: Release of iptables-1.4.11.1

The netfilter coreteam presents:

    iptables version 1.4.11.1

a minor release containing bugfixes for problems discovered in the 1.4.11 release as well as some minor documentation updates.

Due to the large number of changes in 1.4.11, some regressions and a few minor bugs made it into the release. This version addresses all identified problems:

- broken inversion support in the owner match

- broken inversion in implicitly loaded protocol extensions, most importantly causing "-p tcp ! --syn" to not negate --syn

- symlink installation fixes

- xml translation missing in IPv6 only builds

See the attached changelogs for the full list of changes.

Version 1.4.11.1 can be obtained from:

http://www.netfilter.org/projects/iptables/downloads.html
ftp://ftp.netfilter.org/pub/iptables/
git://git.netfilter.org/iptables.git

On behalf of the Netfilter Core Team.
Happy firewalling!

Elie De Brauwer (1):
doc: fix trivial typo in libipt_SNAT

Jan Engelhardt (13):
libxt_owner: restore inversion support
build: remove dead code parts
build: fix installation of symlinks
build: fix absence of xml translator in IPv6-only builds
doc: update GPL license text
doc: iptables-xml should be in manpage section 1
build: move basic preprocessor flags to regular_CPPFLAGS
build: move kinclude's preprocessor flags to kinclude_CPPFLAGS
src: move all libiptc pieces into its directory
src: move all iptables pieces into a separate directory
tests: add some sample rulesets to test save-restore cycle
option: fix ignored negation before implicit extension loading
build: re-add missing CPPFLAGS for libiptc

Maciej Żenczykowski (1):
xtables-multi: fix absence of xml translator in IPv6-only builds

Mike Frysinger (1):
build: move remaining preprocessor flags to CPPFLAGS

Patrick McHardy (1):

      Bump version to 1.4.11.1

Vlad Dogaru (1):
doc: fix MASQUERADE section of man page