.2.9-1.1
- rebuild
* Wed Dec 17 2003 Thomas Woerner <twoerner@redhat.com> 1.2.9-1
- vew version 1.2.9
- new config options in ipXtables-config:
IPTABLES_MODULES_UNLOAD
- more documentation in ipXtables-config
- fix for netlink security issue in libipq (devel package)
- print fix for libipt_icmp (#109546)
* Thu Oct 23 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-13
- marked all messages in iptables init script for translation (#107462)
- enabled devel package (#105884, #106101)
- bumped build for fedora for libipt_recent.so (#106002)
* Tue Sep 23 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1
- fixed lost udp port range in ip6tables-save (#104484)
- fixed non numeric multiport port output in ipXtables-savs
* Mon Sep 22 2003 Florian La Roche <Florian.LaRoche@redhat.de> 1.2.8-11
- do not link against -lnsl
* Wed Sep 17 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-10
- made variables in rmmod_r local
* Tue Jul 22 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-9
- fixed permission for init script
* Sat Jul 19 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-8
- fixed save when iptables file is missing and iptables-config permissions
* Tue Jul 08 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-7
- fixes for ip6tables: module unloading, setting policy only for existing
tables
* Thu Jul 03 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-6
- IPTABLES_SAVE_COUNTER defaults to no, now
- install config file in /etc/sysconfig
- exchange unload of ip_tables and ip_conntrack
- fixed start function
* Wed Jul 02 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-5
- new config option IPTABLES_SAVE_ON_RESTART
- init script: new status, save and restart
- fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374
* Mon Jun 30 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-4
- new config option IPTABLES_STATUS_NUMERIC
- cleared IPTABLES_MODULES in iptables-config
* Mon Jun 30 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-3
- new init scripts
* Sat Jun 28 2003 Florian La Roche <Florian.LaRoche@redhat.de>
- remove check for very old kernel versions in init scripts
- sync up both init scripts and remove some further ugly things
- add some docu into rpm
* Thu Jun 26 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-2
- rebuild
* Mon Jun 16 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-1
- update to 1.2.8
* Wed Jan 22 2003 Tim Powers <timp@redhat.com>
- rebuilt
* Mon Jan 13 2003 Bill Nottingham <notting@redhat.com> 1.2.7a-1
- update to 1.2.7a
- add a plethora of bugfixes courtesy Michael Schwendt <mschewndt@yahoo.com>
* Fri Dec 13 2002 Elliot Lee <sopwith@redhat.com> 1.2.6a-3
- Fix multilib
* Wed Aug 07 2002 Karsten Hopp <karsten@redhat.de>
- fixed iptables and ip6tables initscript output, based on #70511
- check return status of all iptables calls, not just the last one
in a 'for' loop.
* Mon Jul 29 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.6a-1
- 1.2.6a (bugfix release, #69747)
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
- automated rebuild
* Thu May 23 2002 Tim Powers <timp@redhat.com>
- automated rebuild
* Mon Mar 04 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-3
- Add some fixes from CVS, fixing bug #60465
* Tue Feb 12 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2
- Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
- Update URL (#59354)
- Use /sbin/chkconfig rather than chkconfig in %postun script
* Fri Jan 11 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-1
- 1.2.5
* Wed Jan 09 2002 Tim Powers <timp@redhat.com>
- automated rebuild
* Mon Nov 05 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-2
- Fix %preun script
* Tue Oct 30 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1
- Update to 1.2.4 (various fixes, including security fixes; among others:
- Fix init script (#31133)
* Mon Sep 03 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-1
- 1.2.3 (5 security fixes, some other fixes)
- Fix updating (#53032)
* Mon Aug 27 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-4
- Fix #50990
- Add some fixes from current CVS; should fix #52620
* Mon Jul 16 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-3
- Add some fixes from the current CVS tree; fixes #49154 and some IPv6
issues
* Tue Jun 26 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-2
- Fix iptables-save reject-with (#45632), Patch from Michael Schwendt
<mschwendt@yahoo.com>
* Tue May 08 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-1
- 1.2.2
* Wed Mar 21 2001 Bernhard Rosenkraenzer <bero@redhat.com>
- 1.2.1a, fixes #28412, #31136, #31460, #31133
* Thu Mar 01 2001 Bernhard Rosenkraenzer <bero@redhat.com>
- Yet another initscript fix (#30173)
- Fix the fixes; they fixed some issues but broke more important
stuff :/ (#30176)
* Tue Feb 27 2001 Bernhard Rosenkraenzer <bero@redhat.com>
- Fix up initscript (#27962)
- Add fixes from CVS to iptables-{restore,save}, fixing #28412
* Fri Feb 09 2001 Karsten Hopp <karsten@redhat.de>
- create /etc/sysconfig/iptables mode 600 (same problem as #24245)
* Mon Feb 05 2001 Karsten Hopp <karsten@redhat.de>
- fix bugzilla #25986 (initscript not marked as config file)
- fix bugzilla #25962 (iptables-restore)
- mv chkconfig --del from postun to preun
* Thu Feb 01 2001 Trond Eivind Glomsrød <teg@redhat.com>
- Fix check for ipchains
* Mon Jan 29 2001 Bernhard Rosenkraenzer <bero@redhat.com>
- Some fixes to init scripts
* Wed Jan 24 2001 Bernhard Rosenkraenzer <bero@redhat.com>
- Add some fixes from CVS, fixes among other things Bug #24732
* Wed Jan 17 2001 Bernhard Rosenkraenzer <bero@redhat.com>
- Add missing man pages, fix up init script (Bug #17676)
* Mon Jan 15 2001 Bill Nottingham <notting@redhat.com>
- add init script
* Mon Jan 15 2001 Bernhard Rosenkraenzer <bero@redhat.com>
- 1.2
- fix up ipv6 split
- add init script
- Move the plugins from /usr/lib/iptables to /lib/iptables.
This needs to work before /usr is mounted...
- Use -O1 on alpha (compiler bug)
* Sat Jan 06 2001 Bernhard Rosenkraenzer <bero@redhat.com>
- 1.1.2
- Add IPv6 support (in separate package)
* Thu Aug 17 2000 Bill Nottingham <notting@redhat.com>
- build everywhere
* Tue Jul 25 2000 Bernhard Rosenkraenzer <bero@redhat.com>
- 1.1.1
* Thu Jul 13 2000 Prospector <bugzilla@redhat.com>
- automatic rebuild
* Tue Jun 27 2000 Preston Brown <pbrown@redhat.com>
- move iptables to /sbin.
- excludearch alpha for now, not building there because of compiler bug(?)
* Fri Jun 09 2000 Bill Nottingham <notting@redhat.com>
- don't obsolete ipchains either
- update to 1.1.0
* Sun Jun 04 2000 Bill Nottingham <notting@redhat.com>
- remove explicit kernel requirement
* Tue May 02 2000 Bernhard Rosenkränzer <bero@redhat.com>
- initial package
/etc/ethertypes /etc/sysconfig/ip6tables-config /etc/sysconfig/iptables-config /usr/lib/.build-id /usr/lib/.build-id/0b /usr/lib/.build-id/0b/35b5e0d8a78fd6a827fea0ab9f5c09c5f76cb4 /usr/lib/.build-id/0d /usr/lib/.build-id/0d/1319a0a944ad453e16f25e050c289618fe074d /usr/lib/.build-id/0d/3ace890cd43c7d82a5b77f49c399eed21a2d55 /usr/lib/.build-id/0d/69b82f7625366c1ab8a09fb28006982c5d0234 /usr/lib/.build-id/0e /usr/lib/.build-id/0e/d572fad11a35bbffdeb86bd2820bb70017dfda /usr/lib/.build-id/0f /usr/lib/.build-id/0f/4e6cc12b2ede4256e9118bec4b754677d04c30 /usr/lib/.build-id/0f/a0c4e94f8790a51479f9ec0d3f2027b2c5ad32 /usr/lib/.build-id/15 /usr/lib/.build-id/15/70c9c84ba98a7dbbf24e0f04b5b456a001b81a /usr/lib/.build-id/15/8f8873398f5df5aa3276665b48808858a3d271 /usr/lib/.build-id/1c /usr/lib/.build-id/1c/d44e6a0cc4db5e1a12834bde0103901c583e52 /usr/lib/.build-id/1f /usr/lib/.build-id/1f/f408d606f2dd26695d764838218fed0d3aa939 /usr/lib/.build-id/20 /usr/lib/.build-id/20/5fe27da9f313a0938f8a4b49268b11c3bda6fd /usr/lib/.build-id/22 /usr/lib/.build-id/22/bf6afa458031b8493e3ad73f814e2b1bf4a2a9 /usr/lib/.build-id/25 /usr/lib/.build-id/25/bd94c17479b711ccc90c960597af0c3e5358f9 /usr/lib/.build-id/26 /usr/lib/.build-id/26/d831f9efe2f5c34c8b8f48c0a54665e0f9f5cc /usr/lib/.build-id/27 /usr/lib/.build-id/27/99621745ec1e12350f0d3da5889b5d4e10f99d /usr/lib/.build-id/2a /usr/lib/.build-id/2a/d3d103a90cb3ab37a94b928ae00e52ca0a5749 /usr/lib/.build-id/2b /usr/lib/.build-id/2b/38e10ffd5af8fa2d74371743ece545155dc90a /usr/lib/.build-id/2c /usr/lib/.build-id/2c/c6694ad4235be8df1ba84f9b174ab514571fcf /usr/lib/.build-id/2d /usr/lib/.build-id/2d/7aec538cd58723b76f93d141a0344e7779e506 /usr/lib/.build-id/2f /usr/lib/.build-id/2f/7ae51cc24e089ce8ef3eff2e76dba21ee99c2a /usr/lib/.build-id/34 /usr/lib/.build-id/34/9f3caaa3395758aff6173362e3025f7bd7a7ab /usr/lib/.build-id/36 /usr/lib/.build-id/36/82511ff4d2692e789c76735c25b27d13724c48 /usr/lib/.build-id/36/efa0d584091193277c41f80c4894a57ee3078d /usr/lib/.build-id/3a /usr/lib/.build-id/3a/6388605e93a978c876dd0555dfcdd0d687303c /usr/lib/.build-id/3f /usr/lib/.build-id/3f/5ebaf912591aa50c55d42978ef1275677a51fc /usr/lib/.build-id/42 /usr/lib/.build-id/42/0773036c1587f18ecc412c9a5e0bffc0c50200 /usr/lib/.build-id/42/d5e5b837c4c3f7766b675a5afc0b04e0dea0e2 /usr/lib/.build-id/45 /usr/lib/.build-id/45/b6f9b5199b55bfaa0b33ef871d49624b9d14c9 /usr/lib/.build-id/4b /usr/lib/.build-id/4b/af2c990e895241733e2a48528e07d4f9743e1a /usr/lib/.build-id/4c /usr/lib/.build-id/4c/d8630665590de9ec1dd727436099c359ed3585 /usr/lib/.build-id/4f /usr/lib/.build-id/4f/6b97bf86b2935865ec3212817f4d74c940276f /usr/lib/.build-id/4f/adde550b98919954dab45de4e3b776fc348126 /usr/lib/.build-id/50 /usr/lib/.build-id/50/ea1fcfbf9a3b615c60d5be53dc3e8a3b602d39 /usr/lib/.build-id/51 /usr/lib/.build-id/51/c281f422d8a03ebb159390b19ceb2db10608dd /usr/lib/.build-id/54 /usr/lib/.build-id/54/fbce0f1cea0e7655a1012ac8d7743e809030b2 /usr/lib/.build-id/57 /usr/lib/.build-id/57/16f7337bb6d2951041853afc3a59a1e1a3f40d /usr/lib/.build-id/58 /usr/lib/.build-id/58/f7aef518b6f971c3b6c24056e9ff6cdae0462b /usr/lib/.build-id/5b /usr/lib/.build-id/5b/04b22fdb7b23c790c12a4e8460086bf0c20434 /usr/lib/.build-id/62 /usr/lib/.build-id/62/3c58d5a0887c602b63c76e27e6f937f016b4c9 /usr/lib/.build-id/62/3e70235402ec71e3d325f4e5d166aa64dfb573 /usr/lib/.build-id/63 /usr/lib/.build-id/63/af892a1621d213591e0502d767b8d83b49cae0 /usr/lib/.build-id/66 /usr/lib/.build-id/66/5e1db4b44779ce7c01b41e973e7480672c4b6f /usr/lib/.build-id/69 /usr/lib/.build-id/69/deb3e54ef69597fac9ea3ee10ba611342195da /usr/lib/.build-id/6d /usr/lib/.build-id/6d/7620207a8030fa9d5d227a1ca7ed7659f10bbd /usr/lib/.build-id/6d/fd363e76246303552867bc3b0d7dc561ce4955 /usr/lib/.build-id/6f /usr/lib/.build-id/6f/1ec08b1ec4dde78ce79b55fc6af48d4272cec7 /usr/lib/.build-id/6f/f627e65762efaa1171ec1fd769fe724198258c /usr/lib/.build-id/71 /usr/lib/.build-id/71/611f2015fda95c82bcc8a7996fd3e7f77482b1 /usr/lib/.build-id/72 /usr/lib/.build-id/72/5fd49a5e033d9d189673f11668d63ed814056e /usr/lib/.build-id/72/bfd51caca9b7cf3fee58efcc2ae3e3c0142fc0 /usr/lib/.build-id/73 /usr/lib/.build-id/73/a9d0e25ed5b447d03d22ad74eb27eff05a16bc /usr/lib/.build-id/74 /usr/lib/.build-id/74/577ed8eede8df0a8810e00af5baa06a87c9685 /usr/lib/.build-id/75 /usr/lib/.build-id/75/404cbdb574c64ff5b97f5d3175c61f921d7484 /usr/lib/.build-id/75/517d349ad8e25f95620ca21eb2adb2fd112e16 /usr/lib/.build-id/79 /usr/lib/.build-id/79/428a510e3e1ebcead55d31b8fd90347a6edd6c /usr/lib/.build-id/7e /usr/lib/.build-id/7e/3a1edb8a369e76b53aa770be02e52343fc4e1d /usr/lib/.build-id/7f /usr/lib/.build-id/7f/075e698c277a88b7ef27dd43be9356e53cde6a /usr/lib/.build-id/81 /usr/lib/.build-id/81/b6be8101adb5204e2309ec37a6e58178de14de /usr/lib/.build-id/83 /usr/lib/.build-id/83/1eb32f2f62169ff1d7767114d5f78753e79e8c /usr/lib/.build-id/83/c90b977ef41227d4a80394f74041d2cdeb8e73 /usr/lib/.build-id/85 /usr/lib/.build-id/85/d97372638108db520297cb2c61caf5b3be1a78 /usr/lib/.build-id/86 /usr/lib/.build-id/86/71099a793b75621be82fb2ece4e58bd316aa39 /usr/lib/.build-id/89 /usr/lib/.build-id/89/8ccd9bf000f090a9fce91edb7c1d1ac8e37415 /usr/lib/.build-id/8a /usr/lib/.build-id/8a/799dc0c42d5eb7b3c17e6d988f58759ba985d4 /usr/lib/.build-id/8c /usr/lib/.build-id/8c/3299c72fe97813f7e00f8e995679523729e9b0 /usr/lib/.build-id/8f /usr/lib/.build-id/8f/99ec778675899992058cf34c0b1e353b5c4739 /usr/lib/.build-id/90 /usr/lib/.build-id/90/3029eb4278a98bee5de16b8781c270fc935e46 /usr/lib/.build-id/90/52e99eec34d74477b7f282d88aa9a3cc4b4217 /usr/lib/.build-id/91 /usr/lib/.build-id/91/099bdba96d635d66cfba0fb2e9e36c815828ec /usr/lib/.build-id/92 /usr/lib/.build-id/92/3b7529e20bb248943d9a22aab7f3ec00791a00 /usr/lib/.build-id/93 /usr/lib/.build-id/93/0f4cf5738587eff48c52379a85bfd0d2e6a8dc /usr/lib/.build-id/94 /usr/lib/.build-id/94/1c3c9b5c342d5c71e0bf683d974ef4cadc5be8 /usr/lib/.build-id/98 /usr/lib/.build-id/98/c6272bcaa9b8e9e1cf2c57eb832ba7d656f607 /usr/lib/.build-id/99 /usr/lib/.build-id/99/d556a2514a2fa92dad00b8329f1cc011a2da0f /usr/lib/.build-id/9a /usr/lib/.build-id/9a/580fd23eae5588a9c5827bd3ab320d6f7b12d9 /usr/lib/.build-id/9a/90d4c184fd4827ffc0e2cdafaaf23f1f771099 /usr/lib/.build-id/9b /usr/lib/.build-id/9b/b7cdc86aeb3c027f6806940729b35c7e4a03c2 /usr/lib/.build-id/9d /usr/lib/.build-id/9d/5dcc9811cb19f1396d5fecb118eb6c5c19dc2c /usr/lib/.build-id/9e /usr/lib/.build-id/9e/1e78f67e5e2e6ca51a26fe5f5a239095edcea2 /usr/lib/.build-id/a0 /usr/lib/.build-id/a0/70128d068dedd3a83f5e12a20379edd17ed1bd /usr/lib/.build-id/a2 /usr/lib/.build-id/a2/afef82ce18f4ae58e7ea42595e62f10ebc8cac /usr/lib/.build-id/a2/d7c2471d979c00f9b19e544fa28c74a55107dc /usr/lib/.build-id/a5 /usr/lib/.build-id/a5/0815652dd3b0c87fab311430673c1be86926aa /usr/lib/.build-id/a6 /usr/lib/.build-id/a6/46509d81498110216c5433e69e978e9f27f142 /usr/lib/.build-id/a6/67406bf7793484984dac1ef08651c0aaeaea41 /usr/lib/.build-id/ab /usr/lib/.build-id/ab/e157c4fbf07489094970271c5fc274e898ebac /usr/lib/.build-id/ac /usr/lib/.build-id/ac/631e7c4396700b840abe41b383328ac4bbcf6a /usr/lib/.build-id/b2 /usr/lib/.build-id/b2/f3c28e69e2906b9d183207b56e153001951172 /usr/lib/.build-id/b4 /usr/lib/.build-id/b4/73fe470726c8490f8b31f1d7c8aa5e71622047 /usr/lib/.build-id/b5 /usr/lib/.build-id/b5/000e8578bffde944766782ba5493c9757ffbf7 /usr/lib/.build-id/b5/a77862e000dbe78de0410d9d09db544d5b2fc6 /usr/lib/.build-id/b5/b64bf5bc2b29c19b7a009254dfe82f74c23ff4 /usr/lib/.build-id/b7 /usr/lib/.build-id/b7/9a474ca8ada05162287bd0d9186414f16ad93a /usr/lib/.build-id/b8 /usr/lib/.build-id/b8/6a1a59fd89989c303b2ea9daf1650106b665da /usr/lib/.build-id/ba /usr/lib/.build-id/ba/6db7d71fc79d9491738b738e55aa1b2405593b /usr/lib/.build-id/be /usr/lib/.build-id/be/f899825bc7bcb86f0c2ebc3535181405473787 /usr/lib/.build-id/c0 /usr/lib/.build-id/c0/efa494f3f6a21746f94a395ee5f8d4c911e003 /usr/lib/.build-id/c0/efa76d61da23cb86c1c8196c88b89bf2db73cb /usr/lib/.build-id/c1 /usr/lib/.build-id/c1/3a985a232c9b83843bee413299c81b10b35563 /usr/lib/.build-id/c4 /usr/lib/.build-id/c4/bcb374f0af587ce57b72822695655ede9d8006 /usr/lib/.build-id/c5 /usr/lib/.build-id/c5/536619ce63f990257a89df829b171237017662 /usr/lib/.build-id/c8 /usr/lib/.build-id/c8/6b3d5ebfb77a12e730bd6994c01a0fada83c48 /usr/lib/.build-id/ca /usr/lib/.build-id/ca/0b1c9f1d72afe5019c10bbc8785eb21a6793fb /usr/lib/.build-id/ca/b19a14dcc76fb4d013f548d83c06d121f52b28 /usr/lib/.build-id/cd /usr/lib/.build-id/cd/2f2648d80b59974d5887cc697da65d7ad3470a /usr/lib/.build-id/ce /usr/lib/.build-id/ce/77f906b85f7592ae5fdebb1b4fc7c87a1ec305 /usr/lib/.build-id/d2 /usr/lib/.build-id/d2/a04df92872c837e63d300d542231b60df472c1 /usr/lib/.build-id/d6 /usr/lib/.build-id/d6/e67532db071df301d6056b4adbfedf17251316 /usr/lib/.build-id/d7 /usr/lib/.build-id/d7/084c40828d522418dba99421d60141c57afe44 /usr/lib/.build-id/dd /usr/lib/.build-id/dd/82b9bddf9cd43cefb24437c73f557b87aeb821 /usr/lib/.build-id/de /usr/lib/.build-id/de/a079d5225543d21d79581092b62f339850e096 /usr/lib/.build-id/e0 /usr/lib/.build-id/e0/de687c8847c382e63e94ed2de2b0e4bf16c930 /usr/lib/.build-id/e3 /usr/lib/.build-id/e3/1ba516618df8e47ae532d537ec6e5e1e7c2d59 /usr/lib/.build-id/e6 /usr/lib/.build-id/e6/32c4aecd686549a375eaaa222a78d244a7f2fa /usr/lib/.build-id/e8 /usr/lib/.build-id/e8/05fd6a145e6215b7e676b403aa7eded0a3b801 /usr/lib/.build-id/ec /usr/lib/.build-id/ec/35c5b49737e0993a70ff649b2ce9b472493e47 /usr/lib/.build-id/ee /usr/lib/.build-id/ee/0ba949c9ee4631aead46f0365329f393f6f883 /usr/lib/.build-id/f0 /usr/lib/.build-id/f0/abadb2df270d7bb59ea4c2e8a0963f6e1bdd11 /usr/lib/.build-id/f2 /usr/lib/.build-id/f2/dcc4f7010aa79a716720d17745f9901e8eef2e /usr/lib/.build-id/f3 /usr/lib/.build-id/f3/8fe5cee6c0c7179f695b29338ba3898359262b /usr/lib/.build-id/f5 /usr/lib/.build-id/f5/f6d0e1dcaf792930c207ea5316ec1b60277a32 /usr/lib/.build-id/f9 /usr/lib/.build-id/f9/dd553477e991c12cd5d9f9931cd250eeb43038 /usr/lib/.build-id/fb /usr/lib/.build-id/fb/2d79e0aef57200ad7e966dbcdee02c12f19907 /usr/lib/.build-id/fb/9759efc6913f05733fb0aa535b43afb4d8a9d6 /usr/lib64/xtables /usr/lib64/xtables/libarpt_mangle.so /usr/lib64/xtables/libebt_802_3.so /usr/lib64/xtables/libebt_among.so /usr/lib64/xtables/libebt_arp.so /usr/lib64/xtables/libebt_arpreply.so /usr/lib64/xtables/libebt_dnat.so /usr/lib64/xtables/libebt_ip.so /usr/lib64/xtables/libebt_ip6.so /usr/lib64/xtables/libebt_log.so /usr/lib64/xtables/libebt_mark.so /usr/lib64/xtables/libebt_mark_m.so /usr/lib64/xtables/libebt_nflog.so /usr/lib64/xtables/libebt_pkttype.so /usr/lib64/xtables/libebt_redirect.so /usr/lib64/xtables/libebt_snat.so /usr/lib64/xtables/libebt_stp.so /usr/lib64/xtables/libebt_vlan.so /usr/lib64/xtables/libip6t_DNAT.so /usr/lib64/xtables/libip6t_DNPT.so /usr/lib64/xtables/libip6t_HL.so /usr/lib64/xtables/libip6t_LOG.so /usr/lib64/xtables/libip6t_MASQUERADE.so /usr/lib64/xtables/libip6t_NETMAP.so /usr/lib64/xtables/libip6t_REDIRECT.so /usr/lib64/xtables/libip6t_REJECT.so /usr/lib64/xtables/libip6t_SNAT.so /usr/lib64/xtables/libip6t_SNPT.so /usr/lib64/xtables/libip6t_ah.so /usr/lib64/xtables/libip6t_dst.so /usr/lib64/xtables/libip6t_eui64.so /usr/lib64/xtables/libip6t_frag.so /usr/lib64/xtables/libip6t_hbh.so /usr/lib64/xtables/libip6t_hl.so /usr/lib64/xtables/libip6t_icmp6.so /usr/lib64/xtables/libip6t_ipv6header.so /usr/lib64/xtables/libip6t_mh.so /usr/lib64/xtables/libip6t_rt.so /usr/lib64/xtables/libip6t_srh.so /usr/lib64/xtables/libipt_CLUSTERIP.so /usr/lib64/xtables/libipt_DNAT.so /usr/lib64/xtables/libipt_ECN.so /usr/lib64/xtables/libipt_LOG.so /usr/lib64/xtables/libipt_MASQUERADE.so /usr/lib64/xtables/libipt_NETMAP.so /usr/lib64/xtables/libipt_REDIRECT.so /usr/lib64/xtables/libipt_REJECT.so /usr/lib64/xtables/libipt_SNAT.so /usr/lib64/xtables/libipt_TTL.so /usr/lib64/xtables/libipt_ULOG.so /usr/lib64/xtables/libipt_ah.so /usr/lib64/xtables/libipt_icmp.so /usr/lib64/xtables/libipt_realm.so /usr/lib64/xtables/libipt_ttl.so /usr/lib64/xtables/libxt_AUDIT.so /usr/lib64/xtables/libxt_CHECKSUM.so /usr/lib64/xtables/libxt_CLASSIFY.so /usr/lib64/xtables/libxt_CONNMARK.so /usr/lib64/xtables/libxt_CONNSECMARK.so /usr/lib64/xtables/libxt_CT.so /usr/lib64/xtables/libxt_DSCP.so /usr/lib64/xtables/libxt_HMARK.so /usr/lib64/xtables/libxt_IDLETIMER.so /usr/lib64/xtables/libxt_LED.so /usr/lib64/xtables/libxt_MARK.so /usr/lib64/xtables/libxt_NFLOG.so /usr/lib64/xtables/libxt_NFQUEUE.so /usr/lib64/xtables/libxt_NOTRACK.so /usr/lib64/xtables/libxt_RATEEST.so /usr/lib64/xtables/libxt_SECMARK.so /usr/lib64/xtables/libxt_SET.so /usr/lib64/xtables/libxt_SYNPROXY.so /usr/lib64/xtables/libxt_TCPMSS.so /usr/lib64/xtables/libxt_TCPOPTSTRIP.so /usr/lib64/xtables/libxt_TEE.so /usr/lib64/xtables/libxt_TOS.so /usr/lib64/xtables/libxt_TPROXY.so /usr/lib64/xtables/libxt_TRACE.so /usr/lib64/xtables/libxt_addrtype.so /usr/lib64/xtables/libxt_bpf.so /usr/lib64/xtables/libxt_cgroup.so /usr/lib64/xtables/libxt_cluster.so /usr/lib64/xtables/libxt_comment.so /usr/lib64/xtables/libxt_connbytes.so /usr/lib64/xtables/libxt_connlabel.so /usr/lib64/xtables/libxt_connlimit.so /usr/lib64/xtables/libxt_connmark.so /usr/lib64/xtables/libxt_conntrack.so /usr/lib64/xtables/libxt_cpu.so /usr/lib64/xtables/libxt_dccp.so /usr/lib64/xtables/libxt_devgroup.so /usr/lib64/xtables/libxt_dscp.so /usr/lib64/xtables/libxt_ecn.so /usr/lib64/xtables/libxt_esp.so /usr/lib64/xtables/libxt_hashlimit.so /usr/lib64/xtables/libxt_helper.so /usr/lib64/xtables/libxt_ipcomp.so /usr/lib64/xtables/libxt_iprange.so /usr/lib64/xtables/libxt_ipvs.so /usr/lib64/xtables/libxt_length.so /usr/lib64/xtables/libxt_limit.so /usr/lib64/xtables/libxt_mac.so /usr/lib64/xtables/libxt_mark.so /usr/lib64/xtables/libxt_multiport.so /usr/lib64/xtables/libxt_nfacct.so /usr/lib64/xtables/libxt_osf.so /usr/lib64/xtables/libxt_owner.so /usr/lib64/xtables/libxt_physdev.so /usr/lib64/xtables/libxt_pkttype.so /usr/lib64/xtables/libxt_policy.so /usr/lib64/xtables/libxt_quota.so /usr/lib64/xtables/libxt_rateest.so /usr/lib64/xtables/libxt_recent.so /usr/lib64/xtables/libxt_rpfilter.so /usr/lib64/xtables/libxt_sctp.so /usr/lib64/xtables/libxt_set.so /usr/lib64/xtables/libxt_socket.so /usr/lib64/xtables/libxt_standard.so /usr/lib64/xtables/libxt_state.so /usr/lib64/xtables/libxt_statistic.so /usr/lib64/xtables/libxt_string.so /usr/lib64/xtables/libxt_tcp.so /usr/lib64/xtables/libxt_tcpmss.so /usr/lib64/xtables/libxt_time.so /usr/lib64/xtables/libxt_tos.so /usr/lib64/xtables/libxt_u32.so /usr/lib64/xtables/libxt_udp.so /usr/sbin/ip6tables /usr/sbin/ip6tables-apply /usr/sbin/ip6tables-restore /usr/sbin/ip6tables-restore-translate /usr/sbin/ip6tables-save /usr/sbin/ip6tables-translate /usr/sbin/iptables /usr/sbin/iptables-apply /usr/sbin/iptables-restore /usr/sbin/iptables-restore-translate /usr/sbin/iptables-save /usr/sbin/iptables-translate /usr/sbin/xtables-monitor /usr/sbin/xtables-nft-multi /usr/share/doc/iptables /usr/share/doc/iptables/INCOMPATIBILITIES /usr/share/licenses/iptables /usr/share/licenses/iptables/COPYING /usr/share/man/man8/ip6tables-apply.8.gz /usr/share/man/man8/ip6tables-restore-translate.8.gz /usr/share/man/man8/ip6tables-restore.8.gz /usr/share/man/man8/ip6tables-save.8.gz /usr/share/man/man8/ip6tables-translate.8.gz /usr/share/man/man8/ip6tables.8.gz /usr/share/man/man8/iptables-apply.8.gz /usr/share/man/man8/iptables-extensions.8.gz /usr/share/man/man8/iptables-restore-translate.8.gz /usr/share/man/man8/iptables-restore.8.gz /usr/share/man/man8/iptables-save.8.gz /usr/share/man/man8/iptables-translate.8.gz /usr/share/man/man8/iptables.8.gz /usr/share/man/man8/xtables-monitor.8.gz /usr/share/man/man8/xtables-nft.8.gz /usr/share/man/man8/xtables-translate.8.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Fri Apr 26 02:49:02 2024