LWN.net Logo

Release of iptables-1.3.3

From:  Netfilter Core Team <coreteam@netfilter.org>
To:  Netfilter Announcement List <netfilter-announce@lists.netfilter.org>, Netfilter Mailinglist <netfilter@lists.netfilter.org>, Netfilter Development Mailinglist <netfilter-devel@lists.netfilter.org>
Subject:  [ANNOUNCE] Release of iptables-1.3.3
Date:  Fri, 29 Jul 2005 15:45:29 +0200
Cc:  lwn@lwn.net
Archive-link:  Article, Thread

Hi!

The netfilter coreteam proudly presents:

	iptables version 1.3.3

The final 1.3.3 version contains accumulated bugfixes to the
last 1.3.2 version.  It also adds support for the upcoming (kernel
2.6.14) NFQUEUE target.

The ChangeLog is attached to this mail.

Version 1.3.3 can be obtained from:

	http://www.netfilter.org/files/iptables-1.3.3.tar.bz2
	ftp://ftp.netfilter.org/pub/iptables/iptables-1.3.3.tar.bz2

Please also note: patch-o-matic-ng is Distributed as seperate package: 
	ftp://ftp.netfilter.org/pub/patch-o-matic-ng/snapshot/
	
More information can be found at the netfilter/iptables project homepage,
available at:

	http://www.netfilter.org/
	http://www.iptables.org/

Happy firewalling,

-- 
- Harald Welte <laforge@netfilter.org>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

iptables v1.3.3 Changelog
======================================================================
This version requires kernel >= 2.4.0
This version recommends kernel >= 2.4.18

Bugs fixed from 1.3.2:

- Fix use-after-free in merge_options()
	[ Markus Sundberg ]

- Fix support for SNAT and DNAT to ICMP ID ranges
	[ Patrick McHardy ]

Changes from 1.3.2:

- Add support for new NFQUEUE targets for IPv4 and IPv6
	[ Harald Welte ]

- Minor manpage updates
	[ Harald Welte ]

- Fix numberous gcc-4 warnings throughout the code
	[ Harald Welte ]

Please note: Since version 1.2.7a, patch-o-matic is now no longer part of
iptables but rather distributed as a seperate package
(ftp://ftp.netfilter.org/pub/patch-o-matic-ng/snapshot)


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFC6jL5NfqJzMqajVsRAhIZAJ4mKktP07GDKwULlyaUw9JVHk6GhgCfaTb/
t6DckjAs20PBzhVNT+gDugM=
=zXpa
-----END PGP SIGNATURE-----


Copyright © 2005, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds