2
<head><title>The Netfilter HomePage: iptables 1.2.5</title></head>
3
<body bgcolor="#ffffff" text="#101010">
4
<center><h1>The Netfilter HomePage: iptables 1.2.5</h1></center>
6
This version requires kernel >= 2.4.4
7
This version recommends kernel > 2.4.14
10
<strong>Bugs Fixed from 1.2.4:</strong>
12
<li> make iptables-restore accept --table as well as -t option <br>
14
<li> make iptables-restore -v / --verbose option work <br>
16
<li> fix iptables-save problems with saving "ppp+" style interface wildcards<br>
18
<li> make iptables accept '_' and '.' in interface names<br>
21
<li> Kernel bugfixes in patch-o-matic:
23
<li> Fix IRC NAT srcaddr fix (we used to nat DCC connectios to the
24
address of the IRC server<br>
26
<li> Fix potential Oops in TOS target module<br>
28
<li> Fix problem when raw socket has cloned skb while netfilter doing
29
payload modification<br>
31
<li> Fix memory leak in ipchains redirect code<br>
33
<li> Fix reintroduced ECN problem with unclean match<br>
35
<li> Fix MAC adress match problem with small udp packets<br>
40
<strong>Changes from 1.2.4:</strong>
42
<li> Whole patch-o-matic system restructured - now supports multiple
43
patch repositories (submitted, pending, base, extra, newnat).<br>
46
<li> Add IPv6 support to the QUEUE target and libipq<br>
47
[ Fernando Anton / James Morris ]
49
<li> New patch-o-matic patches:
51
<li> New IPV4OPTSSTRIP target to strip IP options<br>
53
<li> New ipv6header match to match IPv6 header options<br>
54
[ Brad Chapman / Andras Kis-Szabo ]
55
<li> New helper match to match RELATED connections on their conntrack helper<br>
57
<li> New quota match to have fixed IP quotas<br>
59
<li> New recent match to match recently seen packets <br>