package: iptables version: 1.3.6.0debian1-5 Summary:
* Upstream 1.3.8 (2007-Jun-25) fixed 28 bugs and added no new features. * Upstream 1.3.7 (2006-Dec-04) fixed 7 bugs and added 7 new features. Bugs fixed in 1.3.8 (2007-Jun-25): - Fix build error of conntrack match [Yasuyuki Kozakai] - Remove whitespace in ip6tables.c [Yasuyuki Kozakai] - `-p all' and `-p 0' should be allowed in ip6tables [Yasuyuki Kozakai] - hashlimit doc update [Jan Engelhardt] - add --random option to DNAT and REDIRECT [Patrick McHardy] - Makefile uses POSIX conform directory check [Roy Marples] - Fix missing newlines in iptables-save/restore output [Pavol Rusnak] - Update quota manpage for SMP [Phil Oester] - Output for unspecified proto is `all' instead of `0' [Phil Oester] - Fix iptables-save with --random option [Patrick McHardy] - Remove unnecessary IP_NAT_RANGE_PROTO_RANDOM ifdefs [Patrick McHardy] - Remove libnsl from LDLIBS [Patrick McHardy] - Fix problem with iptables-restore and quotes [Pablo Neira Ayuso] - Remove unnecessary includes [Patrick McHardy] - Fix --modprobe parameter [Maurice van der Pot] - ip6tables-restore should output error of modprobe after failed to load [Yasuyuki Kozakai] - Add random option to SNAT [Eric Leblond] - Fix missing space in error message [Patrick McHardy] - Fixes for manpages of tcp, udp, and icmp{,6} [Yasuyuki Kozakai] - Add ip6tables mh extension [Masahide Nakamura] - Fix tcpmss manpage [Patrick McHardy] - Add ip6tables TCPMSS extension [Arnaud Ebalard] - Add UDPLITE multiport support [Patrick McHardy] - Fix missing space in ruleset listing [Patrick McHardy] - Remove extensions for unmaintained/obsolete patchlets [Patrick McHardy] - Fix greedy debug grep [Patrick McHardy] - Fix type in manpage [Thomas Aktaia] - Fix compile/install error for iptables-xml with DO_MULTI=1 [Lutz Jaenicke] Bugs fixed in 1.3.7 (2006-Dec-04) - Fix compilation error with linux 2.6.19 [ Patrick McHardy ] - Fix LOG target segfault with --log-prefix "" [ Mike Frysinger, Bugzilla #516 ] - Fix conflicting getsockopt optname values for IP6T_SO_GET_REVISION_{MATCH,TARGET} [ Yasuyuki KOZAKAI ] - Fix -E (rename) in iptables/ip6tables [ Krzysztof Piotr Oledzki ] - Fix /etc/network usage [ Pablo Neira ] - Fix iptables-save not printing -s/-d ! 0/0 [ Patrick McHardy ] - Fix ip6tables-save unnecessarily printing -s/-d options for zero prefix length [ Daniel De Graaf ] New features in 1.3.7 (2006-Dec-04): - Add revision support for ip6tables [ R?mi Denis-Courmont ] - Add port range support for ip6tables multiport match [ R?mi Denis-Courmont ] - Add sctp match extension for ip6tables [ Patrick McHardy ] - Add iptables-xml tool [ Amin Azez ] - Add hashlimit support for ip6tables (needs kernel > 2.6.19) [ Patrick McHardy ] - Use /lib/modules/$(shell uname -r)/build instead of /usr/src/linux to look for kernel source [ Patrick McHardy ] - Add NFLOG target extension for iptables/ip6tables (needs kernel > 2.6.19) [ Patrick McHardy ]