Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
Name: iptables | Distribution: AlmaLinux |
Version: 1.8.5 | Vendor: AlmaLinux |
Release: 11.el8_9 | Build date: Tue Apr 2 20:37:48 2024 |
Group: Unspecified | Build host: x64-builder01.almalinux.org |
Size: 1974079 | Source RPM: iptables-1.8.5-11.el8_9.src.rpm |
Packager: AlmaLinux Packaging Team <packager@almalinux.org> | |
Url: http://www.netfilter.org/projects/iptables | |
Summary: Tools for managing Linux kernel packet filtering capabilities |
The iptables utility controls the network packet filtering code in the Linux kernel. If you need to set up firewalls and/or IP masquerading, you should either install nftables or this package. Note: This package contains the nftables-based variants of iptables and ip6tables, which are drop-in replacements of the legacy tools.
GPLv2 and Artistic 2.0 and ISC
* Thu Nov 16 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-11 - iptables-restore: Drop dead code - iptables-apply: Eliminate shellcheck warnings - ebtables: Exit gracefully on invalid table names * Fri Sep 08 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-10 - Bump NVR to fix for wrong build tag * Wed Sep 06 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-9 - iptables-nft: fix basechain policy configuration * Fri Jul 28 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-8 - Update fixes from upstream once more * Wed Jul 19 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-7 - Fix shell test-case for older gawk version * Tue Jul 18 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-6 - Fix shell testcase for rebased libnftnl package * Tue Jul 18 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-5 - Missed to copy expected results file to destination. * Sat Jul 15 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-4 - Bump release for CI. * Tue Jul 04 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-3 - Add expected test results - Prepare testsuites for expected results * Wed Jun 28 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-2 - libnftnl package was rebased, depending on 1.1.6 is fine * Wed May 10 2023 Phil Sutter <psutter@redhat.com> - 1.8.5-1 - Rebase to version 1.8.5 plus upstream-indicated fixes - Fix for duplicate files in RPM due to imprecise globbing - Drop bootstrap code again * Wed Nov 23 2022 Phil Sutter <psutter@redhat.com> - 1.8.4-24 - ebtables: Support '-p Length' - nft-shared: Introduce __get_cmp_data() * Fri Jul 01 2022 Phil Sutter <psutter@redhat.com> - 1.8.4-23 - libxtables: Fix unsupported extension warning corner case - tests: shell: Check overhead in iptables-save and -restore - nft: Fix EPERM handling for extensions without rev 0 - Improve error messages for unsupported extensions - xshared: Fix response to unprivileged users - libxtables: Register only the highest revision extension - Use proto_to_name() from xshared in more places - libxtables: Boost rule target checks by announcing chain names - libxtables: Implement notargets hash table - nft: Reject standard targets as chain names when restoring - xshared: Merge and share parse_chain() - xshared: Prefer xtables_chain_protos lookup over getprotoent - nft: Speed up immediate parsing - nft: Simplify immediate parsing * Mon Nov 29 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-22 - extensions: hashlimit: Fix tests with HZ=1000 * Thu Oct 07 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-21 - extensions: hashlimit: Fix tests with HZ=100 - ebtables: Dump atomic waste - doc: ebtables-nft.8: Adjust for missing atomic-options * Wed Aug 04 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-20 - extensions: SECMARK: Use a better context in test case - extensions: sctp: Translate --chunk-types option - extensions: sctp: Fix nftables translation - extensions: SECMARK: Implement revision 1 - nft: cache: Retry if kernel returns EINTR * Fri Jun 18 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-19 - Fix for rpminspect results * Mon May 24 2021 Phil Sutter <psutter@redhat.com> - 1.8.4-18 - xtables-translate: Fix translation of odd netmasks - nft: Fix bitwise expression avoidance detection - xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead. - xtables-monitor: print packet first - xtables-monitor: fix packet family protocol - xtables-monitor: fix rule printing - xtables-monitor: Fix ip6tables rule printing * Thu Dec 10 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-17 - extensions: dccp: Fix for DCCP type 'INVALID' - tests: shell: Merge and extend return codes test - nft: Fix command name in ip6tables error message - extensions: libxt_CT: add translation for NOTRACK - extensions: libipt_icmp: Fix translation of type 'any' - tests/shell: Test for fixed extension registration - libxtables: Register multiple extensions in ascending order - libxtables: Simplify pending extension registration - libxtables: Make sure extensions register in revision order * Wed Oct 28 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-16 - tests/shell: Add test for bitwise avoidance fixes - ebtables: Optimize masked MAC address matches - nft: Optimize class-based IP prefix matches - nft: Fix for broken address mask match detection - nft: cache: Make nft_rebuild_cache() respect fake cache - tests: shell: Improve concurrent noflush restore test a bit - nft: Fix for concurrent noflush restore calls - nft: Fix error reporting for refreshed transactions - nft: Make batch_add_chain() return the added batch object * Sat Aug 15 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-15 - Ignore sysctl files not suffixed '.conf' * Wed Jun 24 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-14 - nft: Fix for '-F' in iptables dumps - tests: shell: Test -F in dump files * Fri May 29 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-13 - Fix for endless loop in iptables-restore --test * Tue May 26 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-12 - Unbreak nfnl_osf tool * Tue May 19 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-11 - Complete ebtables-nft among match support - Replace RHEL-only xtables-monitor fix with upstream solution - xtables: Align effect of -4/-6 options with legacy - xtables: Drop -4 and -6 support from xtables-{save,restore} - Review systemd unit files * Tue Mar 17 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-10 - Fix for iptables-restore segfault under pressure - Fix for iptables-save segfault under pressure * Mon Feb 24 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-9 - iptables-test.py: Fix --host mode - xtables-monitor: Fix segfault when tracing * Sat Feb 15 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-8 - xtables-translate: Fix for iface++ - tests: shell: Fix skip checks with --host mode - xtables-restore: fix for --noflush and empty lines * Wed Feb 12 2020 Phil Sutter <psutter@redhat.com> - 1.8.4-7 - xtables-translate: Fix for interface name corner-cases * Mon Dec 09 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-6 - Add missing patch in last release, uAPI covscan fix * Mon Dec 09 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-5 - Fix covscan-indicated problems * Wed Dec 04 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-4 - Fix for broken xtables-restore --noflush * Tue Dec 03 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-3 - Reduce globbing in library file names to expose future SONAME changes - Add bootstrapping for libip*tc SONAME bump * Mon Dec 02 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-2 - Use upstream-provided man pages for ebtables and arptables * Mon Dec 02 2019 Phil Sutter <psutter@redhat.com> - 1.8.4-1 - Rebase onto upstream release 1.8.4 * Thu Aug 08 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-16 - nft: Set socket receive buffer * Wed Jul 31 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-15 - doc: Install ip{6,}tables-restore-translate.8 man pages * Tue Jul 02 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-14 - arptables: Print space before comma and counters - extensions: Fix ipvs vproto parsing - extensions: Fix ipvs vproto option printing - extensions: Add testcase for libxt_ipvs * Mon Jul 01 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-13 - doc: Install ip{6,}tables-translate.8 manpages - nft: Eliminate dead code in __nft_rule_list * Wed Jun 12 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-12 - Add iptables-test.py testsuite to sources - extensions: libip6t_mh: fix bogus translation error - extensions: AUDIT: Document ineffective --type option - xtables-restore: Fix program names in help texts - xtables-save: Point at existing man page in help text - utils: Add a manpage for nfbpf_compile - Mark man pages in base package as documentation files * Thu May 23 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-11 - Enable verbose output when building * Thu May 09 2019 Phil Sutter <psutter@redhat.com> - 1.8.2-10 - arptables-nft: fix decoding of hlen on bigendian platforms - xtables-save: Fix table not found error message - xtables: Catch errors when zeroing rule rounters - extensions: TRACE: Point at xtables-monitor in documentation - extensions: libipt_realm: Document allowed realm values * Fri Feb 08 2019 Phil Sutter - 1.8.2-9 - ebtables-nft: Support user-defined chain policies * Thu Feb 07 2019 Phil Sutter - 1.8.2-8 - arptables.8: Document --set-counters option * Thu Feb 07 2019 Phil Sutter - 1.8.2-7 - arptables: Support --set-counters option * Fri Feb 01 2019 Phil Sutter - 1.8.2-6 - Improve performance with large rulesets - Fix for changes in arptables output - Fix for inserting rules at wrong position - Fix segfault when comparing rules with standard target - Fix ebtables output for negated values - Document missing arptables FORWARD chain * Tue Dec 18 2018 Phil Sutter - 1.8.2-5 - Drop change to test snippet not included in tarball from Patch4 * Tue Dec 18 2018 Phil Sutter - 1.8.2-4 - Fix iptables init script for nftables-backend - Drop references to unsupported broute table from ebtables man page - xtables: Don't use native nftables comments * Thu Dec 06 2018 Phil Sutter - 1.8.2-3 - Drop change to test snippet not included in tarball from Patch3 * Thu Dec 06 2018 Phil Sutter - 1.8.2-2 - Point out that nftables-variants are installed in package description - Fix for deleting arptables rules by referencing them * Thu Dec 06 2018 Phil Sutter - 1.8.2-1 - Rebase onto upstream version 1.8.2 * Thu Oct 25 2018 Phil Sutter - 1.8.1-2 - Add upstream fixes to 1.8.1 release * Thu Oct 25 2018 Phil Sutter - 1.8.1-1 - Rebase onto upstream version 1.8.1 * Thu Sep 27 2018 Phil Sutter - 1.8.0-11 - Fix for covscan warnings in init scripts * Wed Sep 26 2018 Phil Sutter - 1.8.0-10 - Fix short name of Artistic Licence * Wed Sep 26 2018 Phil Sutter - 1.8.0-9 - Add further fixes for issues identified by covscan - Fix for bogus "is incompatible" warnings - Fix layout in License tag - Replace "Fedora" with "RHEL" in description - Make devel sub-package depend on libs sub-package * Mon Sep 17 2018 Phil Sutter - 1.8.0-8 - Fix issues identified by covscan - xtables-restore: Fix flushing referenced custom chains - xtables: Accept --wait in iptables-nft-restore * Mon Sep 03 2018 Phil Sutter - 1.8.0-7 - xtables: Align return codes with legacy iptables - xtables: Drop use of IP6T_F_PROTO * Wed Aug 29 2018 Phil Sutter - 1.8.0-6 - xtables: Fix for deleting rules with comment * Fri Aug 24 2018 Phil Sutter - 1.8.0-5 - xtables: Use meta l4proto for -p match - ebtables: Fix for listing of non-existent chains - xtables: Fix for no output in iptables-nft -S * Sat Aug 18 2018 Phil Sutter - 1.8.0-4 - xtables: Fix for segfault in iptables-nft - ebtables: Fix entries count in chain listing - Use %autosetup macro in %prep * Fri Aug 17 2018 Phil Sutter - 1.8.0-3 - xtables: Make 'iptables -S nonexisting' return non-zero * Fri Aug 10 2018 Phil Sutter - 1.8.0-2 - Rebase onto upstream master commit 514de4801b731db4712 - Add arptables and ebtables sub-packages * Wed Jul 11 2018 Phil Sutter - 1.8.0-1 - New upstream version 1.8.0 - Drop compat sub-package - Use nft tool versions, drop legacy ones * Thu Mar 01 2018 Phil Sutter <psutter@redhat.com> - 1.6.2-2 - Kill module unloading support - Support /etc/sysctl.d - Don't restart services after package update - Add support for --wait options to restore commands * Wed Feb 21 2018 Michael Cronenworth <mike@cchtml.com> - 1.6.2-1 - New upstream version 1.6.2 http://www.netfilter.org/projects/iptables/files/changes-iptables-1.6.2.txt * Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Sun Oct 22 2017 Kevin Fenzi <kevin@scrye.com> - 1.6.1-5 - Rebuild for new libnftnl * Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Thu Feb 02 2017 Thomas Woerner <twoerner@redhat.com> - 1.6.1-1 - New upstream version 1.6.1 with enhanced translation to nft support and several fixes (RHBZ#1417323) http://netfilter.org/projects/iptables/files/changes-iptables-1.6.1.txt - Enable parallel build again * Thu Feb 02 2017 Petr Šabata <contyk@redhat.com> - 1.6.0-4 - Disabling parallel build to avoid build issues with xtables - See http://patchwork.alpinelinux.org/patch/1787/ for reference - This should be fixed in 1.6.1; parallel build can be restored after the update * Mon Dec 19 2016 Thomas Woerner <twoerner@redhat.com> - 1.6.0-3 - Dropped bad provides for iptables in services sub package (RHBZ#1327786) * Fri Jul 22 2016 Thomas Woerner <twoerner@redhat.com> - 1.6.0-2 - /etc/ethertypes has been moved into the setup package for F-25+. (RHBZ#1329256) * Wed Apr 13 2016 Thomas Woerner <twoerner@redhat.com> - 1.6.0-1 - New upstream version 1.6.0 with nft-compat support and lots of fixes (RHBZ#1292990) Upstream changelog: http://netfilter.org/projects/iptables/files/changes-iptables-1.6.0.txt - New libs sub package containing libxtables and unstable libip*tc libraries (RHBZ#1323161) - Using scripts form RHEL-7 (RHBZ#1240366) - New compat sub package for nftables compatibility - Install iptables-apply (RHBZ#912047) - Fixed module uninstall (RHBZ#1324101) - Incorporated changes by Petr Pisar - Enabled bpf compiler (RHBZ#1170227) Thanks to Yanko Kaneti for the patch * Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.21-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.21-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Mon Dec 01 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-14 - add dhcpv6-client to /etc/sysconfig/ip6tables (RHBZ#1169036) * Mon Nov 03 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-13 - iptables.init: use /run/lock/subsys/ instead of /var/lock/subsys/ (RHBZ#1159573) * Mon Sep 29 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-12 - ip[6]tables.init: change shebang from /bin/sh to /bin/bash (RHBZ#1147272) * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.21-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jul 12 2014 Tom Callaway <spot@fedoraproject.org> - 1.4.21-10 - fix license handling * Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.21-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Wed Mar 12 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-8 - add missing reload and panic actions - BuildRequires: pkgconfig(x) instead of x-devel - no need to specify file mode bits twice (in %install and %files) * Sun Jan 19 2014 Ville Skyttä <ville.skytta@iki.fi> - 1.4.21-7 - Don't order services after syslog.target. * Wed Jan 15 2014 Thomas Woerner <twoerner@redhat.com> 1.4.21-6 - Enable connlabel support again, needs libnetfilter_conntrack * Wed Jan 15 2014 Thomas Woerner <twoerner@redhat.com> 1.4.21-6 - fixed update from RHEL-6 to RHEL-7 (RHBZ#1043901) * Tue Jan 14 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-5 - chmod /etc/sysconfig/ip[6]tables 755 -> 600 * Fri Jan 10 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-4 - drop virtual provide for xtables.so.9 - add default /etc/sysconfig/ip[6]tables (RHBZ#1034494) * Thu Jan 09 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-3 - no need to support the pre-systemd things - use systemd macros (#850166) - remove scriptlets for migrating to a systemd unit from a SysV initscripts - ./configure -> %configure - spec clean up - fix self-obsoletion * Thu Jan 09 2014 Thomas Woerner <twoerner@redhat.com> 1.4.21-2 - fixed system hang at shutdown if root device is network based (RHBZ#1007934) Thanks to Rodrigo A B Freire for the patch * Thu Jan 09 2014 Thomas Woerner <twoerner@redhat.com> 1.4.21-1 - no connlabel.conf upstream anymore - new version 1.4.21 - doc: clarify DEBUG usage macro - iptables: use autoconf to process .in man pages - extensions: libipt_ULOG: man page should mention NFLOG as replacement - extensions: libxt_connlabel: use libnetfilter_conntrack - Introduce a new revision for the set match with the counters support - libxt_CT: Add the "NOTRACK" alias - libip6t_mh: Correct command to list named mh types in manpage - extensions: libxt_DNAT, libxt_REDIRECT, libxt_NETMAP, libxt_SNAT, libxt_MASQUERADE, libxt_LOG: rename IPv4 manpage and tell about IPv6 support - extensions: libxt_LED: fix parsing of delay - ip{6}tables-restore: fix breakage due to new locking approach - libxt_recent: restore minimum value for --seconds - iptables-xml: fix parameter parsing (similar to 2165f38) - extensions: add copyright statements - xtables: improve get_modprobe handling - ip[6]tables: Add locking to prevent concurrent instances - iptables: Fix connlabel.conf install location - ip6tables: don't print out /128 - libip6t_LOG: target output is different to libipt_LOG - build: additional include path required after UAPI changes - iptables: iptables-xml: Fix various parsing bugs - libxt_recent: restore reap functionality to recent module - build: fail in configure on missing dependency with --enable-bpf-compiler - extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter - extensions: libxt_set, libxt_SET: check the set family too - ip6tables: Use consistent exit code for EAGAIN - iptables: libxt_hashlimit.man: correct address - iptables: libxt_conntrack.man extraneous commas - iptables: libip(6)t_REJECT.man default icmp types - iptables: iptables-xm1.1 correct man section - iptables: libxt_recent.{c,man} dead URL - iptables: libxt_string.man add examples - extensions: libxt_LOG: use generic syslog reference in manpage - iptables: extensions/GNUMakefile.in use CPPFLAGS - iptables: correctly reference generated file - ip[6]tables: fix incorrect alignment in commands_v_options - build: add software version to manpage first line at configure stage - extensions: libxt_cluster: add note on arptables-jf - utils: nfsynproxy: fix error while compiling the BPF filter - extensions: add SYNPROXY extension - utils: add nfsynproxy tool - iptables: state match incompatibilty across versions - libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks - iptables: improve chain name validation - iptables: spurious error in load_extension - xtables: trivial spelling fix * Sun Dec 22 2013 Ville Skyttä <ville.skytta@iki.fi> - 1.4.19.1-2 - Drop INSTALL from docs, escape macros in %changelog. * Wed Jul 31 2013 Thomas Woerner <twoerner@redhat.com> 1.4.19.1-1 - new version 1.4.19.1 - libxt_NFQUEUE: fix bypass option documentation - extensions: add connlabel match - extensions: add connlabel match - ip[6]tables: show --protocol instead of --proto in usage - libxt_recent: Fix missing space in manpage for --mask option - extensions: libxt_multiport: Update manpage to list valid protocols - utils: nfnl_osf: use the right nfnetlink lib - libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency - Revert "build: resolve link failure for ip6t_NETMAP" - libxt_osf: fix missing --ttl and --log in save output - libxt_osf: fix bad location for location in --genre - libip6t_SNPT: add manpage - libip6t_DNPT: add manpage - utils: updates .gitignore to include nfbpf_compile - extensions: libxt_bpf: clarify --bytecode argument - libxtables: fix parsing of dotted network mask format - build: bump version to 1.4.19 - libxt_conntrack: fix state match alias state parsing - extensions: add libxt_bpf extension - utils: nfbpf_compile - doc: mention SNAT in INPUT chain since kernel 2.6.36 - fixed changelog date weekdays where needed * Mon Mar 04 2013 Thomas Woerner <twoerner@redhat.com> 1.4.18-1 - new version 1.4.18 - lots of documentation changes - Introduce match/target aliases - Add the "state" alias to the "conntrack" match - iptables: remove unused leftover definitions - libxtables: add xtables_rule_matches_free - libxtables: add xtables_print_num - extensions: libip6t_DNPT: fix wording in DNPT target - extension: libip6t_DNAT: allow port DNAT without address - extensions: libip6t_DNAT: set IPv6 DNAT --to-destination - extensions: S/DNPT: add missing save function - changes of 1.4.17: - libxt_time: add support to ignore day transition - Convert the NAT targets to use the kernel supplied nf_nat.h header - extensions: add IPv6 MASQUERADE extension - extensions: add IPv6 SNAT extension - extensions: add IPv6 DNAT target - extensions: add IPv6 REDIRECT extension - extensions: add IPv6 NETMAP extension - extensions: add NPT extension - extensions: libxt_statistic: Fix save output * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.16.2-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Wed Jan 16 2013 Ville Skyttä <ville.skytta@iki.fi> - 1.4.16.2-6 - Own unowned -services libexec dirs (#894464, Michael Scherer). - Fix -services unit file permissions (#732936, Michal Schmidt). * Thu Nov 08 2012 Thomas Woerner <twoerner@redhat.com> 1.4.16.2-5 - fixed path of ip6tables.init in ip6tables.service * Fri Nov 02 2012 Thomas Woerner <twoerner@redhat.com> 1.4.16.2-4 - fixed missing services for update of pre F-18 installations (rhbz#867960) - provide and obsolete old main package in services sub package - provide and obsolete old ipv6 sub package (pre F-17) in services sub package * Sun Oct 14 2012 Dan Horák <dan[at]dany.cz> 1.4.16.2-3 - fix the compat provides for all 64-bit arches * Fri Oct 12 2012 Thomas Woerner <twoerner@redhat.com> 1.4.16.2-2 - new sub package services providing the systemd services (RHBZ#862922) - new sub package utils: provides nfnl_osf and the pf.os database - using %{_libexecdir}/iptables as script path for the original init scripts - added service iptables save funcitonality using the new way provided by initscripts 9.37.1 (RHBZ#748134) - added virtual provide for libxtables.so.7 * Mon Oct 08 2012 Thomas Woerner <twoerner@redhat.com> 1.4.16.2-1 - new version 1.4.16.2 - build: support for automake-1.12 - build: separate AC variable replacements from xtables.h - build: have `make clean` remove dep files too - doc: grammatical updates to libxt_SET - doc: clean up interpunction in state list for xt_conntrack - doc: deduplicate extension descriptions into a new manpage - doc: trim "state" manpage and reference conntrack instead - doc: have NOTRACK manpage point to CT instead - doc: mention iptables-apply in the SEE ALSO sections - extensions: libxt_addrtype: fix type in help message - include: add missing linux/netfilter_ipv4/ip_queue.h - iptables: fix wrong error messages - iptables: support for match aliases - iptables: support for target aliases - iptables-restore: warn about -t in rule lines - ip[6]tables-restore: cleanup to reduce one level of indentation - libip6t_frag: match any frag id by default - libxtables: consolidate preference logic - libxt_devgroup: consolidate devgroup specification parsing - libxt_devgroup: guard against negative numbers - libxt_LED: guard against negative numbers - libxt_NOTRACK: replace as an alias to CT --notrack - libxt_state: replace as an alias to xt_conntrack - libxt_tcp: print space before, not after "flags:" - libxt_u32: do bounds checking for @'s operands - libxt_*limit: avoid division by zero - Merge branch 'master' of git://git.inai.de/iptables - Merge remote-tracking branch 'nf/stable' - New set match revision with --return-nomatch flag support - dropped fixrestore patch, upstream * Wed Aug 01 2012 Thomas Woerner <twoerner@redhat.com> 1.4.15-1 - new version 1.4.15 - extensions: add HMARK target - iptables-restore: fix parameter parsing (shows up with gcc-4.7) - iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7) - libxtables: add xtables_ip[6]mask_to_cidr - libxt_devgroup: add man page snippet - libxt_hashlimit: add support for byte-based operation - libxt_recent: add --mask netmask - libxt_recent: remove unused variable - libxt_HMARK: correct a number of errors introduced by Pablo's rework - libxt_HMARK: fix ct case example - libxt_HMARK: fix output of iptables -L - Revert "iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)" * Wed Jul 18 2012 Thomas Woerner <twoerner@redhat.com> 1.4.14-3 - added fixrestore patch submitted to upstream by fryasu (nfbz#774) (RHBZ#825796) * Wed Jul 18 2012 Thomas Woerner <twoerner@redhat.com> 1.4.14-2 - disabled libipq, removed upstream, not provided by kernel anymore * Wed Jul 18 2012 Thomas Woerner <twoerner@redhat.com> 1.4.14-1 - new version 1.4.14 - extensions: add IPv6 capable ECN match extension - extensions: add nfacct match - extensions: add rpfilter module - extensions: libxt_rateest: output all options in save hook - iptables: missing free() in function cache_add_entry() - iptables: missing free() in function delete_entry() - libiptc: fix retry path in TC_INIT - libiptc: Returns the position the entry was inserted - libipt_ULOG: fix --ulog-cprange - libxt_CT: add --timeout option - ip(6)tables-restore: make sure argv is NULL terminated - Revert "libiptc: Returns the position the entry was inserted" - src: mark newly opened fds as FD_CLOEXEC (close on exec) - tests: add rateest match rules - dropped patch5 (cloexec), merged upstream * Mon Apr 23 2012 Thomas Woerner <twoerner@redhat.com> 1.4.12.2-5 - reenable iptables default services * Wed Feb 29 2012 Harald Hoyer <harald@redhat.com> 1.4.12.2-4 - install everything in /usr https://fedoraproject.org/wiki/Features/UsrMove * Thu Feb 16 2012 Thomas Woerner <twoerner@redhat.com> 1.4.12.2-3 - fixed auto enable check for Fedora > 16 and added rhel > 6 check * Wed Feb 15 2012 Thomas Woerner <twoerner@redhat.com> 1.4.12.2-2 - disabled autostart and auto enable for iptables.service and ip6tables.service for Fedora > 16 * Mon Jan 16 2012 Thomas Woerner <twoerner@redhat.com> 1.4.12.2-1 - new version 1.4.12.2 with new pkgconfig/libip4tc.pc and pkgconfig/libip6tc.pc - build: make check stage not fail when building statically - build: restore build order of modules - build: scan for unreferenced symbols - build: sort file list before build - doc: clarification on the meaning of -p 0 - doc: document iptables-restore's -T option - doc: fix undesired newline in ip6tables-restore(8) - ip6tables-restore: implement missing -T option - iptables: move kernel version find routing into libxtables - libiptc: provide separate pkgconfig files - libipt_SAME: set PROTO_RANDOM on all ranges - libxtables: Fix file descriptor leak in xtables_lmap_init on error - libxt_connbytes: fix handling of --connbytes FROM - libxt_CONNSECMARK: fix spacing in output - libxt_conntrack: improve error message on parsing violation - libxt_NFQUEUE: fix --queue-bypass ipt-save output - libxt_RATEEST: link with -lm - libxt_statistic: link with -lm - Merge branch 'stable' - Merge branch 'stable' of git://dev.medozas.de/iptables - nfnl_osf: add missing libnfnetlink_CFLAGS to compile process - xtoptions: fill in fallback value for nvals - xtoptions: simplify xtables_parse_interface * Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.12.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Mon Dec 12 2011 Thomas Woerner <twoerner@redhat.com> 1.4.12.1-1 - new version 1.4.12.1 with new pkgconfig/libipq.pc - build: abort autogen on subcommand failure - build: strengthen check for overlong lladdr components - build: workaround broken linux-headers on RHEL-5 - doc: clarify libxt_connlimit defaults - doc: fix typo in libxt_TRACE - extensions: use multi-target registration - libip6t_dst: restore setting IP6T_OPTS_LEN flag - libip6t_frag: restore inversion support - libip6t_hbh: restore setting IP6T_OPTS_LEN flag - libipq: add pkgconfig file - libipt_ttl: document that negation is available - libxt_conntrack: fix --ctproto 0 output - libxt_conntrack: remove one misleading comment - libxt_dccp: fix deprecated intrapositional ordering of ! - libxt_dccp: fix random output of ! on --dccp-option - libxt_dccp: provide man pages options in short help too - libxt_dccp: restore missing XTOPT_INVERT tags for options - libxt_dccp: spell out option name on save - libxt_dscp: restore inversion support - libxt_hashlimit: default htable-expire must be in milliseconds - libxt_hashlimit: observe new default gc-expire time when saving - libxt_hashlimit: remove inversion from hashlimit rev 0 - libxt_owner: restore inversion support - libxt_physdev: restore inversion support - libxt_policy: remove superfluous inversion - libxt_set: put differing variable names in directly - libxt_set: update man page about kernel support on the feature - libxt_string: define _GNU_SOURCE for strnlen - libxt_string: escape the escaping char too - libxt_string: fix space around arguments - libxt_string: replace hex codes by char equivalents - libxt_string: simplify hex output routine - libxt_tcp: always print the mask parts - libxt_TCPMSS: restore build with IPv6-less libcs - libxt_TOS: update linux kernel version list for backported fix - libxt_u32: fix missing allowance for inversion - src: remove unused IPTABLES_MULTI define - tests: add negation tests for libxt_statistic - xtoptions: flag use of XTOPT_POINTER without XTOPT_PUT - removed include/linux/types.h before build to be able to compile * Tue Jul 26 2011 Thomas Woerner <twoerner@redhat.com> 1.4.12-2 - dropped temporary provide again * Tue Jul 26 2011 Thomas Woerner <twoerner@redhat.com> 1.4.12-1.1 - added temporary provides for libxtables.so.6 to be able to rebuild iproute, which is part of the standard build environment * Mon Jul 25 2011 Thomas Woerner <twoerner@redhat.com> 1.4.12-1 - new version 1.4.12 with support of all new features of kernel 3.0 - build: attempt to fix building under Linux 2.4 - build: bump soversion for recent data structure change - build: install modules in arch-dependent location - doc: fix group range in libxt_NFLOG's man - doc: fix version string in ip6tables.8 - doc: include matches/targets in manpage again - doc: mention multiple verbosity flags - doc: the -m option cannot be inverted - extensions: support for per-extension instance global variable space - iptables-apply: select default rule file depending on call name - iptables: consolidate target/match init call - iptables: Coverity: DEADCODE - iptables: Coverity: NEGATIVE_RETURNS - iptables: Coverity: RESOURCE_LEAK - iptables: Coverity: REVERSE_INULL - iptables: Coverity: VARARGS - iptables: restore negation for -f - libip6t_HL: fix option names from ttl -> hl - libipt_LOG: fix ignoring all but last flags - libxtables: ignore whitespace in the multiaddress argument parser - libxtables: properly reject empty hostnames - libxtables: set clone's initial data to NULL - libxt_conntrack: move more data into the xt_option_entry - libxt_conntrack: restore network-byte order for v1,v2 - libxt_hashlimit: use a more obvious expiry value by default - libxt_rateest: abolish global variables - libxt_RATEEST: abolish global variables - libxt_RATEEST: fix userspacesize field - libxt_RATEEST: use guided option parser - libxt_state: fix regression about inversion of main option - option: remove last traces of intrapositional negation - complete changelog: http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.12.txt * Thu Jul 21 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11.1-4 - merged ipv6 sub package into main package - renamed init scripts to /usr/libexec/ip*tables.init * Fri Jul 15 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11.1-3 - added support for native systemd file (rhbz#694738) - new iptables.service file - additional requires - moved sysv init scripts to /usr/libexec - added new post, preun and postun scripts and triggers * Tue Jul 12 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11.1-2 - dropped temporary provide again - enabled smp build * Tue Jul 12 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11.1-1.1 - added temporary provides for libxtables.so.5 to be able to rebuild iproute, which is part of the standard build environment * Mon Jul 11 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11.1-1 - new version 1.4.11.1, bug and doc fix release for 1.4.11 * Tue Jun 07 2011 Thomas Woerner <twoerner@redhat.com> 1.4.11-1 - new version 1.4.11 with all new features of 2.6.37-39 (not usable) - lots of changes and bugfixes for base and extensions - complete changelog: http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.11.txt * Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Mon Jan 10 2011 Thomas Woerner <twoerner@redhat.com> 1.4.10-1 - new version 1.4.10 with all new features of 2.6.36 - all: consistent syntax use in struct option - build: fix static linking - doc: let man(1) autoalign the text in xt_cpu - doc: remove extra empty line from xt_cpu - doc: minimal spelling updates to xt_cpu - doc: consistent use of markup - extensions: libxt_quota: don't ignore the quota value on deletion - extensions: REDIRECT: add random help - extensions: add xt_cpu match - extensions: add idletimer xt target extension - extensions: libxt_IDLETIMER: use xtables_param_act when checking options - extensions: libxt_CHECKSUM extension - extensions: libipt_LOG/libip6t_LOG: support macdecode option - extensions: fix compilation of the new CHECKSUM target - extensions: libxt_ipvs: user-space lib for netfilter matcher xt_ipvs - iptables-xml: resolve compiler warnings - iptables: limit chain name length to be consistent with targets - libiptc: add Libs.private to pkgconfig files - libiptc: build with -Wl,--no-as-needed - xtables: remove unnecessary cast - dropped xt_CHECKSUM, added upstream * Tue Oct 12 2010 Thomas Woerner <twoerner@redhat.com> 1.4.9-2 - added xt_CHECKSUM patch from Michael S. Tsirkin (rhbz#612587) * Wed Aug 04 2010 Thomas Woerner <twoerner@redhat.com> 1.4.9-1 - new version 1.4.9 with all new features of 2.6.35 - doc: xt_hashlimit: fix a typo - doc: xt_LED: nroff formatting requirements - doc: xt_string: correct copy-and-pasting in manpage - extensions: add the LED target - extensions: libxt_quota.c: Support option negation - extensions: libxt_rateest: fix bps options for iptables-save - extensions: libxt_rateest: fix typo in the man page - extensions: REDIRECT: add random help - includes: sync header files from Linux 2.6.35-rc1 - libxt_conntrack: do print netmask - libxt_hashlimit: always print burst value - libxt_set: new revision added - utils: add missing include flags to Makefile - xtables: another try at chain name length checking - xtables: remove xtables_set_revision function - xt_quota: also document negation - xt_sctp: Trace DATA chunk that supports SACK-IMMEDIATELY extension - xt_sctp: support FORWARD_TSN chunk type * Fri Jul 02 2010 Thomas Woerner <twoerner@redhat.com> 1.4.8-1 - new version 1.4.8 all new features of 2.6.34 (rhbz#) - extensions: REDIRECT: fix --to-ports parser - iptables: add noreturn attribute to exit_tryhelp() - extensions: MASQUERADE: fix --to-ports parser - libxt_comment: avoid use of IPv4-specific examples - libxt_CT: add a manpage - iptables: correctly check for too-long chain/target/match names - doc: libxt_MARK: no longer restricted to mangle table - doc: remove claim that TCPMSS is limited to mangle - libxt_recent: add a missing space in output - doc: add manpage for libxt_osf - libxt_osf: import nfnl_osf program - extensions: add support for xt_TEE - CT: fix --ctevents parsing - extensions: add CT extension - libxt_CT: print conntrack zone in ->print/->save - xtables: fix compilation when debugging is enabled - libxt_conntrack: document --ctstate UNTRACKED - iprange: fix xt_iprange v0 parsing * Wed Mar 24 2010 Thomas Woerner <twoerner@redhat.com> 1.4.7-2 - added default values for IPTABLES_STATUS_VERBOSE and IPTABLES_STATUS_LINENUMBERS in init script - added missing lsb keywords Required-Start and Required-Stop to init script * Fri Mar 05 2010 Thomas Woerner <twoerner@redhat.com> 1.4.7-1 - new version 1.4.7 with support for all new features of 2.6.33 (rhbz#570767) - libip4tc: Add static qualifier to dump_entry() - libipq: build as shared library - recent: reorder cases in code (cosmetic cleanup) - several man page and documentation fixes - policy: fix error message showing wrong option - includes: header updates - Lift restrictions on interface names - fixed license and moved iptables-xml into base package according to review * Wed Jan 27 2010 Thomas Woerner <twoerner@redhat.com> 1.4.6-2 - moved libip*tc and libxtables libs to /lib[64], added symlinks for .so libs to /usr/lib[64] for compatibility (rhbz#558796) * Wed Jan 13 2010 Thomas Woerner <twoerner@redhat.com> 1.4.6-1 - new version 1.4.6 with support for all new features of 2.6.32 - several man page fixes - Support for nommu arches - realm: remove static initializations - libiptc: remove unused functions - libiptc: avoid strict-aliasing warnings - iprange: do accept non-ranges for xt_iprange v1 - iprange: warn on reverse range - iprange: roll address parsing into a loop - iprange: do accept non-ranges for xt_iprange v1 (log) - iprange: warn on reverse range (log) - libiptc: fix wrong maptype of base chain counters on restore - iptables: fix undersized deletion mask creation - style: reduce indent in xtables_check_inverse - libxtables: hand argv to xtables_check_inverse - iptables/extensions: make bundled options work again - CONNMARK: print mark rules with mask 0xffffffff as set instead of xset - iptables: take masks into consideration for replace command - doc: explain experienced --hitcount limit - doc: name resolution clarification - iptables: expose option to zero packet/byte counters for a specific rule - build: restore --disable-ipv6 functionality on system w/o v6 headers - MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark - DNAT: fix incorrect check during parsing - extensions: add osf extension - conntrack: fix --expires parsing * Thu Dec 17 2009 Thomas Woerner <twoerner@redhat.com> 1.4.5-2 - dropped nf_ext_init remains from cloexec patch * Thu Sep 17 2009 Thomas Woerner <twoerner@redhat.com> 1.4.5-1 - new version 1.4.5 with support for all new features of 2.6.31 - libxt_NFQUEUE: add new v1 version with queue-balance option - xt_conntrack: revision 2 for enlarged state_mask member - libxt_helper: fix invalid passed option to check_inverse - libiptc: split v4 and v6 - extensions: collapse registration structures - iptables: allow for parse-less extensions - iptables: allow for help-less extensions - extensions: remove empty help and parse functions - xtables: add multi-registration functions - extensions: collapse data variables to use multi-reg calls - xtables: warn of missing version identifier in extensions - multi binary: allow subcommand via argv[1] - iptables: accept multiple IP address specifications for -s, -d - several build fixes - several man page fixes - fixed two leaked file descriptors on sockets (rhbz#521397) * Mon Aug 24 2009 Thomas Woerner <twoerner@redhat.com> 1.4.4-1 - new version 1.4.4 with support for all new features of 2.6.30 - several man page fixes - iptables: replace open-coded sizeof by ARRAY_SIZE - libip6t_policy: remove redundant functions - policy: use direct xt_policy_info instead of ipt/ip6t - policy: merge ipv6 and ipv4 variant - extensions: add `cluster' match support - extensions: add const qualifiers in print/save functions - extensions: use NFPROTO_UNSPEC for .family field - extensions: remove redundant casts - iptables: close open file descriptors - fix segfault if incorrect protocol name is used - replace open-coded sizeof by ARRAY_SIZE - do not include v4-only modules in ip6tables manpage - use direct xt_policy_info instead of ipt/ip6t - xtables: fix segfault if incorrect protocol name is used - libxt_connlimit: initialize v6_mask - SNAT/DNAT: add support for persistent multi-range NAT mappings * Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.3.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Wed Apr 15 2009 Thomas Woerner <twoerner@redhat.com> 1.4.3.2-1 - new version 1.4.3.2 - also install iptables/internal.h, needed for iptables.h and ip6tables.h * Mon Mar 30 2009 Thomas Woerner <twoerner@redhat.com> 1.4.3.1-1 - new version 1.4.3.1 - libiptc is now shared - supports all new features of the 2.6.29 kernel - dropped typo_latter patch * Thu Mar 05 2009 Thomas Woerner <twoerner@redhat.com> 1.4.2-3 - still more review fixes (rhbz#225906) - consistent macro usage - use sed instead of perl for rpath removal - use standard RPM CFLAGS, but also -fno-strict-aliasing (needed for libiptc*) * Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Fri Feb 20 2009 Thomas Woerner <twoerner@redhat.com> 1.4.2-1 - new version 1.4.2 - removed TOS value mask patch (upstream) - more review fixes (rhbz#225906) - install all header files (rhbz#462207) - dropped nf_ext_init (rhbz#472548) * Tue Jul 22 2008 Thomas Woerner <twoerner@redhat.com> 1.4.1.1-2 - fixed TOS value mask problem (rhbz#456244) (upstream patch) - two more cloexec fixes * Tue Jul 01 2008 Thomas Woerner <twoerner@redhat.com> 1.4.1.1-1 - upstream bug fix release 1.4.1.1 - dropped extra patch for 1.4.1 - not needed anymore * Tue Jun 10 2008 Thomas Woerner <twoerner@redhat.com> 1.4.1-1 - new version 1.4.1 with new build environment - additional ipv6 network mask patch from Jan Engelhardt - spec file cleanup - removed old patches * Fri Jun 06 2008 Tom "spot" Callaway <tcallawa@redhat.com> 1.4.0-5 - use normal kernel headers, not linux/compiler.h - change BuildRequires: kernel-devel to kernel-headers - We need to do this to be able to build for both sparcv9 and sparc64 (there is no kernel-devel.sparcv9) * Thu Mar 20 2008 Thomas Woerner <twoerner@redhat.com> 1.4.0-4 - use O_CLOEXEC for all opened files in all applications (rhbz#438189) * Mon Mar 03 2008 Thomas Woerner <twoerner@redhat.com> 1.4.0-3 - use the kernel headers from the build tree for iptables for now to be able to compile this package, but this makes the package more kernel dependant - use s6_addr32 instead of in6_u.u6_addr32 * Wed Feb 20 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.4.0-2 - Autorebuild for GCC 4.3 * Mon Feb 11 2008 Thomas Woerner <twoerner@redhat.com> 1.4.0-1 - new version 1.4.0 - fixed condrestart (rhbz#428148) - report the module in rmmod_r if there is an error - use nf_ext_init instead of my_init for extension constructors * Mon Nov 05 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-6 - fixed leaked file descriptor before fork/exec (rhbz#312191) - blacklisting is not working, use "install X /bin/(true|false)" test instead - return private exit code 150 for disabled ipv6 support - use script name for output messages * Tue Oct 16 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-5 - fixed error code for stopping a already stopped firewall (rhbz#321751) - moved blacklist test into start * Wed Sep 26 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-4.1 - do not start ip6tables if ipv6 is blacklisted (rhbz#236888) - use simpler fix for (rhbz#295611) Thanks to Linus Torvalds for the patch. * Mon Sep 24 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-4 - fixed IPv6 reject type (rhbz#295181) - fixed init script: start, stop and status - support netfilter compiled into kernel in init script (rhbz#295611) - dropped inversion for limit modules from man pages (rhbz#220780) - fixed typo in ip6tables man page (rhbz#236185) * Wed Sep 19 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-3 - do not depend on local_fs in lsb header - this delayes start after network - fixed exit code for initscript usage * Mon Sep 17 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-2.1 - do not use lock file for condrestart test * Thu Aug 23 2007 Thomas Woerner <twoerner@redhat.com> 1.3.8-2 - fixed initscript for LSB conformance (rhbz#246953, rhbz#242459) - provide iptc interface again, but unsupported (rhbz#216733) - compile all extension, which are supported by the kernel-headers package - review fixes (rhbz#225906) * Tue Jul 31 2007 Thomas Woerner <twoerner@redhat.com> - reverted ipv6 fix, because it disables the ipv6 at all (rhbz#236888) * Fri Jul 13 2007 Steve Conklin <sconklin@redhat.com> - 1.3.8-1 - New version 1.3.8 * Mon Apr 23 2007 Jeremy Katz <katzj@redhat.com> - 1.3.7-2 - fix error when ipv6 support isn't loaded in the kernel (#236888) * Wed Jan 10 2007 Thomas Woerner <twoerner@redhat.com> 1.3.7-1.1 - fixed installation of secmark modules * Tue Jan 09 2007 Thomas Woerner <twoerner@redhat.com> 1.3.7-1 - new verison 1.3.7 - iptc is not a public interface and therefore not installed anymore - dropped upstream secmark patch * Tue Sep 19 2006 Thomas Woerner <twoerner@redhat.com> 1.3.5-2 - added secmark iptables patches (#201573) * Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.2.1 - rebuild * Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.2 - bump again for double-long bug on ppc(64) * Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.1 - rebuilt for new gcc4.1 snapshot and glibc changes * Thu Feb 02 2006 Thomas Woerner <twoerner@redhat.com> 1.3.5-1 - new version 1.3.5 - fixed init script to set policy for raw tables, too (#179094) * Tue Jan 24 2006 Thomas Woerner <twoerner@redhat.com> 1.3.4-3 - added important iptables header files to devel package * Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com> - rebuilt * Fri Nov 25 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-2 - fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and replace "_init" with "__attribute((constructor)) my_init" * Fri Nov 25 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-1.1 - rebuild due to unresolved symbols in shared libraries * Fri Nov 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-1 - new version 1.3.4 - dropped free_opts patch (upstream fixed) - made libipq PIC (#158623) - additional configuration options for iptables startup script (#172929) Thanks to Jan Gruenwald for the patch - spec file cleanup (dropped linux_header define and usage) * Mon Jul 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.2-1 - new version 1.3.2 with additional patch for the misplaced free_opts call from Marcus Sundberg * Wed May 11 2005 Thomas Woerner <twoerner@redhat.com> 1.3.1-1 - new version 1.3.1 * Fri Mar 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-2 - Remove unnecessary explicit kernel dep (#146142) - Fixed out of bounds accesses (#131848): Thanks to Steve Grubb for the patch - Adapted iptables-config to reference to modprobe.conf (#150143) - Remove misleading message (#140154): Thanks to Ulrich Drepper for the patch * Mon Feb 21 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-1 - new version 1.3.0 * Thu Nov 11 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3.2 - fixed autoload problem in iptables and ip6tables (CAN-2004-0986) * Fri Sep 17 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1 - changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731) - modified config file to match this change and un-commented variables with default values * Thu Sep 16 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3 - applied second part of cleanup patch from (#131848): thanks to Steve Grubb for the patch * Wed Aug 25 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-2 - fixed free bug in iptables (#128322) * Tue Jun 22 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-1 - new version 1.2.11 * Thu Jun 17 2004 Thomas Woerner <twoerner@redhat.com> 1.2.10-1 - new version 1.2.10 * Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com> - rebuilt * Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com> - rebuilt * Thu Feb 26 2004 Thomas Woerner <twoerner@redhat.com> 1.2.9-2.3 - fixed iptables-restore -c fault if there are no counters (#116421) * Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com> - rebuilt * Sun Jan 25 2004 Dan Walsh <dwalsh@redhat.com> 1.2.9-1.2 - Close File descriptors to prevent SELinux error message * Wed Jan 07 2004 Thomas Woerner <twoerner@redhat.com> 1.2.9-1.1 - rebuild * Wed Dec 17 2003 Thomas Woerner <twoerner@redhat.com> 1.2.9-1 - vew version 1.2.9 - new config options in ipXtables-config: IPTABLES_MODULES_UNLOAD - more documentation in ipXtables-config - fix for netlink security issue in libipq (devel package) - print fix for libipt_icmp (#109546) * Thu Oct 23 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-13 - marked all messages in iptables init script for translation (#107462) - enabled devel package (#105884, #106101) - bumped build for fedora for libipt_recent.so (#106002) * Tue Sep 23 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1 - fixed lost udp port range in ip6tables-save (#104484) - fixed non numeric multiport port output in ipXtables-savs * Mon Sep 22 2003 Florian La Roche <Florian.LaRoche@redhat.de> 1.2.8-11 - do not link against -lnsl * Wed Sep 17 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-10 - made variables in rmmod_r local * Tue Jul 22 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-9 - fixed permission for init script * Sat Jul 19 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-8 - fixed save when iptables file is missing and iptables-config permissions * Tue Jul 08 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-7 - fixes for ip6tables: module unloading, setting policy only for existing tables * Thu Jul 03 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-6 - IPTABLES_SAVE_COUNTER defaults to no, now - install config file in /etc/sysconfig - exchange unload of ip_tables and ip_conntrack - fixed start function * Wed Jul 02 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-5 - new config option IPTABLES_SAVE_ON_RESTART - init script: new status, save and restart - fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374 * Mon Jun 30 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-4 - new config option IPTABLES_STATUS_NUMERIC - cleared IPTABLES_MODULES in iptables-config * Mon Jun 30 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-3 - new init scripts * Sat Jun 28 2003 Florian La Roche <Florian.LaRoche@redhat.de> - remove check for very old kernel versions in init scripts - sync up both init scripts and remove some further ugly things - add some docu into rpm * Thu Jun 26 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-2 - rebuild * Mon Jun 16 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-1 - update to 1.2.8 * Wed Jan 22 2003 Tim Powers <timp@redhat.com> - rebuilt * Mon Jan 13 2003 Bill Nottingham <notting@redhat.com> 1.2.7a-1 - update to 1.2.7a - add a plethora of bugfixes courtesy Michael Schwendt <mschewndt@yahoo.com> * Fri Dec 13 2002 Elliot Lee <sopwith@redhat.com> 1.2.6a-3 - Fix multilib * Wed Aug 07 2002 Karsten Hopp <karsten@redhat.de> - fixed iptables and ip6tables initscript output, based on #70511 - check return status of all iptables calls, not just the last one in a 'for' loop. * Mon Jul 29 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.6a-1 - 1.2.6a (bugfix release, #69747) * Fri Jun 21 2002 Tim Powers <timp@redhat.com> - automated rebuild * Thu May 23 2002 Tim Powers <timp@redhat.com> - automated rebuild * Mon Mar 04 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-3 - Add some fixes from CVS, fixing bug #60465 * Tue Feb 12 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2 - Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org> - Update URL (#59354) - Use /sbin/chkconfig rather than chkconfig in %postun script * Fri Jan 11 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-1 - 1.2.5 * Wed Jan 09 2002 Tim Powers <timp@redhat.com> - automated rebuild * Mon Nov 05 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-2 - Fix %preun script * Tue Oct 30 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1 - Update to 1.2.4 (various fixes, including security fixes; among others: - Fix init script (#31133) * Mon Sep 03 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-1 - 1.2.3 (5 security fixes, some other fixes) - Fix updating (#53032) * Mon Aug 27 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-4 - Fix #50990 - Add some fixes from current CVS; should fix #52620 * Mon Jul 16 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-3 - Add some fixes from the current CVS tree; fixes #49154 and some IPv6 issues * Tue Jun 26 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-2 - Fix iptables-save reject-with (#45632), Patch from Michael Schwendt <mschwendt@yahoo.com> * Tue May 08 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-1 - 1.2.2 * Wed Mar 21 2001 Bernhard Rosenkraenzer <bero@redhat.com> - 1.2.1a, fixes #28412, #31136, #31460, #31133 * Thu Mar 01 2001 Bernhard Rosenkraenzer <bero@redhat.com> - Yet another initscript fix (#30173) - Fix the fixes; they fixed some issues but broke more important stuff :/ (#30176) * Tue Feb 27 2001 Bernhard Rosenkraenzer <bero@redhat.com> - Fix up initscript (#27962) - Add fixes from CVS to iptables-{restore,save}, fixing #28412 * Fri Feb 09 2001 Karsten Hopp <karsten@redhat.de> - create /etc/sysconfig/iptables mode 600 (same problem as #24245) * Mon Feb 05 2001 Karsten Hopp <karsten@redhat.de> - fix bugzilla #25986 (initscript not marked as config file) - fix bugzilla #25962 (iptables-restore) - mv chkconfig --del from postun to preun * Thu Feb 01 2001 Trond Eivind Glomsrød <teg@redhat.com> - Fix check for ipchains * Mon Jan 29 2001 Bernhard Rosenkraenzer <bero@redhat.com> - Some fixes to init scripts * Wed Jan 24 2001 Bernhard Rosenkraenzer <bero@redhat.com> - Add some fixes from CVS, fixes among other things Bug #24732 * Wed Jan 17 2001 Bernhard Rosenkraenzer <bero@redhat.com> - Add missing man pages, fix up init script (Bug #17676) * Mon Jan 15 2001 Bill Nottingham <notting@redhat.com> - add init script * Mon Jan 15 2001 Bernhard Rosenkraenzer <bero@redhat.com> - 1.2 - fix up ipv6 split - add init script - Move the plugins from /usr/lib/iptables to /lib/iptables. This needs to work before /usr is mounted... - Use -O1 on alpha (compiler bug) * Sat Jan 06 2001 Bernhard Rosenkraenzer <bero@redhat.com> - 1.1.2 - Add IPv6 support (in separate package) * Thu Aug 17 2000 Bill Nottingham <notting@redhat.com> - build everywhere * Tue Jul 25 2000 Bernhard Rosenkraenzer <bero@redhat.com> - 1.1.1 * Thu Jul 13 2000 Prospector <bugzilla@redhat.com> - automatic rebuild * Tue Jun 27 2000 Preston Brown <pbrown@redhat.com> - move iptables to /sbin. - excludearch alpha for now, not building there because of compiler bug(?) * Fri Jun 09 2000 Bill Nottingham <notting@redhat.com> - don't obsolete ipchains either - update to 1.1.0 * Sun Jun 04 2000 Bill Nottingham <notting@redhat.com> - remove explicit kernel requirement * Tue May 02 2000 Bernhard Rosenkränzer <bero@redhat.com> - initial package
/etc/ethertypes /etc/sysconfig/ip6tables-config /etc/sysconfig/iptables-config /usr/lib/.build-id /usr/lib/.build-id/02 /usr/lib/.build-id/02/b0ee88c730fd86e033cd05da84e7c916f69b83 /usr/lib/.build-id/08 /usr/lib/.build-id/08/0a1b9fecf7b46c3253266c23bf3a305f25c382 /usr/lib/.build-id/08/b7542223f5d7f20f4bd1b16973abd9cfd5b2f8 /usr/lib/.build-id/09 /usr/lib/.build-id/09/865a5d7d427f9c3e206d1b546e8daa581dce29 /usr/lib/.build-id/09/e3534a573f854cdc4b91abf3500facbc3283fb /usr/lib/.build-id/0a /usr/lib/.build-id/0a/7ca686abe549f0cda3eb4fdb50fd6a5221154a /usr/lib/.build-id/0c /usr/lib/.build-id/0c/db00e9ba7e93367deada20dfe892e456c721cd /usr/lib/.build-id/0e /usr/lib/.build-id/0e/66405732bf42b9ce9f90072d41a645f288c9a5 /usr/lib/.build-id/0f /usr/lib/.build-id/0f/b00d706cb4964836fc353e8ef318ea44b29a1a /usr/lib/.build-id/11 /usr/lib/.build-id/11/b42dc06a38d331189434c423d85b54ec07a841 /usr/lib/.build-id/16 /usr/lib/.build-id/16/007f828b5e3777209401376f4fe0c437356a50 /usr/lib/.build-id/16/f4a06bf6647f54a8e19bfb21a9eacf7a7ade49 /usr/lib/.build-id/18 /usr/lib/.build-id/18/1df448be72e78d89c8495ec937363ab3eef900 /usr/lib/.build-id/18/b742fbf953f0972db858abc5fea5edcdd1a76e /usr/lib/.build-id/1b /usr/lib/.build-id/1b/64f3a744ac47dc4096adccdb126d37613c9d2b /usr/lib/.build-id/1b/eee0361363dda1f0c7ce05450b2690ae5d7011 /usr/lib/.build-id/1c /usr/lib/.build-id/1c/0484e18758a1117e13263845c91658653155ec /usr/lib/.build-id/23 /usr/lib/.build-id/23/763735e3f58dc7487ea7f41ec9d9e56d46ee5f /usr/lib/.build-id/24 /usr/lib/.build-id/24/b4885c79f0adc953f28932b904b87d2d5796d7 /usr/lib/.build-id/2d /usr/lib/.build-id/2d/86d5728ce40c6a690f489d6bcce046ff8d31e4 /usr/lib/.build-id/2d/e45cc994c297c51f22a265f07797899d99022c /usr/lib/.build-id/30 /usr/lib/.build-id/30/55c9c86cb528ab16775f415745fb28a518820f /usr/lib/.build-id/32 /usr/lib/.build-id/32/f87e68114623c48318c0c35972a6403c08b3c3 /usr/lib/.build-id/37 /usr/lib/.build-id/37/2c637faa1113f12feaa006a6d654a3d4dc82ad /usr/lib/.build-id/3e /usr/lib/.build-id/3e/5c7aefe932168a40950e630bf66edc6b839bf0 /usr/lib/.build-id/3f /usr/lib/.build-id/3f/e4fdef1dcb4bd72b05c6c23dc50584a8235a2e /usr/lib/.build-id/44 /usr/lib/.build-id/44/9699057a9200b4ac03e0a502f5bb9762f6f9bb /usr/lib/.build-id/45 /usr/lib/.build-id/45/21a5b26cc6252dd28796a74d128561b79246e1 /usr/lib/.build-id/45/a46ed3d64cf1c501ee8cba1675a4627e52a387 /usr/lib/.build-id/46 /usr/lib/.build-id/46/32656a76756cd4a8cbe3022dc3d826f1d33a14 /usr/lib/.build-id/46/4b0517dbd01745fc29d4d70536a315c49a3c2e /usr/lib/.build-id/49 /usr/lib/.build-id/49/51d958a19ba5463fb21f7e66447862693b1119 /usr/lib/.build-id/4a /usr/lib/.build-id/4a/0d5c5ac8155bd7c793d804cafb61e4cb29ebe6 /usr/lib/.build-id/4a/53b64f87e85fb3e853e69a46db871af3ee36d8 /usr/lib/.build-id/4d /usr/lib/.build-id/4d/199e9133b0dd8b500c74630f15d73517a28db2 /usr/lib/.build-id/50 /usr/lib/.build-id/50/fe1010cd7dd5b153a4421b264375b2bb2deed6 /usr/lib/.build-id/51 /usr/lib/.build-id/51/02aacaeb89a7f87ce748624687ee47e61ca8c3 /usr/lib/.build-id/53 /usr/lib/.build-id/53/b78c25b0dae0e007ddae1d48e6b7bf433e23e1 /usr/lib/.build-id/54 /usr/lib/.build-id/54/c938b0fab8038691211dd38c34105ae76daecc /usr/lib/.build-id/5b /usr/lib/.build-id/5b/968434c2cc6d7b342ab0330f42caeda2efb2b7 /usr/lib/.build-id/5c /usr/lib/.build-id/5c/4c21d35c48db92cecc31859a19fac8e9b7290d /usr/lib/.build-id/5c/50b648b36a8c60534b4e361c10ed45cf665ad4 /usr/lib/.build-id/5d /usr/lib/.build-id/5d/16c339eb7b1d32b716d4a6c9dcddba00cc1996 /usr/lib/.build-id/5f /usr/lib/.build-id/5f/827be700049b4a7a9b138df3c41778554085fb /usr/lib/.build-id/5f/ec4dece80d3cdd047da152cd0d7d5b4a0aa89a /usr/lib/.build-id/63 /usr/lib/.build-id/63/d8166ca329bf8198ef715973086e800c927b97 /usr/lib/.build-id/65 /usr/lib/.build-id/65/a380a88952fdc619473fe80ab7b4958096048e /usr/lib/.build-id/65/e9dc8a73459cb37696c67783eaf4ef16a320f3 /usr/lib/.build-id/66 /usr/lib/.build-id/66/1e64df2a7e7312abf00990a9fc9b039dd9eff3 /usr/lib/.build-id/66/eb185c5861c3922a1053a675725e12ce00c702 /usr/lib/.build-id/6a /usr/lib/.build-id/6a/37debddca6d8e4a8c9980da09b1711e8d4cd65 /usr/lib/.build-id/6b /usr/lib/.build-id/6b/d76204c1a8347a7efac7ca79296b63da39b0a5 /usr/lib/.build-id/6c /usr/lib/.build-id/6c/10811f54ef43976d3eb139d829e1775006315b /usr/lib/.build-id/6c/c743c7fdab4b0ecfd54e4dd8660eb5603cf843 /usr/lib/.build-id/6d /usr/lib/.build-id/6d/1df47908026ac0494f553e86d75595cfbb8b05 /usr/lib/.build-id/6e /usr/lib/.build-id/6e/1d69e6329f9c6d5d7cd6515cc5c2a9ce7b2888 /usr/lib/.build-id/72 /usr/lib/.build-id/72/7fcba935f146e22daf8a79f892a627616412cc /usr/lib/.build-id/74 /usr/lib/.build-id/74/1f3bb6565ddbe95653f063203297ea1311998f /usr/lib/.build-id/74/83403c49d49f6e4f953aae4a6262c313f72061 /usr/lib/.build-id/76 /usr/lib/.build-id/76/f7cd405e4b24ab6ce472f690a1ca07bc8b0603 /usr/lib/.build-id/7b /usr/lib/.build-id/7b/cc4880ea243a509eebc8912807015d04baefba /usr/lib/.build-id/7e /usr/lib/.build-id/7e/1b5d0b13d9f6b63f4c1a6e70038dd57f4df08d /usr/lib/.build-id/80 /usr/lib/.build-id/80/35b8018717a5aebc37c9c7f66f9f648553428d /usr/lib/.build-id/81 /usr/lib/.build-id/81/8adb03a0991679c29ff43158d058031426e0d4 /usr/lib/.build-id/81/8fd4008a2f9770a39879a647fa6b338cc41fae /usr/lib/.build-id/84 /usr/lib/.build-id/84/46958a88debb99464563c21ccfbb08d861fa64 /usr/lib/.build-id/85 /usr/lib/.build-id/85/fcdd7d7fb331ca2c7ae48f5eff18bb9963fc9e /usr/lib/.build-id/89 /usr/lib/.build-id/89/d9850b8448e86dac0c52bdb78db2c30fc75fb2 /usr/lib/.build-id/8a /usr/lib/.build-id/8a/63136d47d30d1e2b9f5d2c194e76ca5ec70fe4 /usr/lib/.build-id/8a/9cd9bfbfd2ce7aa5ebab92fa9423ef193d8e16 /usr/lib/.build-id/8b /usr/lib/.build-id/8b/149a71e4bca024223ebfbb2828d970a243d414 /usr/lib/.build-id/8d /usr/lib/.build-id/8d/fe1e154d4f08ef2e48ec227d911ba28f7b49e9 /usr/lib/.build-id/8e /usr/lib/.build-id/8e/a1eb91ff597d8aca310a4a85b08c4d0003e9e3 /usr/lib/.build-id/8f /usr/lib/.build-id/8f/fcd8e36b227eb47514932b35db2bfb20cc0469 /usr/lib/.build-id/94 /usr/lib/.build-id/94/96e9051e8a153b53131e0138643d155c713d03 /usr/lib/.build-id/96 /usr/lib/.build-id/96/c79b76a1579600bc03a61916a7a4687e4b61f6 /usr/lib/.build-id/97 /usr/lib/.build-id/97/93f2a583e865005d5bd336eb865a77f07ddd43 /usr/lib/.build-id/9a /usr/lib/.build-id/9a/806a94a4996f13523dddc75423075a501d4149 /usr/lib/.build-id/9d /usr/lib/.build-id/9d/a9d05643498854ca6343eee40c0e17e6ff7c22 /usr/lib/.build-id/9d/e0721ac42897f9cb8fc16def8fe6b6720d2f9e /usr/lib/.build-id/9f /usr/lib/.build-id/9f/1dd8243d1fd0f4db837311fc0393f0cacd26b5 /usr/lib/.build-id/a2 /usr/lib/.build-id/a2/4f6f79a993ff858ad5b876e121b7cc8b4f5ce5 /usr/lib/.build-id/a3 /usr/lib/.build-id/a3/49f64fb9ec22f1ff51fcea2806c20d8a937c32 /usr/lib/.build-id/a5 /usr/lib/.build-id/a5/7cf5664fe21524deff6caf4c7206754c99ba06 /usr/lib/.build-id/a6 /usr/lib/.build-id/a6/67edb88a9a7fc67552dd3d1bb2845e6d84fe7d /usr/lib/.build-id/a7 /usr/lib/.build-id/a7/7e1cd049a129984990eb922ea7aee130f1ed53 /usr/lib/.build-id/ac /usr/lib/.build-id/ac/2848375b6134561844621144dee752287e94df /usr/lib/.build-id/ac/7fffea0c8e13b34749f73b6fd0547e3ec51afe /usr/lib/.build-id/ad /usr/lib/.build-id/ad/08f5a2ea6e7f53bfb59550d9fa691fe33be37b /usr/lib/.build-id/af /usr/lib/.build-id/af/703adff8f129480f6429074e90712499db1a89 /usr/lib/.build-id/b1 /usr/lib/.build-id/b1/7781f6b1e7d8a571f372ef289fa3758865c7d1 /usr/lib/.build-id/b4 /usr/lib/.build-id/b4/3d3df71ce0f6fbeef13cdea72e3ac9b210e4be /usr/lib/.build-id/b6 /usr/lib/.build-id/b6/02dad855e97a8b150be044386d9025060b23b7 /usr/lib/.build-id/b9 /usr/lib/.build-id/b9/3eb2db5a35f00d6a9c79afe4596c1b88782ee9 /usr/lib/.build-id/bb /usr/lib/.build-id/bb/61105efc273ab24a3bec2d910be2d173267aa8 /usr/lib/.build-id/be /usr/lib/.build-id/be/afa807941fad39eb0a4706eabd6ec09f40eb48 /usr/lib/.build-id/c5 /usr/lib/.build-id/c5/4dcd0729ef614a08fc5e91cc3c028674ffa657 /usr/lib/.build-id/c5/f839aa03a66be638eaae5854ba46174373a3e4 /usr/lib/.build-id/c6 /usr/lib/.build-id/c6/a849e5caa1dcc27927b37c4ccdb8ae7f3cde2f /usr/lib/.build-id/cb /usr/lib/.build-id/cb/42cb7363d213edc149a990b6d3168efcdd0a66 /usr/lib/.build-id/cc /usr/lib/.build-id/cc/2bdaf65a6d72b1b6960ce51870b5f5b36b9a94 /usr/lib/.build-id/cd /usr/lib/.build-id/cd/a1bcafdc75335fc622d03c40e15ff91fe81939 /usr/lib/.build-id/d5 /usr/lib/.build-id/d5/78957866ee7843cf9bdaa49476bae961eac7c7 /usr/lib/.build-id/d6 /usr/lib/.build-id/d6/596650cd772740061a54238559c7b1ed0234c1 /usr/lib/.build-id/d6/fdafa89ca2e9a7d5d3b0193d1c7b376973b453 /usr/lib/.build-id/db /usr/lib/.build-id/db/d38294f0e280fa0c38f85a348deac5417b66cc /usr/lib/.build-id/db/f55eac9c0c05e4f1fe3908bced071168cdd45e /usr/lib/.build-id/dd /usr/lib/.build-id/dd/412a3ff495d71b73f709661e95e2f0792b8357 /usr/lib/.build-id/dd/c453dac646736df9455cd32933e577358da4a2 /usr/lib/.build-id/e1 /usr/lib/.build-id/e1/f8eaefbb1b6deae0d3f8d4cc8128a90c15446e /usr/lib/.build-id/e2 /usr/lib/.build-id/e2/a1aa130e458f1532b5d5d733df1750389328c2 /usr/lib/.build-id/e6 /usr/lib/.build-id/e6/e9dad936277ec5846a269cabdbabc7ceba7d88 /usr/lib/.build-id/e7 /usr/lib/.build-id/e7/46b88a32659f1358e85d64f4c3ff336955b6f1 /usr/lib/.build-id/e8 /usr/lib/.build-id/e8/0999b76b7d44963da0e1a0b0947059d9f31b10 /usr/lib/.build-id/e8/cc27f9b7cbf652ae32b19617327e58caa3a8ff /usr/lib/.build-id/e9 /usr/lib/.build-id/e9/f8e6a6acf2c6d2c90d62c0a2731ac81e51f0c6 /usr/lib/.build-id/eb /usr/lib/.build-id/eb/0a23748e76c549ba2be1302b09e8287dd03dc1 /usr/lib/.build-id/f2 /usr/lib/.build-id/f2/9784c167621f3db423ad9a8a58419778abc30e /usr/lib/.build-id/f4 /usr/lib/.build-id/f4/691ad460a27a8d052bf09f2a1654b6183c7575 /usr/lib/.build-id/f5 /usr/lib/.build-id/f5/2afebfbe4055e7df41358917305f919b0f3447 /usr/lib/.build-id/f6 /usr/lib/.build-id/f6/0d525a1d4e8b2490ce3c15678f0d3cc9137be2 /usr/lib/.build-id/f7 /usr/lib/.build-id/f7/9aaa9535f66ba54acac9086de724f7ec85c0a6 /usr/lib/.build-id/fa /usr/lib/.build-id/fa/a33dc005dc3c30f27e84a3d07bc7c516b73cec /usr/lib/.build-id/fa/a49b0410a51aac9ea1f663f99fa013cf998a2d /usr/lib/.build-id/fc /usr/lib/.build-id/fc/a2fec912958b6955487b88e6cbbc42791876e8 /usr/lib64/xtables /usr/lib64/xtables/libarpt_mangle.so /usr/lib64/xtables/libebt_802_3.so /usr/lib64/xtables/libebt_among.so /usr/lib64/xtables/libebt_arp.so /usr/lib64/xtables/libebt_arpreply.so /usr/lib64/xtables/libebt_dnat.so /usr/lib64/xtables/libebt_ip.so /usr/lib64/xtables/libebt_ip6.so /usr/lib64/xtables/libebt_log.so /usr/lib64/xtables/libebt_mark.so /usr/lib64/xtables/libebt_mark_m.so /usr/lib64/xtables/libebt_nflog.so /usr/lib64/xtables/libebt_pkttype.so /usr/lib64/xtables/libebt_redirect.so /usr/lib64/xtables/libebt_snat.so /usr/lib64/xtables/libebt_stp.so /usr/lib64/xtables/libebt_vlan.so /usr/lib64/xtables/libip6t_DNAT.so /usr/lib64/xtables/libip6t_DNPT.so /usr/lib64/xtables/libip6t_HL.so /usr/lib64/xtables/libip6t_LOG.so /usr/lib64/xtables/libip6t_MASQUERADE.so /usr/lib64/xtables/libip6t_NETMAP.so /usr/lib64/xtables/libip6t_REDIRECT.so /usr/lib64/xtables/libip6t_REJECT.so /usr/lib64/xtables/libip6t_SNAT.so /usr/lib64/xtables/libip6t_SNPT.so /usr/lib64/xtables/libip6t_ah.so /usr/lib64/xtables/libip6t_dst.so /usr/lib64/xtables/libip6t_eui64.so /usr/lib64/xtables/libip6t_frag.so /usr/lib64/xtables/libip6t_hbh.so /usr/lib64/xtables/libip6t_hl.so /usr/lib64/xtables/libip6t_icmp6.so /usr/lib64/xtables/libip6t_ipv6header.so /usr/lib64/xtables/libip6t_mh.so /usr/lib64/xtables/libip6t_rt.so /usr/lib64/xtables/libip6t_srh.so /usr/lib64/xtables/libipt_CLUSTERIP.so /usr/lib64/xtables/libipt_DNAT.so /usr/lib64/xtables/libipt_ECN.so /usr/lib64/xtables/libipt_LOG.so /usr/lib64/xtables/libipt_MASQUERADE.so /usr/lib64/xtables/libipt_NETMAP.so /usr/lib64/xtables/libipt_REDIRECT.so /usr/lib64/xtables/libipt_REJECT.so /usr/lib64/xtables/libipt_SNAT.so /usr/lib64/xtables/libipt_TTL.so /usr/lib64/xtables/libipt_ULOG.so /usr/lib64/xtables/libipt_ah.so /usr/lib64/xtables/libipt_icmp.so /usr/lib64/xtables/libipt_realm.so /usr/lib64/xtables/libipt_ttl.so /usr/lib64/xtables/libxt_AUDIT.so /usr/lib64/xtables/libxt_CHECKSUM.so /usr/lib64/xtables/libxt_CLASSIFY.so /usr/lib64/xtables/libxt_CONNMARK.so /usr/lib64/xtables/libxt_CONNSECMARK.so /usr/lib64/xtables/libxt_CT.so /usr/lib64/xtables/libxt_DSCP.so /usr/lib64/xtables/libxt_HMARK.so /usr/lib64/xtables/libxt_IDLETIMER.so /usr/lib64/xtables/libxt_LED.so /usr/lib64/xtables/libxt_MARK.so /usr/lib64/xtables/libxt_NFLOG.so /usr/lib64/xtables/libxt_NFQUEUE.so /usr/lib64/xtables/libxt_NOTRACK.so /usr/lib64/xtables/libxt_RATEEST.so /usr/lib64/xtables/libxt_SECMARK.so /usr/lib64/xtables/libxt_SET.so /usr/lib64/xtables/libxt_SYNPROXY.so /usr/lib64/xtables/libxt_TCPMSS.so /usr/lib64/xtables/libxt_TCPOPTSTRIP.so /usr/lib64/xtables/libxt_TEE.so /usr/lib64/xtables/libxt_TOS.so /usr/lib64/xtables/libxt_TPROXY.so /usr/lib64/xtables/libxt_TRACE.so /usr/lib64/xtables/libxt_addrtype.so /usr/lib64/xtables/libxt_bpf.so /usr/lib64/xtables/libxt_cgroup.so /usr/lib64/xtables/libxt_cluster.so /usr/lib64/xtables/libxt_comment.so /usr/lib64/xtables/libxt_connbytes.so /usr/lib64/xtables/libxt_connlabel.so /usr/lib64/xtables/libxt_connlimit.so /usr/lib64/xtables/libxt_connmark.so /usr/lib64/xtables/libxt_conntrack.so /usr/lib64/xtables/libxt_cpu.so /usr/lib64/xtables/libxt_dccp.so /usr/lib64/xtables/libxt_devgroup.so /usr/lib64/xtables/libxt_dscp.so /usr/lib64/xtables/libxt_ecn.so /usr/lib64/xtables/libxt_esp.so /usr/lib64/xtables/libxt_hashlimit.so /usr/lib64/xtables/libxt_helper.so /usr/lib64/xtables/libxt_ipcomp.so /usr/lib64/xtables/libxt_iprange.so /usr/lib64/xtables/libxt_ipvs.so /usr/lib64/xtables/libxt_length.so /usr/lib64/xtables/libxt_limit.so /usr/lib64/xtables/libxt_mac.so /usr/lib64/xtables/libxt_mark.so /usr/lib64/xtables/libxt_multiport.so /usr/lib64/xtables/libxt_nfacct.so /usr/lib64/xtables/libxt_osf.so /usr/lib64/xtables/libxt_owner.so /usr/lib64/xtables/libxt_physdev.so /usr/lib64/xtables/libxt_pkttype.so /usr/lib64/xtables/libxt_policy.so /usr/lib64/xtables/libxt_quota.so /usr/lib64/xtables/libxt_rateest.so /usr/lib64/xtables/libxt_recent.so /usr/lib64/xtables/libxt_rpfilter.so /usr/lib64/xtables/libxt_sctp.so /usr/lib64/xtables/libxt_set.so /usr/lib64/xtables/libxt_socket.so /usr/lib64/xtables/libxt_standard.so /usr/lib64/xtables/libxt_state.so /usr/lib64/xtables/libxt_statistic.so /usr/lib64/xtables/libxt_string.so /usr/lib64/xtables/libxt_tcp.so /usr/lib64/xtables/libxt_tcpmss.so /usr/lib64/xtables/libxt_time.so /usr/lib64/xtables/libxt_tos.so /usr/lib64/xtables/libxt_u32.so /usr/lib64/xtables/libxt_udp.so /usr/sbin/ip6tables /usr/sbin/ip6tables-apply /usr/sbin/ip6tables-restore /usr/sbin/ip6tables-restore-translate /usr/sbin/ip6tables-save /usr/sbin/ip6tables-translate /usr/sbin/iptables /usr/sbin/iptables-apply /usr/sbin/iptables-restore /usr/sbin/iptables-restore-translate /usr/sbin/iptables-save /usr/sbin/iptables-translate /usr/sbin/xtables-monitor /usr/sbin/xtables-nft-multi /usr/share/doc/iptables /usr/share/doc/iptables/INCOMPATIBILITIES /usr/share/licenses/iptables /usr/share/licenses/iptables/COPYING /usr/share/man/man8/ip6tables-apply.8.gz /usr/share/man/man8/ip6tables-restore-translate.8.gz /usr/share/man/man8/ip6tables-restore.8.gz /usr/share/man/man8/ip6tables-save.8.gz /usr/share/man/man8/ip6tables-translate.8.gz /usr/share/man/man8/ip6tables.8.gz /usr/share/man/man8/iptables-apply.8.gz /usr/share/man/man8/iptables-extensions.8.gz /usr/share/man/man8/iptables-restore-translate.8.gz /usr/share/man/man8/iptables-restore.8.gz /usr/share/man/man8/iptables-save.8.gz /usr/share/man/man8/iptables-translate.8.gz /usr/share/man/man8/iptables.8.gz /usr/share/man/man8/xtables-monitor.8.gz /usr/share/man/man8/xtables-nft.8.gz /usr/share/man/man8/xtables-translate.8.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Dec 4 07:37:42 2024