Hi!

The netfilter coreteam proudly presents:

        iptables version 1.2.9rc1

Version 1.2.9rc1 is the first release candidate of the upcoming 1.2.9
version.  Please note that this is a _release candidate_ and not the
final version.  It is supposed to be stable, but might still contain
some minor glitches.  If you are testing 1.2.9rc1 and run into any bugs,
please report them immediately to our bugzilla bug tracking system.

The ChangeLog is attached to this mail.

Version 1.2.9rc1 can be obtained from:

        http://www.netfilter.org/files/iptables-1.2.9rc1.tar.bz2
        ftp://ftp.netfilter.org/pub/iptables/iptables-1.2.9rc1.tar.bz2

Please note that since iptables-1.2.7 patch-o-matic is no longer part of
iptables, but distributed as a seperate package.  You can obtain the
latest release and daily CVS snapshots from:

        ftp://ftp.netfilter.org/pub/patch-o-matic/
        
More information can be found at the netfilter/iptables project homepage,
available at:

        http://www.netfilter.org/
        http://www.iptables.org/

Happy firewalling,

-- 
- Harald Welte <[EMAIL PROTECTED]>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie
iptables v1.2.9rc1 Changelog
======================================================================
This version requires kernel >= 2.4.4
This version recommends kernel >= 2.4.18

Bugs Fixed from 1.2.8:

- ip(6)tables-save/restore: fix memory leaks
        [ Harald Welte, Martin Josefsson ]
- ip6tables: fix printout of odd length netmasks
        [ Mikko Markus Torni ]
- condition match: fix iptables-save
        [ Stephane Ouellette ]
- fuzzy match: fix ip(6)tables-save
        [ Hime Aguiar e Oliveira Jr. ]
- mac match: fix ip(6)tables-save if used inverted (!)
        [ David Zambonini, Martin Josefsson ]
- ip6tables udp match: check for invalid port ranges
        [ Thomas Poehnitz ]
- LOG target: fix iptables-save (save loglevel numerically)
        [ Thomas Woerner ]
- mport match: fix iptables-save (save numerically)
        [ Thomas Woerner ]
- libipq: fix ipq_id_t definition on 'real' 64bit/64bit architectures
        [ Ryan Veety ]
- libip6tc: fix ipv6_prefix_length endianness bugs
        [ Mikko Markus Torni ]

Changes from 1.2.8:

- build plugins for connlimit, iprange, realm, CLASSIFY, CONNMARK, NETMAP
        [ Harald Welte ]
- libip(6)tc: Speedup due to inceremental chain cache updates
        [ Harald Welte ]
- recent match: Update to version 0.3.1 that was submitted to the kernel
        [ Stephen Frost ]
- physdev match: add --physdev-is-{in,out,bridge} option
        [ Bart de Schuymer ]
- REJECT target: add support for ICMP administratively prohibited 
        [ Maciej Soltysiak ]
- conntrack match: add suport for CONFIRMED / unconfirmed state
        [ Harald Welte ]
- ROUTE target: new option: continue traversal
        [ Cedric de Launois ]
- varios cosmetic cleanups
        [ Stephane Ouellette ]
- iptables/libiptc: add support for the new 'raw' table
        [ Jozsef Kadlecsik ]

Please note: Since version 1.2.7a, patch-o-matic is now no longer part of
iptables but rather distributed as a seperate package
(ftp://ftp.netfilter.org/pub/patch-o-matic/)

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to