iptables 1.4.21 release

Hi!

The Netfilter project proudly presents:

        iptables 1.4.21

iptables is the userspace command line program used to configure the Linux packet filtering ruleset. It is targeted towards system administrators. Since Network Address Translation is also configured from the packet filter ruleset, iptables is used for this, too. The iptables package also includes ip6tables. ip6tables is used for configuring the IPv6 packet filter.

This release includes fixes and a couple of new features:

* --nowildcard option for xt_socket, available since Linux kernel 3.11, from Eric Dumazet.

* SYNPROXY support, available since Linux kernel 3.12, from Patrick McHardy.

See ChangeLog that comes attached to this email for more details.

You can download it from:

http://www.netfilter.org/projects/iptables/downloads.html
ftp://ftp.netfilter.org/pub/iptables/

Have fun!

Eric Dumazet (1):

      xt_socket: add --nowildcard flag

Florian Westphal (3):
extensions: libxt_socket: update man page
doc: add libnetfilter_queue pointer to libxt_NFQUEUE.man
doc: merge ip6table man pages into ipv4 ones

Jozsef Kadlecsik (1):
extensions: libxt_set, libxt_SET: check the set family too

Kevin Cernekee (1):
ip6tables: Use consistent exit code for EAGAIN

Laurence J. Lane (8):
iptables: libxt_hashlimit.man: correct address
iptables: libxt_conntrack.man extraneous commas
iptables: libip(6)t_REJECT.man default icmp types
iptables: iptables-xm1.1 correct man section
iptables: libxt_recent.{c,man} dead URL
iptables: libxt_string.man add examples
extensions: libxt_LOG: use generic syslog reference in manpage
iptables: extensions/GNUMakefile.in use CPPFLAGS

Lutz Jaenicke (1):
iptables: correctly reference generated file

Pablo Neira Ayuso (7):
Merge branch 'stable-1.4.20'
Merge branch 'stable-1.4.20'
ip[6]tables: fix incorrect alignment in commands_v_options
build: add software version to manpage first line at configure stage
extensions: libxt_cluster: add note on arptables-jf
utils: nfsynproxy: fix error while compiling the BPF filter iptables 1.4.21 release

Patrick McHardy (2):
extensions: add SYNPROXY extension
utils: add nfsynproxy tool

Phil Oester (4):
iptables: state match incompatibilty across versions
libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks
iptables: improve chain name validation
iptables: spurious error in load_extension

stephen hemminger (1):
xtables: trivial spelling fix

Commit 76e230e41947576efb96e86e605bb84015cdb287 was never merged into master so static builds are still broken for this release :-( Regards.

I am very sorry about this, i've merged stable-1.4.20 to master to fetch this commit.

Hi Pablo,

Bug with ip6tables and helpers

-j CT --helper irc

ip6tables: No chain/target/match by that name.

This *does* work with iptables

Yes, nf_conntrack_irc is ipv4 only at this time.