Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

iptables-1.8.5-11.el8 RPM for i686

From CentOS 8-stream BaseOS for x86_64 / Packages

Name: iptables Distribution: CentOS
Version: 1.8.5 Vendor: CentOS
Release: 11.el8 Build date: Thu Nov 16 05:19:56 2023
Group: Unspecified Build host: x86-04.stream.rdu2.redhat.com
Size: 1785347 Source RPM: iptables-1.8.5-11.el8.src.rpm
Packager: builder@centos.org
Url: http://www.netfilter.org/projects/iptables
Summary: Tools for managing Linux kernel packet filtering capabilities
The iptables utility controls the network packet filtering code in the
Linux kernel. If you need to set up firewalls and/or IP masquerading,
you should either install nftables or this package.

Note: This package contains the nftables-based variants of iptables and
ip6tables, which are drop-in replacements of the legacy tools.

Provides

Requires

License

GPLv2 and Artistic 2.0 and ISC

Changelog

* Thu Nov 16 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-11
  - iptables-restore: Drop dead code
  - iptables-apply: Eliminate shellcheck warnings
  - ebtables: Exit gracefully on invalid table names
* Fri Sep 08 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-10
  - Bump NVR to fix for wrong build tag
* Wed Sep 06 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-9
  - iptables-nft: fix basechain policy configuration
* Fri Jul 28 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-8
  - Update fixes from upstream once more
* Wed Jul 19 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-7
  - Fix shell test-case for older gawk version
* Tue Jul 18 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-6
  - Fix shell testcase for rebased libnftnl package
* Tue Jul 18 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-5
  - Missed to copy expected results file to destination.
* Sat Jul 15 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-4
  - Bump release for CI.
* Tue Jul 04 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-3
  - Add expected test results
  - Prepare testsuites for expected results
* Wed Jun 28 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-2
  - libnftnl package was rebased, depending on 1.1.6 is fine
* Wed May 10 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-1
  - Rebase to version 1.8.5 plus upstream-indicated fixes
  - Fix for duplicate files in RPM due to imprecise globbing
  - Drop bootstrap code again
* Wed Nov 23 2022 Phil Sutter <psutter@redhat.com> - 1.8.4-24
  - ebtables: Support '-p Length'
  - nft-shared: Introduce __get_cmp_data()
* Fri Jul 01 2022 Phil Sutter <psutter@redhat.com> - 1.8.4-23
  - libxtables: Fix unsupported extension warning corner case
  - tests: shell: Check overhead in iptables-save and -restore
  - nft: Fix EPERM handling for extensions without rev 0
  - Improve error messages for unsupported extensions
  - xshared: Fix response to unprivileged users
  - libxtables: Register only the highest revision extension
  - Use proto_to_name() from xshared in more places
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing
* Mon Nov 29 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-22
  - extensions: hashlimit: Fix tests with HZ=1000
* Thu Oct 07 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-21
  - extensions: hashlimit: Fix tests with HZ=100
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options
* Wed Aug 04 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-20
  - extensions: SECMARK: Use a better context in test case
  - extensions: sctp: Translate --chunk-types option
  - extensions: sctp: Fix nftables translation
  - extensions: SECMARK: Implement revision 1
  - nft: cache: Retry if kernel returns EINTR
* Fri Jun 18 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-19
  - Fix for rpminspect results
* Mon May 24 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-18
  - xtables-translate: Fix translation of odd netmasks
  - nft: Fix bitwise expression avoidance detection
  - xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
  - xtables-monitor: print packet first
  - xtables-monitor: fix packet family protocol
  - xtables-monitor: fix rule printing
  - xtables-monitor: Fix ip6tables rule printing
* Thu Dec 10 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-17
  - extensions: dccp: Fix for DCCP type 'INVALID'
  - tests: shell: Merge and extend return codes test
  - nft: Fix command name in ip6tables error message
  - extensions: libxt_CT: add translation for NOTRACK
  - extensions: libipt_icmp: Fix translation of type 'any'
  - tests/shell: Test for fixed extension registration
  - libxtables: Register multiple extensions in ascending order
  - libxtables: Simplify pending extension registration
  - libxtables: Make sure extensions register in revision order
* Wed Oct 28 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-16
  - tests/shell: Add test for bitwise avoidance fixes
  - ebtables: Optimize masked MAC address matches
  - nft: Optimize class-based IP prefix matches
  - nft: Fix for broken address mask match detection
  - nft: cache: Make nft_rebuild_cache() respect fake cache
  - tests: shell: Improve concurrent noflush restore test a bit
  - nft: Fix for concurrent noflush restore calls
  - nft: Fix error reporting for refreshed transactions
  - nft: Make batch_add_chain() return the added batch object
* Sat Aug 15 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-15
  - Ignore sysctl files not suffixed '.conf'
* Wed Jun 24 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-14
  - nft: Fix for '-F' in iptables dumps
  - tests: shell: Test -F in dump files
* Fri May 29 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-13
  - Fix for endless loop in iptables-restore --test
* Tue May 26 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-12
  - Unbreak nfnl_osf tool
* Tue May 19 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-11
  - Complete ebtables-nft among match support
  - Replace RHEL-only xtables-monitor fix with upstream solution
  - xtables: Align effect of -4/-6 options with legacy
  - xtables: Drop -4 and -6 support from xtables-{save,restore}
  - Review systemd unit files
* Tue Mar 17 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-10
  - Fix for iptables-restore segfault under pressure
  - Fix for iptables-save segfault under pressure
* Mon Feb 24 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-9
  - iptables-test.py: Fix --host mode
  - xtables-monitor: Fix segfault when tracing
* Sat Feb 15 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-8
  - xtables-translate: Fix for iface++
  - tests: shell: Fix skip checks with --host mode
  - xtables-restore: fix for --noflush and empty lines
* Wed Feb 12 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-7
  - xtables-translate: Fix for interface name corner-cases
* Mon Dec 09 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-6
  - Add missing patch in last release, uAPI covscan fix
* Mon Dec 09 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-5
  - Fix covscan-indicated problems
* Wed Dec 04 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-4
  - Fix for broken xtables-restore --noflush
* Tue Dec 03 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-3
  - Reduce globbing in library file names to expose future SONAME changes
  - Add bootstrapping for libip*tc SONAME bump
* Mon Dec 02 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-2
  - Use upstream-provided man pages for ebtables and arptables
* Mon Dec 02 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-1
  - Rebase onto upstream release 1.8.4
* Thu Aug 08 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-16
  - nft: Set socket receive buffer
* Wed Jul 31 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-15
  - doc: Install ip{6,}tables-restore-translate.8 man pages
* Tue Jul 02 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-14
  - arptables: Print space before comma and counters
  - extensions: Fix ipvs vproto parsing
  - extensions: Fix ipvs vproto option printing
  - extensions: Add testcase for libxt_ipvs
* Mon Jul 01 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-13
  - doc: Install ip{6,}tables-translate.8 manpages
  - nft: Eliminate dead code in __nft_rule_list
* Wed Jun 12 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-12
  - Add iptables-test.py testsuite to sources
  - extensions: libip6t_mh: fix bogus translation error
  - extensions: AUDIT: Document ineffective --type option
  - xtables-restore: Fix program names in help texts
  - xtables-save: Point at existing man page in help text
  - utils: Add a manpage for nfbpf_compile
  - Mark man pages in base package as documentation files
* Thu May 23 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-11
  - Enable verbose output when building
* Thu May 09 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-10
  - arptables-nft: fix decoding of hlen on bigendian platforms
  - xtables-save: Fix table not found error message
  - xtables: Catch errors when zeroing rule rounters
  - extensions: TRACE: Point at xtables-monitor in documentation
  - extensions: libipt_realm: Document allowed realm values
* Fri Feb 08 2019 Phil Sutter - 1.8.2-9
  - ebtables-nft: Support user-defined chain policies
* Thu Feb 07 2019 Phil Sutter - 1.8.2-8
  - arptables.8: Document --set-counters option
* Thu Feb 07 2019 Phil Sutter - 1.8.2-7
  - arptables: Support --set-counters option
* Fri Feb 01 2019 Phil Sutter - 1.8.2-6
  - Improve performance with large rulesets
  - Fix for changes in arptables output
  - Fix for inserting rules at wrong position
  - Fix segfault when comparing rules with standard target
  - Fix ebtables output for negated values
  - Document missing arptables FORWARD chain
* Tue Dec 18 2018 Phil Sutter - 1.8.2-5
  - Drop change to test snippet not included in tarball from Patch4
* Tue Dec 18 2018 Phil Sutter - 1.8.2-4
  - Fix iptables init script for nftables-backend
  - Drop references to unsupported broute table from ebtables man page
  - xtables: Don't use native nftables comments
* Thu Dec 06 2018 Phil Sutter - 1.8.2-3
  - Drop change to test snippet not included in tarball from Patch3
* Thu Dec 06 2018 Phil Sutter - 1.8.2-2
  - Point out that nftables-variants are installed in package description
  - Fix for deleting arptables rules by referencing them
* Thu Dec 06 2018 Phil Sutter - 1.8.2-1
  - Rebase onto upstream version 1.8.2
* Thu Oct 25 2018 Phil Sutter - 1.8.1-2
  - Add upstream fixes to 1.8.1 release
* Thu Oct 25 2018 Phil Sutter - 1.8.1-1
  - Rebase onto upstream version 1.8.1
* Thu Sep 27 2018 Phil Sutter - 1.8.0-11
  - Fix for covscan warnings in init scripts
* Wed Sep 26 2018 Phil Sutter - 1.8.0-10
  - Fix short name of Artistic Licence
* Wed Sep 26 2018 Phil Sutter - 1.8.0-9
  - Add further fixes for issues identified by covscan
  - Fix for bogus "is incompatible" warnings
  - Fix layout in License tag
  - Replace "Fedora" with "RHEL" in description
  - Make devel sub-package depend on libs sub-package
* Mon Sep 17 2018 Phil Sutter - 1.8.0-8
  - Fix issues identified by covscan
  - xtables-restore: Fix flushing referenced custom chains
  - xtables: Accept --wait in iptables-nft-restore
* Mon Sep 03 2018 Phil Sutter - 1.8.0-7
  - xtables: Align return codes with legacy iptables
  - xtables: Drop use of IP6T_F_PROTO
* Wed Aug 29 2018 Phil Sutter - 1.8.0-6
  - xtables: Fix for deleting rules with comment
* Fri Aug 24 2018 Phil Sutter - 1.8.0-5
  - xtables: Use meta l4proto for -p match
  - ebtables: Fix for listing of non-existent chains
  - xtables: Fix for no output in iptables-nft -S
* Sat Aug 18 2018 Phil Sutter - 1.8.0-4
  - xtables: Fix for segfault in iptables-nft
  - ebtables: Fix entries count in chain listing
  - Use %autosetup macro in %prep
* Fri Aug 17 2018 Phil Sutter - 1.8.0-3
  - xtables: Make 'iptables -S nonexisting' return non-zero
* Fri Aug 10 2018 Phil Sutter - 1.8.0-2
  - Rebase onto upstream master commit 514de4801b731db4712
  - Add arptables and ebtables sub-packages
* Wed Jul 11 2018 Phil Sutter - 1.8.0-1
  - New upstream version 1.8.0
  - Drop compat sub-package
  - Use nft tool versions, drop legacy ones
* Thu Mar 01 2018 Phil Sutter <psutter@redhat.com> - 1.6.2-2
  - Kill module unloading support
  - Support /etc/sysctl.d
  - Don't restart services after package update
  - Add support for --wait options to restore commands
* Wed Feb 21 2018 Michael Cronenworth <mike@cchtml.com> - 1.6.2-1
  - New upstream version 1.6.2
    http://www.netfilter.org/projects/iptables/files/changes-iptables-1.6.2.txt
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.1-6
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sun Oct 22 2017 Kevin Fenzi <kevin@scrye.com> - 1.6.1-5
  - Rebuild for new libnftnl
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.1-4
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.1-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.1-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Thu Feb 02 2017 Thomas Woerner <twoerner@redhat.com> - 1.6.1-1
  - New upstream version 1.6.1 with enhanced translation to nft support and
    several fixes (RHBZ#1417323)
    http://netfilter.org/projects/iptables/files/changes-iptables-1.6.1.txt
  - Enable parallel build again
* Thu Feb 02 2017 Petr Šabata <contyk@redhat.com> - 1.6.0-4
  - Disabling parallel build to avoid build issues with xtables
  - See http://patchwork.alpinelinux.org/patch/1787/ for reference
  - This should be fixed in 1.6.1; parallel build can be restored after the
    update
* Mon Dec 19 2016 Thomas Woerner <twoerner@redhat.com> - 1.6.0-3
  - Dropped bad provides for iptables in services sub package (RHBZ#1327786)
* Fri Jul 22 2016 Thomas Woerner <twoerner@redhat.com> - 1.6.0-2
  - /etc/ethertypes has been moved into the setup package for F-25+.
    (RHBZ#1329256)
* Wed Apr 13 2016 Thomas Woerner <twoerner@redhat.com> - 1.6.0-1
  - New upstream version 1.6.0 with nft-compat support and lots of fixes (RHBZ#1292990)
    Upstream changelog:
    http://netfilter.org/projects/iptables/files/changes-iptables-1.6.0.txt
  - New libs sub package containing libxtables and unstable libip*tc libraries (RHBZ#1323161)
  - Using scripts form RHEL-7 (RHBZ#1240366)
  - New compat sub package for nftables compatibility
  - Install iptables-apply (RHBZ#912047)
  - Fixed module uninstall (RHBZ#1324101)
  - Incorporated changes by Petr Pisar
  - Enabled bpf compiler (RHBZ#1170227) Thanks to Yanko Kaneti for the patch
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.21-16
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.21-15
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Mon Dec 01 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-14
  - add dhcpv6-client to /etc/sysconfig/ip6tables (RHBZ#1169036)
* Mon Nov 03 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-13
  - iptables.init: use /run/lock/subsys/ instead of /var/lock/subsys/ (RHBZ#1159573)
* Mon Sep 29 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-12
  - ip[6]tables.init: change shebang from /bin/sh to /bin/bash (RHBZ#1147272)
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.21-11
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jul 12 2014 Tom Callaway <spot@fedoraproject.org> - 1.4.21-10
  - fix license handling
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.21-9
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Wed Mar 12 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-8
  - add missing reload and panic actions
  - BuildRequires: pkgconfig(x) instead of x-devel
  - no need to specify file mode bits twice (in %install and %files)
* Sun Jan 19 2014 Ville Skyttä <ville.skytta@iki.fi> - 1.4.21-7
  - Don't order services after syslog.target.
* Wed Jan 15 2014 Thomas Woerner <twoerner@redhat.com> 1.4.21-6
  - Enable connlabel support again, needs libnetfilter_conntrack
* Wed Jan 15 2014 Thomas Woerner <twoerner@redhat.com> 1.4.21-6
  - fixed update from RHEL-6 to RHEL-7 (RHBZ#1043901)
* Tue Jan 14 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-5
  - chmod /etc/sysconfig/ip[6]tables 755 -> 600
* Fri Jan 10 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-4
  - drop virtual provide for xtables.so.9
  - add default /etc/sysconfig/ip[6]tables (RHBZ#1034494)
* Thu Jan 09 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-3
  - no need to support the pre-systemd things
  - use systemd macros (#850166)
  - remove scriptlets for migrating to a systemd unit from a SysV initscripts
  - ./configure -> %configure
  - spec clean up
  - fix self-obsoletion
* Thu Jan 09 2014 Thomas Woerner <twoerner@redhat.com> 1.4.21-2
  - fixed system hang at shutdown if root device is network based (RHBZ#1007934)
    Thanks to Rodrigo A B Freire for the patch
* Thu Jan 09 2014 Thomas Woerner <twoerner@redhat.com> 1.4.21-1
  - no connlabel.conf upstream anymore
  - new version 1.4.21
    - doc: clarify DEBUG usage macro
    - iptables: use autoconf to process .in man pages
    - extensions: libipt_ULOG: man page should mention NFLOG as replacement
    - extensions: libxt_connlabel: use libnetfilter_conntrack
    - Introduce a new revision for the set match with the counters support
    - libxt_CT: Add the "NOTRACK" alias
    - libip6t_mh: Correct command to list named mh types in manpage
    - extensions: libxt_DNAT, libxt_REDIRECT, libxt_NETMAP, libxt_SNAT, libxt_MASQUERADE, libxt_LOG: rename IPv4 manpage and tell about IPv6 support
    - extensions: libxt_LED: fix parsing of delay
    - ip{6}tables-restore: fix breakage due to new locking approach
    - libxt_recent: restore minimum value for --seconds
    - iptables-xml: fix parameter parsing (similar to 2165f38)
    - extensions: add copyright statements
    - xtables: improve get_modprobe handling
    - ip[6]tables: Add locking to prevent concurrent instances
    - iptables: Fix connlabel.conf install location
    - ip6tables: don't print out /128
    - libip6t_LOG: target output is different to libipt_LOG
    - build: additional include path required after UAPI changes
    - iptables: iptables-xml: Fix various parsing bugs
    - libxt_recent: restore reap functionality to recent module
    - build: fail in configure on missing dependency with --enable-bpf-compiler
    - extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter
    - extensions: libxt_set, libxt_SET: check the set family too
    - ip6tables: Use consistent exit code for EAGAIN
    - iptables: libxt_hashlimit.man: correct address
    - iptables: libxt_conntrack.man extraneous commas
    - iptables: libip(6)t_REJECT.man default icmp types
    - iptables: iptables-xm1.1 correct man section
    - iptables: libxt_recent.{c,man} dead URL
    - iptables: libxt_string.man add examples
    - extensions: libxt_LOG: use generic syslog reference in manpage
    - iptables: extensions/GNUMakefile.in use CPPFLAGS
    - iptables: correctly reference generated file
    - ip[6]tables: fix incorrect alignment in commands_v_options
    - build: add software version to manpage first line at configure stage
    - extensions: libxt_cluster: add note on arptables-jf
    - utils: nfsynproxy: fix error while compiling the BPF filter
    - extensions: add SYNPROXY extension
    - utils: add nfsynproxy tool
    - iptables: state match incompatibilty across versions
    - libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks
    - iptables: improve chain name validation
    - iptables: spurious error in load_extension
    - xtables: trivial spelling fix
* Sun Dec 22 2013 Ville Skyttä <ville.skytta@iki.fi> - 1.4.19.1-2
  - Drop INSTALL from docs, escape macros in %changelog.
* Wed Jul 31 2013 Thomas Woerner <twoerner@redhat.com> 1.4.19.1-1
  - new version 1.4.19.1
    - libxt_NFQUEUE: fix bypass option documentation
    - extensions: add connlabel match
    - extensions: add connlabel match
    - ip[6]tables: show --protocol instead of --proto in usage
    - libxt_recent: Fix missing space in manpage for --mask option
    - extensions: libxt_multiport: Update manpage to list valid protocols
    - utils: nfnl_osf: use the right nfnetlink lib
    - libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency
    - Revert "build: resolve link failure for ip6t_NETMAP"
    - libxt_osf: fix missing --ttl and --log in save output
    - libxt_osf: fix bad location for location in --genre
    - libip6t_SNPT: add manpage
    - libip6t_DNPT: add manpage
    - utils: updates .gitignore to include nfbpf_compile
    - extensions: libxt_bpf: clarify --bytecode argument
    - libxtables: fix parsing of dotted network mask format
    - build: bump version to 1.4.19
    - libxt_conntrack: fix state match alias state parsing
    - extensions: add libxt_bpf extension
    - utils: nfbpf_compile
    - doc: mention SNAT in INPUT chain since kernel 2.6.36
  - fixed changelog date weekdays where needed
* Mon Mar 04 2013 Thomas Woerner <twoerner@redhat.com> 1.4.18-1
  - new version 1.4.18 
    - lots of documentation changes
    - Introduce match/target aliases
    - Add the "state" alias to the "conntrack" match
    - iptables: remove unused leftover definitions
    - libxtables: add xtables_rule_matches_free
    - libxtables: add xtables_print_num
    - extensions: libip6t_DNPT: fix wording in DNPT target
    - extension: libip6t_DNAT: allow port DNAT without address
    - extensions: libip6t_DNAT: set IPv6 DNAT --to-destination
    - extensions: S/DNPT: add missing save function
  - changes of 1.4.17:
    - libxt_time: add support to ignore day transition
    - Convert the NAT targets to use the kernel supplied nf_nat.h header
    - extensions: add IPv6 MASQUERADE extension
    - extensions: add IPv6 SNAT extension
    - extensions: add IPv6 DNAT target
    - extensions: add IPv6 REDIRECT extension
    - extensions: add IPv6 NETMAP extension
    - extensions: add NPT extension
    - extensions: libxt_statistic: Fix save output
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.16.2-7
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Wed Jan 16 2013 Ville Skyttä <ville.skytta@iki.fi> - 1.4.16.2-6
  - Own unowned -services libexec dirs (#894464, Michael Scherer).
  - Fix -services unit file permissions (#732936, Michal Schmidt).
* Thu Nov 08 2012 Thomas Woerner <twoerner@redhat.com> 1.4.16.2-5
  - fixed path of ip6tables.init in ip6tables.service
* Fri Nov 02 2012 Thomas Woerner <twoerner@redhat.com> 1.4.16.2-4
  - fixed missing services for update of pre F-18 installations (rhbz#867960)
    - provide and obsolete old main package in services sub package
    - provide and obsolete old ipv6 sub package (pre F-17) in services sub package
* Sun Oct 14 2012 Dan Horák <dan[at]dany.cz> 1.4.16.2-3
  - fix the compat provides for all 64-bit arches
* Fri Oct 12 2012 Thomas Woerner <twoerner@redhat.com> 1.4.16.2-2
  - new sub package services providing the systemd services (RHBZ#862922)
  - new sub package utils: provides nfnl_osf and the pf.os database
  - using %{_libexecdir}/iptables as script path for the original init scripts
  - added service iptables save funcitonality using the new way provided by 
    initscripts 9.37.1 (RHBZ#748134)
  - added virtual provide for libxtables.so.7
* Mon Oct 08 2012 Thomas Woerner <twoerner@redhat.com> 1.4.16.2-1
  - new version 1.4.16.2
    - build: support for automake-1.12
    - build: separate AC variable replacements from xtables.h
    - build: have `make clean` remove dep files too
    - doc: grammatical updates to libxt_SET
    - doc: clean up interpunction in state list for xt_conntrack
    - doc: deduplicate extension descriptions into a new manpage
    - doc: trim "state" manpage and reference conntrack instead
    - doc: have NOTRACK manpage point to CT instead
    - doc: mention iptables-apply in the SEE ALSO sections
    - extensions: libxt_addrtype: fix type in help message
    - include: add missing linux/netfilter_ipv4/ip_queue.h
    - iptables: fix wrong error messages
    - iptables: support for match aliases
    - iptables: support for target aliases
    - iptables-restore: warn about -t in rule lines
    - ip[6]tables-restore: cleanup to reduce one level of indentation
    - libip6t_frag: match any frag id by default
    - libxtables: consolidate preference logic
    - libxt_devgroup: consolidate devgroup specification parsing
    - libxt_devgroup: guard against negative numbers
    - libxt_LED: guard against negative numbers
    - libxt_NOTRACK: replace as an alias to CT --notrack
    - libxt_state: replace as an alias to xt_conntrack
    - libxt_tcp: print space before, not after "flags:"
    - libxt_u32: do bounds checking for @'s operands
    - libxt_*limit: avoid division by zero
    - Merge branch 'master' of git://git.inai.de/iptables
    - Merge remote-tracking branch 'nf/stable'
    - New set match revision with --return-nomatch flag support
  - dropped fixrestore patch, upstream
* Wed Aug 01 2012 Thomas Woerner <twoerner@redhat.com> 1.4.15-1
  - new version 1.4.15
    - extensions: add HMARK target
    - iptables-restore: fix parameter parsing (shows up with gcc-4.7)
    - iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)
    - libxtables: add xtables_ip[6]mask_to_cidr
    - libxt_devgroup: add man page snippet
    - libxt_hashlimit: add support for byte-based operation
    - libxt_recent: add --mask netmask
    - libxt_recent: remove unused variable
    - libxt_HMARK: correct a number of errors introduced by Pablo's rework
    - libxt_HMARK: fix ct case example
    - libxt_HMARK: fix output of iptables -L
    - Revert "iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)"
* Wed Jul 18 2012 Thomas Woerner <twoerner@redhat.com> 1.4.14-3
  - added fixrestore patch submitted to upstream by fryasu (nfbz#774) 
    (RHBZ#825796)
* Wed Jul 18 2012 Thomas Woerner <twoerner@redhat.com> 1.4.14-2
  - disabled libipq, removed upstream, not provided by kernel anymore
* Wed Jul 18 2012 Thomas Woerner <twoerner@redhat.com> 1.4.14-1
  - new version 1.4.14
    - extensions: add IPv6 capable ECN match extension
    - extensions: add nfacct match
    - extensions: add rpfilter module
    - extensions: libxt_rateest: output all options in save hook
    - iptables: missing free() in function cache_add_entry()
    - iptables: missing free() in function delete_entry()
    - libiptc: fix retry path in TC_INIT
    - libiptc: Returns the position the entry was inserted
    - libipt_ULOG: fix --ulog-cprange
    - libxt_CT: add --timeout option
    - ip(6)tables-restore: make sure argv is NULL terminated
    - Revert "libiptc: Returns the position the entry was inserted"
    - src: mark newly opened fds as FD_CLOEXEC (close on exec)
    - tests: add rateest match rules
  - dropped patch5 (cloexec), merged upstream
* Mon Apr 23 2012 Thomas Woerner <twoerner@redhat.com> 1.4.12.2-5
  - reenable iptables default services
* Wed Feb 29 2012 Harald Hoyer <harald@redhat.com> 1.4.12.2-4
  - install everything in /usr
    https://fedoraproject.org/wiki/Features/UsrMove
* Thu Feb 16 2012 Thomas Woerner <twoerner@redhat.com> 1.4.12.2-3
  - fixed auto enable check for Fedora > 16 and added rhel > 6 check
* Wed Feb 15 2012 Thomas Woerner <twoerner@redhat.com> 1.4.12.2-2
  - disabled autostart and auto enable for iptables.service and ip6tables.service
    for Fedora > 16
* Mon Jan 16 2012 Thomas Woerner <twoerner@redhat.com> 1.4.12.2-1
  - new version 1.4.12.2 with new pkgconfig/libip4tc.pc and pkgconfig/libip6tc.pc
    - build: make check stage not fail when building statically
    - build: restore build order of modules
    - build: scan for unreferenced symbols
    - build: sort file list before build
    - doc: clarification on the meaning of -p 0
    - doc: document iptables-restore's -T option
    - doc: fix undesired newline in ip6tables-restore(8)
    - ip6tables-restore: implement missing -T option
    - iptables: move kernel version find routing into libxtables
    - libiptc: provide separate pkgconfig files
    - libipt_SAME: set PROTO_RANDOM on all ranges
    - libxtables: Fix file descriptor leak in xtables_lmap_init on error
    - libxt_connbytes: fix handling of --connbytes FROM
    - libxt_CONNSECMARK: fix spacing in output
    - libxt_conntrack: improve error message on parsing violation
    - libxt_NFQUEUE: fix --queue-bypass ipt-save output
    - libxt_RATEEST: link with -lm
    - libxt_statistic: link with -lm
    - Merge branch 'stable'
    - Merge branch 'stable' of git://dev.medozas.de/iptables
    - nfnl_osf: add missing libnfnetlink_CFLAGS to compile process
    - xtoptions: fill in fallback value for nvals
    - xtoptions: simplify xtables_parse_interface
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.12.1-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Mon Dec 12 2011 Thomas Woerner <twoerner@redhat.com> 1.4.12.1-1
  - new version 1.4.12.1 with new pkgconfig/libipq.pc
    - build: abort autogen on subcommand failure
    - build: strengthen check for overlong lladdr components
    - build: workaround broken linux-headers on RHEL-5
    - doc: clarify libxt_connlimit defaults
    - doc: fix typo in libxt_TRACE
    - extensions: use multi-target registration
    - libip6t_dst: restore setting IP6T_OPTS_LEN flag
    - libip6t_frag: restore inversion support
    - libip6t_hbh: restore setting IP6T_OPTS_LEN flag
    - libipq: add pkgconfig file
    - libipt_ttl: document that negation is available
    - libxt_conntrack: fix --ctproto 0 output
    - libxt_conntrack: remove one misleading comment
    - libxt_dccp: fix deprecated intrapositional ordering of !
    - libxt_dccp: fix random output of ! on --dccp-option
    - libxt_dccp: provide man pages options in short help too
    - libxt_dccp: restore missing XTOPT_INVERT tags for options
    - libxt_dccp: spell out option name on save
    - libxt_dscp: restore inversion support
    - libxt_hashlimit: default htable-expire must be in milliseconds
    - libxt_hashlimit: observe new default gc-expire time when saving
    - libxt_hashlimit: remove inversion from hashlimit rev 0
    - libxt_owner: restore inversion support
    - libxt_physdev: restore inversion support
    - libxt_policy: remove superfluous inversion
    - libxt_set: put differing variable names in directly
    - libxt_set: update man page about kernel support on the feature
    - libxt_string: define _GNU_SOURCE for strnlen
    - libxt_string: escape the escaping char too
    - libxt_string: fix space around arguments
    - libxt_string: replace hex codes by char equivalents
    - libxt_string: simplify hex output routine
    - libxt_tcp: always print the mask parts
    - libxt_TCPMSS: restore build with IPv6-less libcs
    - libxt_TOS: update linux kernel version list for backported fix
    - libxt_u32: fix missing allowance for inversion
    - src: remove unused IPTABLES_MULTI define
    - tests: add negation tests for libxt_statistic
    - xtoptions: flag use of XTOPT_POINTER without XTOPT_PUT
  - removed include/linux/types.h before build to be able to compile
* Tue Jul 26 2011 Thomas Woerner <twoerner@redhat.com> 1.4.12-2
  - dropped temporary provide again
* Tue Jul 26 2011 Thomas Woerner <twoerner@redhat.com> 1.4.12-1.1
  - added temporary provides for libxtables.so.6 to be able to rebuild iproute,
    which is part of the standard build environment
* Mon Jul 25 2011 Thomas Woerner <twoerner@redhat.com> 1.4.12-1
  - new version 1.4.12 with support of all new features of kernel 3.0
    - build: attempt to fix building under Linux 2.4
    - build: bump soversion for recent data structure change
    - build: install modules in arch-dependent location
    - doc: fix group range in libxt_NFLOG's man
    - doc: fix version string in ip6tables.8
    - doc: include matches/targets in manpage again
    - doc: mention multiple verbosity flags
    - doc: the -m option cannot be inverted
    - extensions: support for per-extension instance global variable space
    - iptables-apply: select default rule file depending on call name
    - iptables: consolidate target/match init call
    - iptables: Coverity: DEADCODE
    - iptables: Coverity: NEGATIVE_RETURNS
    - iptables: Coverity: RESOURCE_LEAK
    - iptables: Coverity: REVERSE_INULL
    - iptables: Coverity: VARARGS
    - iptables: restore negation for -f
    - libip6t_HL: fix option names from ttl -> hl
    - libipt_LOG: fix ignoring all but last flags
    - libxtables: ignore whitespace in the multiaddress argument parser
    - libxtables: properly reject empty hostnames
    - libxtables: set clone's initial data to NULL
    - libxt_conntrack: move more data into the xt_option_entry
    - libxt_conntrack: restore network-byte order for v1,v2
    - libxt_hashlimit: use a more obvious expiry value by default
    - libxt_rateest: abolish global variables
    - libxt_RATEEST: abolish global variables
    - libxt_RATEEST: fix userspacesize field
    - libxt_RATEEST: use guided option parser
    - libxt_state: fix regression about inversion of main option
    - option: remove last traces of intrapositional negation
  - complete changelog:
    http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.12.txt
* Thu Jul 21 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11.1-4
  - merged ipv6 sub package into main package
  - renamed init scripts to /usr/libexec/ip*tables.init
* Fri Jul 15 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11.1-3
  - added support for native systemd file (rhbz#694738)
    - new iptables.service file
    - additional requires
    - moved sysv init scripts to /usr/libexec
    - added new post, preun and postun scripts and triggers
* Tue Jul 12 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11.1-2
  - dropped temporary provide again
  - enabled smp build
* Tue Jul 12 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11.1-1.1
  -  added temporary provides for libxtables.so.5 to be able to rebuild iproute,
     which is part of the standard build environment
* Mon Jul 11 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11.1-1
  - new version 1.4.11.1, bug and doc fix release for 1.4.11
* Tue Jun 07 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11-1
  - new version 1.4.11 with all new features of 2.6.37-39 (not usable)
    - lots of changes and bugfixes for base and extensions
    - complete changelog:
      http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.11.txt
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.10-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Mon Jan 10 2011 Thomas Woerner <twoerner@redhat.com> 1.4.10-1
  - new version 1.4.10 with all new features of 2.6.36
    - all: consistent syntax use in struct option
    - build: fix static linking
    - doc: let man(1) autoalign the text in xt_cpu
    - doc: remove extra empty line from xt_cpu
    - doc: minimal spelling updates to xt_cpu
    - doc: consistent use of markup
    - extensions: libxt_quota: don't ignore the quota value on deletion
    - extensions: REDIRECT: add random help
    - extensions: add xt_cpu match
    - extensions: add idletimer xt target extension
    - extensions: libxt_IDLETIMER: use xtables_param_act when checking options
    - extensions: libxt_CHECKSUM extension
    - extensions: libipt_LOG/libip6t_LOG: support macdecode option
    - extensions: fix compilation of the new CHECKSUM target
    - extensions: libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
    - iptables-xml: resolve compiler warnings
    - iptables: limit chain name length to be consistent with targets
    - libiptc: add Libs.private to pkgconfig files
    - libiptc: build with -Wl,--no-as-needed
    - xtables: remove unnecessary cast
  - dropped xt_CHECKSUM, added upstream
* Tue Oct 12 2010 Thomas Woerner <twoerner@redhat.com> 1.4.9-2
  - added xt_CHECKSUM patch from Michael S. Tsirkin (rhbz#612587)
* Wed Aug 04 2010 Thomas Woerner <twoerner@redhat.com> 1.4.9-1
  - new version 1.4.9 with all new features of 2.6.35
    - doc: xt_hashlimit: fix a typo
    - doc: xt_LED: nroff formatting requirements
    - doc: xt_string: correct copy-and-pasting in manpage
    - extensions: add the LED target
    - extensions: libxt_quota.c: Support option negation
    - extensions: libxt_rateest: fix bps options for iptables-save
    - extensions: libxt_rateest: fix typo in the man page
    - extensions: REDIRECT: add random help
    - includes: sync header files from Linux 2.6.35-rc1
    - libxt_conntrack: do print netmask
    - libxt_hashlimit: always print burst value
    - libxt_set: new revision added
    - utils: add missing include flags to Makefile
    - xtables: another try at chain name length checking
    - xtables: remove xtables_set_revision function
    - xt_quota: also document negation
    - xt_sctp: Trace DATA chunk that supports SACK-IMMEDIATELY extension
    - xt_sctp: support FORWARD_TSN chunk type
* Fri Jul 02 2010 Thomas Woerner <twoerner@redhat.com> 1.4.8-1
  - new version 1.4.8 all new features of 2.6.34 (rhbz#)
    - extensions: REDIRECT: fix --to-ports parser
    - iptables: add noreturn attribute to exit_tryhelp()
    - extensions: MASQUERADE: fix --to-ports parser
    - libxt_comment: avoid use of IPv4-specific examples
    - libxt_CT: add a manpage
    - iptables: correctly check for too-long chain/target/match names
    - doc: libxt_MARK: no longer restricted to mangle table
    - doc: remove claim that TCPMSS is limited to mangle
    - libxt_recent: add a missing space in output
    - doc: add manpage for libxt_osf
    - libxt_osf: import nfnl_osf program
    - extensions: add support for xt_TEE
    - CT: fix --ctevents parsing
    - extensions: add CT extension
    - libxt_CT: print conntrack zone in ->print/->save
    - xtables: fix compilation when debugging is enabled
    - libxt_conntrack: document --ctstate UNTRACKED
    - iprange: fix xt_iprange v0 parsing
* Wed Mar 24 2010 Thomas Woerner <twoerner@redhat.com> 1.4.7-2
  - added default values for IPTABLES_STATUS_VERBOSE and
    IPTABLES_STATUS_LINENUMBERS in init script
  - added missing lsb keywords Required-Start and Required-Stop to init script
* Fri Mar 05 2010 Thomas Woerner <twoerner@redhat.com> 1.4.7-1
  - new version 1.4.7 with support for all new features of 2.6.33 (rhbz#570767)
    - libip4tc: Add static qualifier to dump_entry()
    - libipq: build as shared library
    - recent: reorder cases in code (cosmetic cleanup)
    - several man page and documentation fixes
    - policy: fix error message showing wrong option
    - includes: header updates
    - Lift restrictions on interface names
  - fixed license and moved iptables-xml into base package according to review
* Wed Jan 27 2010 Thomas Woerner <twoerner@redhat.com> 1.4.6-2
  - moved libip*tc and libxtables libs to /lib[64], added symlinks for .so libs
    to /usr/lib[64] for compatibility (rhbz#558796)
* Wed Jan 13 2010 Thomas Woerner <twoerner@redhat.com> 1.4.6-1
  - new version 1.4.6 with support for all new features of 2.6.32
    - several man page fixes
    - Support for nommu arches
    - realm: remove static initializations
    - libiptc: remove unused functions
    - libiptc: avoid strict-aliasing warnings
    - iprange: do accept non-ranges for xt_iprange v1
    - iprange: warn on reverse range
    - iprange: roll address parsing into a loop
    - iprange: do accept non-ranges for xt_iprange v1 (log)
    - iprange: warn on reverse range (log)
    - libiptc: fix wrong maptype of base chain counters on restore
    - iptables: fix undersized deletion mask creation
    - style: reduce indent in xtables_check_inverse
    - libxtables: hand argv to xtables_check_inverse
    - iptables/extensions: make bundled options work again
    - CONNMARK: print mark rules with mask 0xffffffff as set instead of xset
    - iptables: take masks into consideration for replace command
    - doc: explain experienced --hitcount limit
    - doc: name resolution clarification
    - iptables: expose option to zero packet/byte counters for a specific rule
    - build: restore --disable-ipv6 functionality on system w/o v6 headers
    - MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark
    - DNAT: fix incorrect check during parsing
    - extensions: add osf extension
    - conntrack: fix --expires parsing
* Thu Dec 17 2009 Thomas Woerner <twoerner@redhat.com> 1.4.5-2
  - dropped nf_ext_init remains from cloexec patch
* Thu Sep 17 2009 Thomas Woerner <twoerner@redhat.com> 1.4.5-1
  - new version 1.4.5 with support for all new features of 2.6.31
    - libxt_NFQUEUE: add new v1 version with queue-balance option
    - xt_conntrack: revision 2 for enlarged state_mask member
    - libxt_helper: fix invalid passed option to check_inverse
    - libiptc: split v4 and v6
    - extensions: collapse registration structures
    - iptables: allow for parse-less extensions
    - iptables: allow for help-less extensions
    - extensions: remove empty help and parse functions
    - xtables: add multi-registration functions
    - extensions: collapse data variables to use multi-reg calls
    - xtables: warn of missing version identifier in extensions
    - multi binary: allow subcommand via argv[1]
    - iptables: accept multiple IP address specifications for -s, -d
    - several build fixes
    - several man page fixes
  - fixed two leaked file descriptors on sockets (rhbz#521397)
* Mon Aug 24 2009 Thomas Woerner <twoerner@redhat.com> 1.4.4-1
  - new version 1.4.4 with support for all new features of 2.6.30
    - several man page fixes
    - iptables: replace open-coded sizeof by ARRAY_SIZE
    - libip6t_policy: remove redundant functions
    - policy: use direct xt_policy_info instead of ipt/ip6t
    - policy: merge ipv6 and ipv4 variant
    - extensions: add `cluster' match support
    - extensions: add const qualifiers in print/save functions
    - extensions: use NFPROTO_UNSPEC for .family field
    - extensions: remove redundant casts
    - iptables: close open file descriptors
    - fix segfault if incorrect protocol name is used
    - replace open-coded sizeof by ARRAY_SIZE
    - do not include v4-only modules in ip6tables manpage
    - use direct xt_policy_info instead of ipt/ip6t
    - xtables: fix segfault if incorrect protocol name is used
    - libxt_connlimit: initialize v6_mask
    - SNAT/DNAT: add support for persistent multi-range NAT mappings
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.3.2-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Wed Apr 15 2009 Thomas Woerner <twoerner@redhat.com> 1.4.3.2-1
  - new version 1.4.3.2
  - also install iptables/internal.h, needed for iptables.h and ip6tables.h
* Mon Mar 30 2009 Thomas Woerner <twoerner@redhat.com> 1.4.3.1-1
  - new version 1.4.3.1
    - libiptc is now shared
    - supports all new features of the 2.6.29 kernel
  - dropped typo_latter patch
* Thu Mar 05 2009 Thomas Woerner <twoerner@redhat.com> 1.4.2-3
  - still more review fixes (rhbz#225906)
    - consistent macro usage
    - use sed instead of perl for rpath removal
    - use standard RPM CFLAGS, but also -fno-strict-aliasing (needed for libiptc*)
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.2-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Fri Feb 20 2009 Thomas Woerner <twoerner@redhat.com> 1.4.2-1
  - new version 1.4.2
  - removed TOS value mask patch (upstream)
  - more review fixes (rhbz#225906)
  - install all header files (rhbz#462207)
  - dropped nf_ext_init (rhbz#472548)
* Tue Jul 22 2008 Thomas Woerner <twoerner@redhat.com> 1.4.1.1-2
  - fixed TOS value mask problem (rhbz#456244) (upstream patch)
  - two more cloexec fixes
* Tue Jul 01 2008 Thomas Woerner <twoerner@redhat.com> 1.4.1.1-1
  - upstream bug fix release 1.4.1.1
  - dropped extra patch for 1.4.1 - not needed anymore
* Tue Jun 10 2008 Thomas Woerner <twoerner@redhat.com> 1.4.1-1
  - new version 1.4.1 with new build environment
  - additional ipv6 network mask patch from Jan Engelhardt
  - spec file cleanup
  - removed old patches
* Fri Jun 06 2008 Tom "spot" Callaway <tcallawa@redhat.com> 1.4.0-5
  - use normal kernel headers, not linux/compiler.h
  - change BuildRequires: kernel-devel to kernel-headers
  - We need to do this to be able to build for both sparcv9 and sparc64 
    (there is no kernel-devel.sparcv9)
* Thu Mar 20 2008 Thomas Woerner <twoerner@redhat.com> 1.4.0-4
  - use O_CLOEXEC for all opened files in all applications (rhbz#438189)
* Mon Mar 03 2008 Thomas Woerner <twoerner@redhat.com> 1.4.0-3
  - use the kernel headers from the build tree for iptables for now to be able to 
    compile this package, but this makes the package more kernel dependant
  - use s6_addr32 instead of in6_u.u6_addr32
* Wed Feb 20 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.4.0-2
  - Autorebuild for GCC 4.3
* Mon Feb 11 2008 Thomas Woerner <twoerner@redhat.com> 1.4.0-1
  - new version 1.4.0
  - fixed condrestart (rhbz#428148)
  - report the module in rmmod_r if there is an error
  - use nf_ext_init instead of my_init for extension constructors
* Mon Nov 05 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-6
  - fixed leaked file descriptor before fork/exec (rhbz#312191)
  - blacklisting is not working, use "install X /bin/(true|false)" test instead
  - return private exit code 150 for disabled ipv6 support
  - use script name for output messages
* Tue Oct 16 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-5
  - fixed error code for stopping a already stopped firewall (rhbz#321751)
  - moved blacklist test into start
* Wed Sep 26 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-4.1
  - do not start ip6tables if ipv6 is blacklisted (rhbz#236888)
  - use simpler fix for (rhbz#295611)
    Thanks to Linus Torvalds for the patch.
* Mon Sep 24 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-4
  - fixed IPv6 reject type (rhbz#295181)
  - fixed init script: start, stop and status
  - support netfilter compiled into kernel in init script (rhbz#295611)
  - dropped inversion for limit modules from man pages (rhbz#220780)
  - fixed typo in ip6tables man page (rhbz#236185)
* Wed Sep 19 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-3
  - do not depend on local_fs in lsb header - this delayes start after network
  - fixed exit code for initscript usage
* Mon Sep 17 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-2.1
  - do not use lock file for condrestart test
* Thu Aug 23 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-2
  - fixed initscript for LSB conformance (rhbz#246953, rhbz#242459)
  - provide iptc interface again, but unsupported (rhbz#216733)
  - compile all extension, which are supported by the kernel-headers package
  - review fixes (rhbz#225906)
* Tue Jul 31 2007 Thomas Woerner <twoerner@redhat.com>
  - reverted ipv6 fix, because it disables the ipv6 at all (rhbz#236888)
* Fri Jul 13 2007 Steve Conklin <sconklin@redhat.com> - 1.3.8-1
  - New version 1.3.8
* Mon Apr 23 2007 Jeremy Katz <katzj@redhat.com> - 1.3.7-2
  - fix error when ipv6 support isn't loaded in the kernel (#236888)
* Wed Jan 10 2007 Thomas Woerner <twoerner@redhat.com> 1.3.7-1.1
  - fixed installation of secmark modules
* Tue Jan 09 2007 Thomas Woerner <twoerner@redhat.com> 1.3.7-1
  - new verison 1.3.7
  - iptc is not a public interface and therefore not installed anymore
  - dropped upstream secmark patch
* Tue Sep 19 2006 Thomas Woerner <twoerner@redhat.com> 1.3.5-2
  - added secmark iptables patches (#201573)
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.2.1
  - rebuild
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.2
  - bump again for double-long bug on ppc(64)
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.1
  - rebuilt for new gcc4.1 snapshot and glibc changes
* Thu Feb 02 2006 Thomas Woerner <twoerner@redhat.com> 1.3.5-1
  - new version 1.3.5
  - fixed init script to set policy for raw tables, too (#179094)
* Tue Jan 24 2006 Thomas Woerner <twoerner@redhat.com> 1.3.4-3
  - added important iptables header files to devel package
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
  - rebuilt
* Fri Nov 25 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-2
  - fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
    replace "_init" with "__attribute((constructor)) my_init"
* Fri Nov 25 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-1.1
  - rebuild due to unresolved symbols in shared libraries
* Fri Nov 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-1
  - new version 1.3.4
  - dropped free_opts patch (upstream fixed)
  - made libipq PIC (#158623)
  - additional configuration options for iptables startup script (#172929)
    Thanks to Jan Gruenwald for the patch
  - spec file cleanup (dropped linux_header define and usage)
* Mon Jul 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.2-1
  - new version 1.3.2 with additional patch for the misplaced free_opts call
    from Marcus Sundberg
* Wed May 11 2005 Thomas Woerner <twoerner@redhat.com> 1.3.1-1
  - new version 1.3.1
* Fri Mar 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-2
  - Remove unnecessary explicit kernel dep (#146142)
  - Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
    for the patch
  - Adapted iptables-config to reference to modprobe.conf (#150143)
  - Remove misleading message (#140154): Thanks to Ulrich Drepper
    for the patch
* Mon Feb 21 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-1
  - new version 1.3.0
* Thu Nov 11 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3.2
  - fixed autoload problem in iptables and ip6tables (CAN-2004-0986)
* Fri Sep 17 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1
  - changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
  - modified config file to match this change and un-commented variables with
    default values
* Thu Sep 16 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3
  - applied second part of cleanup patch from (#131848): thanks to Steve Grubb
    for the patch
* Wed Aug 25 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-2
  - fixed free bug in iptables (#128322)
* Tue Jun 22 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-1
  - new version 1.2.11
* Thu Jun 17 2004 Thomas Woerner <twoerner@redhat.com> 1.2.10-1
  - new version 1.2.10
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
  - rebuilt
* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
  - rebuilt
* Thu Feb 26 2004 Thomas Woerner <twoerner@redhat.com> 1.2.9-2.3
  - fixed iptables-restore -c fault if there are no counters (#116421)
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
  - rebuilt
* Sun Jan 25 2004 Dan Walsh <dwalsh@redhat.com> 1.2.9-1.2
  - Close File descriptors to prevent SELinux error message
* Wed Jan 07 2004 Thomas Woerner <twoerner@redhat.com> 1.2.9-1.1
  - rebuild
* Wed Dec 17 2003 Thomas Woerner <twoerner@redhat.com> 1.2.9-1
  - vew version 1.2.9
  - new config options in ipXtables-config:
    IPTABLES_MODULES_UNLOAD
  - more documentation in ipXtables-config
  - fix for netlink security issue in libipq (devel package)
  - print fix for libipt_icmp (#109546)
* Thu Oct 23 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-13
  - marked all messages in iptables init script for translation (#107462)
  - enabled devel package (#105884, #106101)
  - bumped build for fedora for libipt_recent.so (#106002)
* Tue Sep 23 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1
  - fixed lost udp port range in ip6tables-save (#104484)
  - fixed non numeric multiport port output in ipXtables-savs
* Mon Sep 22 2003 Florian La Roche <Florian.LaRoche@redhat.de> 1.2.8-11
  - do not link against -lnsl
* Wed Sep 17 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-10
  - made variables in rmmod_r local
* Tue Jul 22 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-9
  - fixed permission for init script
* Sat Jul 19 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-8
  - fixed save when iptables file is missing and iptables-config permissions
* Tue Jul 08 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-7
  - fixes for ip6tables: module unloading, setting policy only for existing 
    tables
* Thu Jul 03 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-6
  - IPTABLES_SAVE_COUNTER defaults to no, now
  - install config file in /etc/sysconfig
  - exchange unload of ip_tables and ip_conntrack
  - fixed start function
* Wed Jul 02 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-5
  - new config option IPTABLES_SAVE_ON_RESTART
  - init script: new status, save and restart
  - fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374
* Mon Jun 30 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-4
  - new config option IPTABLES_STATUS_NUMERIC
  - cleared IPTABLES_MODULES in iptables-config
* Mon Jun 30 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-3
  - new init scripts
* Sat Jun 28 2003 Florian La Roche <Florian.LaRoche@redhat.de>
  - remove check for very old kernel versions in init scripts
  - sync up both init scripts and remove some further ugly things
  - add some docu into rpm
* Thu Jun 26 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-2
  - rebuild
* Mon Jun 16 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-1
  - update to 1.2.8
* Wed Jan 22 2003 Tim Powers <timp@redhat.com>
  - rebuilt
* Mon Jan 13 2003 Bill Nottingham <notting@redhat.com> 1.2.7a-1
  - update to 1.2.7a
  - add a plethora of bugfixes courtesy Michael Schwendt <mschewndt@yahoo.com>
* Fri Dec 13 2002 Elliot Lee <sopwith@redhat.com> 1.2.6a-3
  - Fix multilib
* Wed Aug 07 2002 Karsten Hopp <karsten@redhat.de>
  - fixed iptables and ip6tables initscript output, based on #70511
  - check return status of all iptables calls, not just the last one
    in a 'for' loop.
* Mon Jul 29 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.6a-1
  - 1.2.6a (bugfix release, #69747)
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
  - automated rebuild
* Thu May 23 2002 Tim Powers <timp@redhat.com>
  - automated rebuild
* Mon Mar 04 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-3
  - Add some fixes from CVS, fixing bug #60465
* Tue Feb 12 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2
  - Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
    - Update URL (#59354)
  - Use /sbin/chkconfig rather than chkconfig in %postun script
* Fri Jan 11 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-1
  - 1.2.5
* Wed Jan 09 2002 Tim Powers <timp@redhat.com>
  - automated rebuild
* Mon Nov 05 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-2
  - Fix %preun script
* Tue Oct 30 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1
  - Update to 1.2.4 (various fixes, including security fixes; among others:
    - Fix init script (#31133)
* Mon Sep 03 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-1
  - 1.2.3 (5 security fixes, some other fixes)
  - Fix updating (#53032)
* Mon Aug 27 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-4
  - Fix #50990
  - Add some fixes from current CVS; should fix #52620
* Mon Jul 16 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-3
  - Add some fixes from the current CVS tree; fixes #49154 and some IPv6
    issues
* Tue Jun 26 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-2
  - Fix iptables-save reject-with (#45632), Patch from Michael Schwendt
    <mschwendt@yahoo.com>
* Tue May 08 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-1
  - 1.2.2
* Wed Mar 21 2001 Bernhard Rosenkraenzer <bero@redhat.com>
  - 1.2.1a, fixes #28412, #31136, #31460, #31133
* Thu Mar 01 2001 Bernhard Rosenkraenzer <bero@redhat.com>
  - Yet another initscript fix (#30173)
  - Fix the fixes; they fixed some issues but broke more important
    stuff :/ (#30176)
* Tue Feb 27 2001 Bernhard Rosenkraenzer <bero@redhat.com>
  - Fix up initscript (#27962)
  - Add fixes from CVS to iptables-{restore,save}, fixing #28412
* Fri Feb 09 2001 Karsten Hopp <karsten@redhat.de>
  - create /etc/sysconfig/iptables mode 600 (same problem as #24245)
* Mon Feb 05 2001 Karsten Hopp <karsten@redhat.de>
  - fix bugzilla #25986 (initscript not marked as config file)
  - fix bugzilla #25962 (iptables-restore)
  - mv chkconfig --del from postun to preun
* Thu Feb 01 2001 Trond Eivind Glomsrød <teg@redhat.com>
  - Fix check for ipchains
* Mon Jan 29 2001 Bernhard Rosenkraenzer <bero@redhat.com>
  - Some fixes to init scripts
* Wed Jan 24 2001 Bernhard Rosenkraenzer <bero@redhat.com>
  - Add some fixes from CVS, fixes among other things Bug #24732
* Wed Jan 17 2001 Bernhard Rosenkraenzer <bero@redhat.com>
  - Add missing man pages, fix up init script (Bug #17676)
* Mon Jan 15 2001 Bill Nottingham <notting@redhat.com>
  - add init script
* Mon Jan 15 2001 Bernhard Rosenkraenzer <bero@redhat.com>
  - 1.2
  - fix up ipv6 split
  - add init script
  - Move the plugins from /usr/lib/iptables to /lib/iptables.
    This needs to work before /usr is mounted...
  - Use -O1 on alpha (compiler bug)
* Sat Jan 06 2001 Bernhard Rosenkraenzer <bero@redhat.com>
  - 1.1.2
  - Add IPv6 support (in separate package)
* Thu Aug 17 2000 Bill Nottingham <notting@redhat.com>
  - build everywhere
* Tue Jul 25 2000 Bernhard Rosenkraenzer <bero@redhat.com>
  - 1.1.1
* Thu Jul 13 2000 Prospector <bugzilla@redhat.com>
  - automatic rebuild
* Tue Jun 27 2000 Preston Brown <pbrown@redhat.com>
  - move iptables to /sbin.
  - excludearch alpha for now, not building there because of compiler bug(?)
* Fri Jun 09 2000 Bill Nottingham <notting@redhat.com>
  - don't obsolete ipchains either
  - update to 1.1.0
* Sun Jun 04 2000 Bill Nottingham <notting@redhat.com>
  - remove explicit kernel requirement
* Tue May 02 2000 Bernhard Rosenkränzer <bero@redhat.com>
  - initial package

Files

/etc/ethertypes
/etc/sysconfig/ip6tables-config
/etc/sysconfig/iptables-config
/usr/lib/.build-id
/usr/lib/.build-id/00
/usr/lib/.build-id/00/b28e2642eb0f1e0e92920b54d71ad633277466
/usr/lib/.build-id/03
/usr/lib/.build-id/03/29531dbc3f2b68992671a1be75816b41e3f09b
/usr/lib/.build-id/03/3d0dccb9fbf4c575011a15534cc37139527928
/usr/lib/.build-id/08
/usr/lib/.build-id/08/45c6cc20ce67fb3c90a89b4049f7d90b727a82
/usr/lib/.build-id/08/bdf63771aa3d532446fb7e224598e9740283f8
/usr/lib/.build-id/09
/usr/lib/.build-id/09/8897bc407522397c8f071c32a0a3a975250597
/usr/lib/.build-id/0f
/usr/lib/.build-id/0f/b426ed6a35229198bffcce081e8e25abcb9bd0
/usr/lib/.build-id/13
/usr/lib/.build-id/13/0f3e9b3963947ec35a0b470bb8683ab2de4cb4
/usr/lib/.build-id/14
/usr/lib/.build-id/14/042c02bd50bd91e06e86bab3d6b3270c677d4b
/usr/lib/.build-id/15
/usr/lib/.build-id/15/10b52ad3c2a958f1e5d3e91c5e4758457d98ba
/usr/lib/.build-id/18
/usr/lib/.build-id/18/d0f101c2b3430b72fa1a55e59f8a877df38f5a
/usr/lib/.build-id/1a
/usr/lib/.build-id/1a/899340514c72037a69395ff1c6e024861a2455
/usr/lib/.build-id/22
/usr/lib/.build-id/22/cbdcb7b74fd71e9601b5d1d16a46807b02192f
/usr/lib/.build-id/23
/usr/lib/.build-id/23/01ead401e5ba120d1b16f7b3b0e1541916b7be
/usr/lib/.build-id/24
/usr/lib/.build-id/24/0f75f85ebc048c19955637f9eed99d33ecba62
/usr/lib/.build-id/24/b9eb47349ba1173fd8fb3e32b3a76f51a9d416
/usr/lib/.build-id/28
/usr/lib/.build-id/28/1c6b6b3580c247e2edc4fc59f72383a460bc61
/usr/lib/.build-id/29
/usr/lib/.build-id/29/c4be96f782e03c7eaee79f719a580ae12980cc
/usr/lib/.build-id/2b
/usr/lib/.build-id/2b/0ee06c85f7f080b1a821685e77bb7849b4c52c
/usr/lib/.build-id/2b/3efe446d4f7b2d27ffc15faeeb761189a30ca9
/usr/lib/.build-id/35
/usr/lib/.build-id/35/db67ae9539f99fedc13e30c32633e476edaffc
/usr/lib/.build-id/36
/usr/lib/.build-id/36/159e9ae75ce79d34bf140a8df9681043e13ebc
/usr/lib/.build-id/36/a85f9e0abdcc624ed049f35eb9056ebc405f66
/usr/lib/.build-id/37
/usr/lib/.build-id/37/a3da119c97394e82d554088a1bb0422370aea0
/usr/lib/.build-id/3d
/usr/lib/.build-id/3d/64df5c2338e652064a26c219b3e0ee34a51509
/usr/lib/.build-id/3e
/usr/lib/.build-id/3e/bd72143271f4bb1cb00fb35778eee47803933a
/usr/lib/.build-id/40
/usr/lib/.build-id/40/7790b68b5172322d2b66385e5313d787428275
/usr/lib/.build-id/40/f7da0eb37c19e365621e4dede6a5c3d54c0a09
/usr/lib/.build-id/44
/usr/lib/.build-id/44/872e48f8dc68c4c3d59f6946768e54b670d88c
/usr/lib/.build-id/44/eab17b8deff501919e751b24d9804808251afc
/usr/lib/.build-id/44/ee7c38dc9bdec02bd808f5398943692b86c583
/usr/lib/.build-id/4a
/usr/lib/.build-id/4a/4bb2a97c9e1bb29a1674ebf7f0a717ab9a3289
/usr/lib/.build-id/4d
/usr/lib/.build-id/4d/71ffb1160568b9a914ccd8f3230b2f8a54a6ca
/usr/lib/.build-id/4f
/usr/lib/.build-id/4f/15bdf5a1664e649f600f28af2e3222d219eea9
/usr/lib/.build-id/50
/usr/lib/.build-id/50/6e265f1eba148afeb063fde6650a6077680805
/usr/lib/.build-id/51
/usr/lib/.build-id/51/e4f41f14b96dbbb411b493e02057f81dfa26b2
/usr/lib/.build-id/54
/usr/lib/.build-id/54/93d05480c16cd669932e9ebf01ba326729b3ca
/usr/lib/.build-id/58
/usr/lib/.build-id/58/0299227fdf03052e25dae3d982d74b6baafc0b
/usr/lib/.build-id/59
/usr/lib/.build-id/59/4650d66222f282fcc3fa6a038bd97dc77f72c5
/usr/lib/.build-id/59/a8ced1b1b4972c92e2932b05276b363edd90ef
/usr/lib/.build-id/5a
/usr/lib/.build-id/5a/39aa973bafaed0282c2df356f7ff91ca3915cd
/usr/lib/.build-id/5a/9e244cef3690d907cb1527ec4cdab9bdb23fac
/usr/lib/.build-id/5e
/usr/lib/.build-id/5e/6d1334cc6331210891b5506332bec2dc551a99
/usr/lib/.build-id/5f
/usr/lib/.build-id/5f/c6bc9d29aed112690f315e9cd1a2ab38687400
/usr/lib/.build-id/60
/usr/lib/.build-id/60/785dd708d0bc352b9deeeee5ac92e1b794c1e6
/usr/lib/.build-id/63
/usr/lib/.build-id/63/0a5ccdf1c8d5f96bc15db80cdd5f1dc2362429
/usr/lib/.build-id/63/95888bbea468556e760ce01ae270bd7e387671
/usr/lib/.build-id/65
/usr/lib/.build-id/65/e1d2a0290e43ad350e9a64280aa40e806f2607
/usr/lib/.build-id/67
/usr/lib/.build-id/67/eb902ce84e05957553413c2ab6ea05c0b7b1d0
/usr/lib/.build-id/68
/usr/lib/.build-id/68/1d095067475b997095bdc33f2667cef012958a
/usr/lib/.build-id/69
/usr/lib/.build-id/69/099461d8487b74c4b690ac5beab6bd22905a20
/usr/lib/.build-id/6c
/usr/lib/.build-id/6c/ae3830e6403792f9e5d2ff337f1f2441df47f1
/usr/lib/.build-id/71
/usr/lib/.build-id/71/b4444fd0b336661ba293ea7757b3f1d57cf2cd
/usr/lib/.build-id/75
/usr/lib/.build-id/75/37e07394e25d3e06c1b006c8c86d3fce849d99
/usr/lib/.build-id/76
/usr/lib/.build-id/76/aa1bc5a220d382ebb3bb90165c4207f0bd4c6f
/usr/lib/.build-id/77
/usr/lib/.build-id/77/0cfd94cb41ee54fe9a72bee2bdc5abec869206
/usr/lib/.build-id/79
/usr/lib/.build-id/79/441434fb492d7d70207e168c085d326208aad8
/usr/lib/.build-id/7d
/usr/lib/.build-id/7d/26bba650cf4b109202d16dda823c4bfefb4cb6
/usr/lib/.build-id/7d/76e2efa4b2178814664023e8197e370fe65786
/usr/lib/.build-id/7e
/usr/lib/.build-id/7e/2117fa215b82a46b630dc726d26986c1227230
/usr/lib/.build-id/80
/usr/lib/.build-id/80/977739eb8d5bffeb2b1decfe05aaed669e59b2
/usr/lib/.build-id/87
/usr/lib/.build-id/87/cdc8ddfb8f95273b5de75ecea9676a4031d06b
/usr/lib/.build-id/89
/usr/lib/.build-id/89/2764c48b9c4160795e87e3381fc9dbff0f404a
/usr/lib/.build-id/8b
/usr/lib/.build-id/8b/1ac42de77dd0ed5aa7b478c1cede4a3ad1b868
/usr/lib/.build-id/8d
/usr/lib/.build-id/8d/dd4a8b58f5d4e06a8b318e3ac7a614e444e839
/usr/lib/.build-id/8f
/usr/lib/.build-id/8f/c708cf5fc023a0ea9b4bf842cf1fd36a675996
/usr/lib/.build-id/93
/usr/lib/.build-id/93/9526ecffabb8176719a1be87cc0fe32ef48517
/usr/lib/.build-id/95
/usr/lib/.build-id/95/e779bc89f2c35be62ec19c311b582e629afb95
/usr/lib/.build-id/99
/usr/lib/.build-id/99/a1b8c1ed5ea5d3ece1d2b91c4816c67302f7b0
/usr/lib/.build-id/9d
/usr/lib/.build-id/9d/6955973d618b85278f2c16ea2f486ebd0049ce
/usr/lib/.build-id/a2
/usr/lib/.build-id/a2/21789935a8379d58e75d3c48f5e0fdb54c80dc
/usr/lib/.build-id/a5
/usr/lib/.build-id/a5/cab684d984c8557b864dbe2ee9fcd18b45895f
/usr/lib/.build-id/a6
/usr/lib/.build-id/a6/fdf6383ce8b368468361c7e9c12981f4a64b05
/usr/lib/.build-id/ae
/usr/lib/.build-id/ae/ab38876ac5f7d09105aa32553c0dac2c608141
/usr/lib/.build-id/b1
/usr/lib/.build-id/b1/7e517f098fad52c4e8b186d972e1a8a66ff0f3
/usr/lib/.build-id/b1/b0abf7e3235c8e339a73839caae7e4c8ab02bc
/usr/lib/.build-id/b3
/usr/lib/.build-id/b3/b9e6c438252e5a323ba14cf347cc20d99d4384
/usr/lib/.build-id/b4
/usr/lib/.build-id/b4/5fdfb7c3ee38a16b26a7d9b086f4bfc85aebbb
/usr/lib/.build-id/b5
/usr/lib/.build-id/b5/084724bb9a963ff10b3ca71da9390efb6c21e6
/usr/lib/.build-id/b6
/usr/lib/.build-id/b6/5e13a8d6e5f40aad9481951904136bd89e77e2
/usr/lib/.build-id/b9
/usr/lib/.build-id/b9/5c9d565c872de5b798729a64c239b1683e278a
/usr/lib/.build-id/ba
/usr/lib/.build-id/ba/dde1e3443ba8228ee8cb8614ed79fc340af237
/usr/lib/.build-id/bb
/usr/lib/.build-id/bb/d2e1246c6b071d5667922cbf7734fa8b6d24a2
/usr/lib/.build-id/bc
/usr/lib/.build-id/bc/fa9e53a9750b0803ae36fcd237e1ea572ee8dc
/usr/lib/.build-id/be
/usr/lib/.build-id/be/c70a71cd425c62652117299ec815167ce25b5e
/usr/lib/.build-id/c1
/usr/lib/.build-id/c1/1829de5a8d5b0ae0a70b765cb32f80ec9d98d3
/usr/lib/.build-id/c2
/usr/lib/.build-id/c2/c13105e5508ae2dfe59a3c92c2f1191d01a60b
/usr/lib/.build-id/c3
/usr/lib/.build-id/c3/9fc856e51492c29f1291015b592cb7b01e73e8
/usr/lib/.build-id/c5
/usr/lib/.build-id/c5/fc41433ce8f093b006c9997bb164123719793b
/usr/lib/.build-id/c8
/usr/lib/.build-id/c8/369959140ea5824d673f47baa721f3c34a3f76
/usr/lib/.build-id/ca
/usr/lib/.build-id/ca/243ea31990fb57c72863032e25e6a063384967
/usr/lib/.build-id/cc
/usr/lib/.build-id/cc/27c401dab15646c6ed4ba8aae97b4202c5728b
/usr/lib/.build-id/ce
/usr/lib/.build-id/ce/01ccce58d97f447ab8806f2a2b8bd816285ac6
/usr/lib/.build-id/ce/ff08864eb4ded14e91ff8dbbb7138c9ef40993
/usr/lib/.build-id/cf
/usr/lib/.build-id/cf/8e73c46f525215cc0f55089b9311cb313936b4
/usr/lib/.build-id/d0
/usr/lib/.build-id/d0/c91bdd9eb6007d4e03cc8b200910cb8a8a6042
/usr/lib/.build-id/d1
/usr/lib/.build-id/d1/6260fe0321a659cf355a02013b4baa2b16b7d5
/usr/lib/.build-id/d1/b323fff40c6c1b2d500513f75adef7a78cf8ce
/usr/lib/.build-id/d4
/usr/lib/.build-id/d4/9d27b5f48ceb0ca876e0dea893a897cfc53ce1
/usr/lib/.build-id/d6
/usr/lib/.build-id/d6/a5bd5a844074b1a2dc6af8c05e446c704247b1
/usr/lib/.build-id/d6/b27ab5ed28cc4834760fe89ae41dec0762c211
/usr/lib/.build-id/d6/cfaf56ef4f7b600b18c42ab60c192dc7255218
/usr/lib/.build-id/d7
/usr/lib/.build-id/d7/f4bf6ad37b22a8f469dda522dae5f538342acb
/usr/lib/.build-id/d8
/usr/lib/.build-id/d8/7bb5515a846e8113a00504d1b9fe1c16bece17
/usr/lib/.build-id/d9
/usr/lib/.build-id/d9/08055c085699b3e73575f14d01d47f43d6c3fa
/usr/lib/.build-id/d9/94f1d27cb54dfa40d32269f011aa96b1fe38db
/usr/lib/.build-id/da
/usr/lib/.build-id/da/8cfdfb614e0b3509c6180597cd331702823701
/usr/lib/.build-id/df
/usr/lib/.build-id/df/9e616ad1a6756fd2da8f7be6ee6b6f01139a8a
/usr/lib/.build-id/e1
/usr/lib/.build-id/e1/c8397b011278bcdfd5dd5411a815160e3ada94
/usr/lib/.build-id/e2
/usr/lib/.build-id/e2/b82f4b08d2f4a8bebab2fa38b78bad9600fc3b
/usr/lib/.build-id/e6
/usr/lib/.build-id/e6/70bd41af47a29f49e8701ea8524418ca486a40
/usr/lib/.build-id/e8
/usr/lib/.build-id/e8/0dc599d094f5191a40138555f428e105ff8d9e
/usr/lib/.build-id/e8/81fe44476cb9e6b3659a60f1a147aa65f13dbd
/usr/lib/.build-id/e9
/usr/lib/.build-id/e9/11d1221ecd2c2b9af14e63e4509cc1c8957144
/usr/lib/.build-id/ed
/usr/lib/.build-id/ed/392bb76d2e79739903258090a24375bbb62fac
/usr/lib/.build-id/ed/86cebb4a3f286ff052f17d36b2152c4b06e415
/usr/lib/.build-id/ee
/usr/lib/.build-id/ee/3fcb316e2070ab99e16923619446130c4aac5a
/usr/lib/.build-id/ee/e202751fbecf2ead468181142fcd883e296905
/usr/lib/.build-id/f1
/usr/lib/.build-id/f1/be086a53254dcadefe9e83f5a0be1d997aa353
/usr/lib/.build-id/f3
/usr/lib/.build-id/f3/47a2d44595daa737e96d231127959a9be78184
/usr/lib/.build-id/f5
/usr/lib/.build-id/f5/05c4224f34a518beff832d3e5e52fa4c286dbd
/usr/lib/.build-id/f9
/usr/lib/.build-id/f9/3bff255144aa4529d1a47e59f4294efd44033f
/usr/lib/.build-id/f9/3ea3351e47c6d19d7cc613f9b81513d309f86f
/usr/lib/.build-id/fa
/usr/lib/.build-id/fa/2f62669dca6ca212de5241fdf217d4fa999d69
/usr/lib/.build-id/fb
/usr/lib/.build-id/fb/4f88b66e1d81cc2e0c48cf2835f9bae1e480d8
/usr/lib/xtables
/usr/lib/xtables/libarpt_mangle.so
/usr/lib/xtables/libebt_802_3.so
/usr/lib/xtables/libebt_among.so
/usr/lib/xtables/libebt_arp.so
/usr/lib/xtables/libebt_arpreply.so
/usr/lib/xtables/libebt_dnat.so
/usr/lib/xtables/libebt_ip.so
/usr/lib/xtables/libebt_ip6.so
/usr/lib/xtables/libebt_log.so
/usr/lib/xtables/libebt_mark.so
/usr/lib/xtables/libebt_mark_m.so
/usr/lib/xtables/libebt_nflog.so
/usr/lib/xtables/libebt_pkttype.so
/usr/lib/xtables/libebt_redirect.so
/usr/lib/xtables/libebt_snat.so
/usr/lib/xtables/libebt_stp.so
/usr/lib/xtables/libebt_vlan.so
/usr/lib/xtables/libip6t_DNAT.so
/usr/lib/xtables/libip6t_DNPT.so
/usr/lib/xtables/libip6t_HL.so
/usr/lib/xtables/libip6t_LOG.so
/usr/lib/xtables/libip6t_MASQUERADE.so
/usr/lib/xtables/libip6t_NETMAP.so
/usr/lib/xtables/libip6t_REDIRECT.so
/usr/lib/xtables/libip6t_REJECT.so
/usr/lib/xtables/libip6t_SNAT.so
/usr/lib/xtables/libip6t_SNPT.so
/usr/lib/xtables/libip6t_ah.so
/usr/lib/xtables/libip6t_dst.so
/usr/lib/xtables/libip6t_eui64.so
/usr/lib/xtables/libip6t_frag.so
/usr/lib/xtables/libip6t_hbh.so
/usr/lib/xtables/libip6t_hl.so
/usr/lib/xtables/libip6t_icmp6.so
/usr/lib/xtables/libip6t_ipv6header.so
/usr/lib/xtables/libip6t_mh.so
/usr/lib/xtables/libip6t_rt.so
/usr/lib/xtables/libip6t_srh.so
/usr/lib/xtables/libipt_CLUSTERIP.so
/usr/lib/xtables/libipt_DNAT.so
/usr/lib/xtables/libipt_ECN.so
/usr/lib/xtables/libipt_LOG.so
/usr/lib/xtables/libipt_MASQUERADE.so
/usr/lib/xtables/libipt_NETMAP.so
/usr/lib/xtables/libipt_REDIRECT.so
/usr/lib/xtables/libipt_REJECT.so
/usr/lib/xtables/libipt_SNAT.so
/usr/lib/xtables/libipt_TTL.so
/usr/lib/xtables/libipt_ULOG.so
/usr/lib/xtables/libipt_ah.so
/usr/lib/xtables/libipt_icmp.so
/usr/lib/xtables/libipt_realm.so
/usr/lib/xtables/libipt_ttl.so
/usr/lib/xtables/libxt_AUDIT.so
/usr/lib/xtables/libxt_CHECKSUM.so
/usr/lib/xtables/libxt_CLASSIFY.so
/usr/lib/xtables/libxt_CONNMARK.so
/usr/lib/xtables/libxt_CONNSECMARK.so
/usr/lib/xtables/libxt_CT.so
/usr/lib/xtables/libxt_DSCP.so
/usr/lib/xtables/libxt_HMARK.so
/usr/lib/xtables/libxt_IDLETIMER.so
/usr/lib/xtables/libxt_LED.so
/usr/lib/xtables/libxt_MARK.so
/usr/lib/xtables/libxt_NFLOG.so
/usr/lib/xtables/libxt_NFQUEUE.so
/usr/lib/xtables/libxt_NOTRACK.so
/usr/lib/xtables/libxt_RATEEST.so
/usr/lib/xtables/libxt_SECMARK.so
/usr/lib/xtables/libxt_SET.so
/usr/lib/xtables/libxt_SYNPROXY.so
/usr/lib/xtables/libxt_TCPMSS.so
/usr/lib/xtables/libxt_TCPOPTSTRIP.so
/usr/lib/xtables/libxt_TEE.so
/usr/lib/xtables/libxt_TOS.so
/usr/lib/xtables/libxt_TPROXY.so
/usr/lib/xtables/libxt_TRACE.so
/usr/lib/xtables/libxt_addrtype.so
/usr/lib/xtables/libxt_bpf.so
/usr/lib/xtables/libxt_cgroup.so
/usr/lib/xtables/libxt_cluster.so
/usr/lib/xtables/libxt_comment.so
/usr/lib/xtables/libxt_connbytes.so
/usr/lib/xtables/libxt_connlabel.so
/usr/lib/xtables/libxt_connlimit.so
/usr/lib/xtables/libxt_connmark.so
/usr/lib/xtables/libxt_conntrack.so
/usr/lib/xtables/libxt_cpu.so
/usr/lib/xtables/libxt_dccp.so
/usr/lib/xtables/libxt_devgroup.so
/usr/lib/xtables/libxt_dscp.so
/usr/lib/xtables/libxt_ecn.so
/usr/lib/xtables/libxt_esp.so
/usr/lib/xtables/libxt_hashlimit.so
/usr/lib/xtables/libxt_helper.so
/usr/lib/xtables/libxt_ipcomp.so
/usr/lib/xtables/libxt_iprange.so
/usr/lib/xtables/libxt_ipvs.so
/usr/lib/xtables/libxt_length.so
/usr/lib/xtables/libxt_limit.so
/usr/lib/xtables/libxt_mac.so
/usr/lib/xtables/libxt_mark.so
/usr/lib/xtables/libxt_multiport.so
/usr/lib/xtables/libxt_nfacct.so
/usr/lib/xtables/libxt_osf.so
/usr/lib/xtables/libxt_owner.so
/usr/lib/xtables/libxt_physdev.so
/usr/lib/xtables/libxt_pkttype.so
/usr/lib/xtables/libxt_policy.so
/usr/lib/xtables/libxt_quota.so
/usr/lib/xtables/libxt_rateest.so
/usr/lib/xtables/libxt_recent.so
/usr/lib/xtables/libxt_rpfilter.so
/usr/lib/xtables/libxt_sctp.so
/usr/lib/xtables/libxt_set.so
/usr/lib/xtables/libxt_socket.so
/usr/lib/xtables/libxt_standard.so
/usr/lib/xtables/libxt_state.so
/usr/lib/xtables/libxt_statistic.so
/usr/lib/xtables/libxt_string.so
/usr/lib/xtables/libxt_tcp.so
/usr/lib/xtables/libxt_tcpmss.so
/usr/lib/xtables/libxt_time.so
/usr/lib/xtables/libxt_tos.so
/usr/lib/xtables/libxt_u32.so
/usr/lib/xtables/libxt_udp.so
/usr/sbin/ip6tables
/usr/sbin/ip6tables-apply
/usr/sbin/ip6tables-restore
/usr/sbin/ip6tables-restore-translate
/usr/sbin/ip6tables-save
/usr/sbin/ip6tables-translate
/usr/sbin/iptables
/usr/sbin/iptables-apply
/usr/sbin/iptables-restore
/usr/sbin/iptables-restore-translate
/usr/sbin/iptables-save
/usr/sbin/iptables-translate
/usr/sbin/xtables-monitor
/usr/sbin/xtables-nft-multi
/usr/share/doc/iptables
/usr/share/doc/iptables/INCOMPATIBILITIES
/usr/share/licenses/iptables
/usr/share/licenses/iptables/COPYING
/usr/share/man/man8/ip6tables-apply.8.gz
/usr/share/man/man8/ip6tables-restore-translate.8.gz
/usr/share/man/man8/ip6tables-restore.8.gz
/usr/share/man/man8/ip6tables-save.8.gz
/usr/share/man/man8/ip6tables-translate.8.gz
/usr/share/man/man8/ip6tables.8.gz
/usr/share/man/man8/iptables-apply.8.gz
/usr/share/man/man8/iptables-extensions.8.gz
/usr/share/man/man8/iptables-restore-translate.8.gz
/usr/share/man/man8/iptables-restore.8.gz
/usr/share/man/man8/iptables-save.8.gz
/usr/share/man/man8/iptables-translate.8.gz
/usr/share/man/man8/iptables.8.gz
/usr/share/man/man8/xtables-monitor.8.gz
/usr/share/man/man8/xtables-nft.8.gz
/usr/share/man/man8/xtables-translate.8.gz


Generated by rpm2html 1.8.1

Fabrice Bellet, Wed Apr 17 05:23:52 2024