Release Notes: This release adds support for the Day Transition Ignore option in xt_time.
Release Notes: This release adds support for changes found in Linux 3.5: the "hashlimit" match has gained support for byte-based operation, and the "recent" match has gained the "--mask" option to group hosts.
Release Notes: libiptc was rewritten, which greatly speeds up ruleset load time. Numerous bugfixes were made, especially to iptables-save/restore. A compile option to build a multi-call binary for embedded systems was added.
Release Notes: A segfault problem which occurred when using `!' without argument was fixed. PSD match for psd-delay-threshold > 100 was fixed. ip6tables alignment fixes and various patch-o-matic fixes were made. New ip6tables-restore and ip6tables-save manpages were written. A global PREFIX makefile variable was added for all paths. Debugging is now disabled if iptables is compiled without any COPT_FLAGS. The mangle table now attaches to all five netfilter hooks. The manpages for iptables and ip6tables were updated. The patch-o-matic program now supports removal of already-applied patches, and also supports patches to the userspace extensions. Various patch-o-matic additions were made.
Release Notes: This release has IPv6 support for the QUEUE target and libipq. There are bugfixes in iptables-save/restore. The modules IPV4OPTSSTRIP, ipv6header, quota match, and recent match have been added.
Release Notes: Fixes to ICMPv6 support for IPv6, fixes for problems with REJECT and iptables-restore/iptables-save, a fix for a possible string overflow in psd match, fixes for string match compile problems, and incremental checksumming when altering TTL in TTL target.
Release Notes: Bugs fixed: checksum calculation in the TOS target, PASV ftp with some ftpds, and multiple iptables-save/restore bugs. New features: fxp support, optimized string matching, counter-restore functions for iptables, tcp-window-tracking compatible with NAT helpers, generic sequence number offset API for NAT helpers, port scan detection matching, and lots of ported features for IPv6.