The netfilter coreteam presents:
iptables version 1.4.11.1
a minor release containing bugfixes for problems discovered in
the 1.4.11 release as well as some minor documentation updates.
Due to the large number of changes in 1.4.11, some regressions
and a few minor bugs made it into the release. This version
addresses all identified problems:
- broken inversion support in the owner match
- broken inversion in implicitly loaded protocol extensions, most
importantly causing "-p tcp ! --syn" to not negate --syn
- symlink installation fixes
- xml translation missing in IPv6 only builds
See the attached changelogs for the full list of changes.
Version 1.4.11.1 can be obtained from:
http://www.netfilter.org/projects/iptables/downloads.html
ftp://ftp.netfilter.org/pub/iptables/
git://git.netfilter.org/iptables.git
On behalf of the Netfilter Core Team.
Happy firewalling!
Elie De Brauwer (1):
doc: fix trivial typo in libipt_SNAT
Jan Engelhardt (13):
libxt_owner: restore inversion support
build: remove dead code parts
build: fix installation of symlinks
build: fix absence of xml translator in IPv6-only builds
doc: update GPL license text
doc: iptables-xml should be in manpage section 1
build: move basic preprocessor flags to regular_CPPFLAGS
build: move kinclude's preprocessor flags to kinclude_CPPFLAGS
src: move all libiptc pieces into its directory
src: move all iptables pieces into a separate directory
tests: add some sample rulesets to test save-restore cycle
option: fix ignored negation before implicit extension loading
build: re-add missing CPPFLAGS for libiptc
Maciej Żenczykowski (1):
xtables-multi: fix absence of xml translator in IPv6-only builds
Mike Frysinger (1):
build: move remaining preprocessor flags to CPPFLAGS
Patrick McHardy (1):
Bump version to 1.4.11.1
Vlad Dogaru (1):
doc: fix MASQUERADE section of man page
