- 
    Tue Dec 20 2011 Fredrick He <fredrick.he@oracle.com> - 1.3.5-9.1.0.1.el5
    
- Add TOS syntax to support kernel 2.6.32 series
   
  
  - 
    Mon Nov 21 2011 Thomas Woerner <twoerner@redhat.com> 1.3.5-9.1
    
- added reload to usage output of init script (rhbz#710050)
- only reload if iptables was started before (rhbz#710050)
   
  
  - 
    Wed Oct 26 2011 Thomas Woerner <twoerner@redhat.com> 1.3.5-9
    
- readded ipt_connlimit_data alignment patch (rhbz#520797)
   
  
  - 
    Wed Oct 26 2011 Thomas Woerner <twoerner@redhat.com> 1.3.5-8
    
- added libipt_statistic support (rhbz#471163)
- added patch to load sysctl settings on iptables start (rhbz#552522)
  Thanks to Martin Foster for the patch
- added patch to load ip_tables.ko just before checking revision support in
  kernel. (rhbz#554340)
- added reload action for service script (rhbz#710050)
   
  
  - 
    Wed Sep 22 2010 Thomas Woerner <twoerner@redhat.com> 1.3.5-7
    
- reverting to 1.3.5-5.4
  - dropped SECMARK targets again (rhbz#535074)
  - dropped ipt_connlimit_data alignment patch (rhbz#520797)
   
  
  - 
    Wed Sep 22 2010 Thomas Woerner <twoerner@redhat.com> 1.3.5-6.1
    
- bump release because of test package build
   
  
  - 
    Mon Sep 06 2010 Thomas Woerner <twoerner@redhat.com> 1.3.5-6
    
- enabled SECMARK targets (rhbz#535074)
   
  
  - 
    Mon Oct 19 2009 Thomas Woerner <twoerner@redhat.com> 1.3.5-5.4
    
- fixed ipt_connlimit_data alignment
  Thanks to Jiri Pirko for the patch
  Resolves: rhbz#520797
   
  
  - 
    Tue May 19 2009 Thomas Woerner <twoerner@redhat.com> 1.3.5-5.3
    
- added build requirement for kernel-headers >= 2.6.18-141.el5
  Related: rhbz#480371
   
  
  - 
    Tue May 12 2009 Thomas Woerner <twoerner@redhat.com> 1.3.5-5.2
    
- reverting init script return codes because of bahaviour change, only fixing
  the ipchains test
  Related: rhbz#242457
   
  
  - 
    Mon May 04 2009 Thomas Woerner <twoerner@redhat.com> 1.3.5-5.1
    
- build with -fno-strict-aliasing
   
  
  - 
    Mon May 04 2009 Thomas Woerner <twoerner@redhat.com> 1.3.5-5
    
- fixed init script return codes for LSB conformance
  Resolves: rhbz#242457
- fixed ICMP6 reject types
  Resolves: rhbz#253014
- fixed missing headers in iptables-devel package
  Resolves: rhbz#402281, rhbz#487649
- fixed dist tag in release
  Resolves: rhbz#440622
- added all options to the man page of iptables-restore
  Resolves: rhbz#474847
- added DSCP match target for IPv6
  Resolves: rhbz#480371
- removed unsuppported ipt_ROUTE from documentation
  Resolves: rhbz#485834
   
  
  - 
    Mon Jan 14 2008 Thomas Woerner <twoerner@redhat.com> 1.3.5-4.el5
    
- fixed man page for dscp extension max value
  Resolves: rhbz#239383
- fixed missing extension modules, because of build problems
  Resolves: rhbz#244047
   
  
  - 
    Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.2.1
    
- rebuild
   
  
  - 
    Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.2
    
- bump again for double-long bug on ppc(64)
   
  
  - 
    Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.1
    
- rebuilt for new gcc4.1 snapshot and glibc changes
   
  
  - 
    Thu Feb 02 2006 Thomas Woerner <twoerner@redhat.com> 1.3.5-1
    
- new version 1.3.5
- fixed init script to set policy for raw tables, too (#179094)
   
  
  - 
    Tue Jan 24 2006 Thomas Woerner <twoerner@redhat.com> 1.3.4-3
    
- added important iptables header files to devel package
   
  
  - 
    Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
    
- rebuilt
   
  
  - 
    Fri Nov 25 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-2
    
- fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
  replace "_init" with "__attribute((constructor)) my_init"
   
  
  - 
    Fri Nov 25 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-1.1
    
- rebuild due to unresolved symbols in shared libraries
   
  
  - 
    Fri Nov 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-1
    
- new version 1.3.4
- dropped free_opts patch (upstream fixed)
- made libipq PIC (#158623)
- additional configuration options for iptables startup script (#172929)
  Thanks to Jan Gruenwald for the patch
- spec file cleanup (dropped linux_header define and usage)
   
  
  - 
    Mon Jul 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.2-1
    
- new version 1.3.2 with additional patch for the misplaced free_opts call
  from Marcus Sundberg
   
  
  - 
    Wed May 11 2005 Thomas Woerner <twoerner@redhat.com> 1.3.1-1
    
- new version 1.3.1
   
  
  - 
    Fri Mar 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-2
    
- Remove unnecessary explicit kernel dep (#146142)
- Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
  for the patch
- Adapted iptables-config to reference to modprobe.conf (#150143)
- Remove misleading message (#140154): Thanks to Ulrich Drepper
  for the patch
   
  
  - 
    Mon Feb 21 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-1
    
- new version 1.3.0
   
  
  - 
    Thu Nov 11 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3.2
    
- fixed autoload problem in iptables and ip6tables (CAN-2004-0986)
   
  
  - 
    Fri Sep 17 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1
    
- changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
- modified config file to match this change and un-commented variables with
  default values
   
  
  - 
    Thu Sep 16 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3
    
- applied second part of cleanup patch from (#131848): thanks to Steve Grubb
  for the patch
   
  
  - 
    Wed Aug 25 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-2
    
- fixed free bug in iptables (#128322)
   
  
  - 
    Tue Jun 22 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-1
    
- new version 1.2.11
   
  
  - 
    Thu Jun 17 2004 Thomas Woerner <twoerner@redhat.com> 1.2.10-1
    
- new version 1.2.10
   
  
  - 
    Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
    
- rebuilt
   
  
  - 
    Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
    
- rebuilt
   
  
  - 
    Thu Feb 26 2004 Thomas Woerner <twoerner@redhat.com> 1.2.9-2.3
    
- fixed iptables-restore -c fault if there are no counters (#116421)
   
  
  - 
    Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
    
- rebuilt
   
  
  - 
    Sun Jan 25 2004 Dan Walsh <dwalsh@redhat.com> 1.2.9-1.2
    
- Close File descriptors to prevent SELinux error message
   
  
  - 
    Wed Jan 07 2004 Thomas Woerner <twoerner@redhat.com> 1.2.9-1.1
    
- rebuild
   
  
  - 
    Wed Dec 17 2003 Thomas Woerner <twoerner@redhat.com> 1.2.9-1
    
- vew version 1.2.9
- new config options in ipXtables-config:
  IPTABLES_MODULES_UNLOAD
- more documentation in ipXtables-config
- fix for netlink security issue in libipq (devel package)
- print fix for libipt_icmp (#109546)
   
  
  - 
    Thu Oct 23 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-13
    
- marked all messages in iptables init script for translation (#107462)
- enabled devel package (#105884, #106101)
- bumped build for fedora for libipt_recent.so (#106002)
   
  
  - 
    Tue Sep 23 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1
    
- fixed lost udp port range in ip6tables-save (#104484)
- fixed non numeric multiport port output in ipXtables-savs
   
  
  - 
    Mon Sep 22 2003 Florian La Roche <Florian.LaRoche@redhat.de> 1.2.8-11
    
- do not link against -lnsl
   
  
  - 
    Wed Sep 17 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-10
    
- made variables in rmmod_r local
   
  
  - 
    Tue Jul 22 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-9
    
- fixed permission for init script
   
  
  - 
    Sat Jul 19 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-8
    
- fixed save when iptables file is missing and iptables-config permissions
   
  
  - 
    Tue Jul 08 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-7
    
- fixes for ip6tables: module unloading, setting policy only for existing 
  tables
   
  
  - 
    Thu Jul 03 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-6
    
- IPTABLES_SAVE_COUNTER defaults to no, now
- install config file in /etc/sysconfig
- exchange unload of ip_tables and ip_conntrack
- fixed start function
   
  
  - 
    Wed Jul 02 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-5
    
- new config option IPTABLES_SAVE_ON_RESTART
- init script: new status, save and restart
- fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374
   
  
  - 
    Mon Jun 30 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-4
    
- new config option IPTABLES_STATUS_NUMERIC
- cleared IPTABLES_MODULES in iptables-config
   
  
  - 
    Mon Jun 30 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-3
    
- new init scripts
   
  
  - 
    Sat Jun 28 2003 Florian La Roche <Florian.LaRoche@redhat.de>
    
- remove check for very old kernel versions in init scripts
- sync up both init scripts and remove some further ugly things
- add some docu into rpm
   
  
  - 
    Thu Jun 26 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-2
    
- rebuild
   
  
  - 
    Mon Jun 16 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-1
    
- update to 1.2.8
   
  
  - 
    Wed Jan 22 2003 Tim Powers <timp@redhat.com>
    
- rebuilt
   
  
  - 
    Mon Jan 13 2003 Bill Nottingham <notting@redhat.com> 1.2.7a-1
    
- update to 1.2.7a
- add a plethora of bugfixes courtesy Michael Schwendt <mschewndt@yahoo.com>
   
  
  - 
    Fri Dec 13 2002 Elliot Lee <sopwith@redhat.com> 1.2.6a-3
    
- Fix multilib
   
  
  - 
    Wed Aug 07 2002 Karsten Hopp <karsten@redhat.de>
    
- fixed iptables and ip6tables initscript output, based on #70511
- check return status of all iptables calls, not just the last one
  in a 'for' loop.
   
  
  - 
    Mon Jul 29 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.6a-1
    
- 1.2.6a (bugfix release, #69747)
   
  
  - 
    Fri Jun 21 2002 Tim Powers <timp@redhat.com>
    
- automated rebuild
   
  
  - 
    Thu May 23 2002 Tim Powers <timp@redhat.com>
    
- automated rebuild
   
  
  - 
    Mon Mar 04 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-3
    
- Add some fixes from CVS, fixing bug #60465
   
  
  - 
    Tue Feb 12 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2
    
- Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
  - Update URL (#59354)
- Use /sbin/chkconfig rather than chkconfig in %postun script
   
  
  - 
    Fri Jan 11 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-1
    
- 1.2.5
   
  
  - 
    Wed Jan 09 2002 Tim Powers <timp@redhat.com>
    
- automated rebuild
   
  
  - 
    Mon Nov 05 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-2
    
- Fix %preun script
   
  
  - 
    Tue Oct 30 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1
    
- Update to 1.2.4 (various fixes, including security fixes; among others:
  - Fix init script (#31133)
   
  
  - 
    Mon Sep 03 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-1
    
- 1.2.3 (5 security fixes, some other fixes)
- Fix updating (#53032)
   
  
  - 
    Mon Aug 27 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-4
    
- Fix #50990
- Add some fixes from current CVS; should fix #52620
   
  
  - 
    Mon Jul 16 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-3
    
- Add some fixes from the current CVS tree; fixes #49154 and some IPv6
  issues
   
  
  - 
    Tue Jun 26 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-2
    
- Fix iptables-save reject-with (#45632), Patch from Michael Schwendt
  <mschwendt@yahoo.com>
   
  
  - 
    Tue May 08 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-1
    
- 1.2.2
   
  
  - 
    Wed Mar 21 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- 1.2.1a, fixes #28412, #31136, #31460, #31133
   
  
  - 
    Thu Mar 01 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- Yet another initscript fix (#30173)
- Fix the fixes; they fixed some issues but broke more important
  stuff :/ (#30176)
   
  
  - 
    Tue Feb 27 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- Fix up initscript (#27962)
- Add fixes from CVS to iptables-{restore,save}, fixing #28412
   
  
  - 
    Fri Feb 09 2001 Karsten Hopp <karsten@redhat.de>
    
- create /etc/sysconfig/iptables mode 600 (same problem as #24245)
   
  
  - 
    Mon Feb 05 2001 Karsten Hopp <karsten@redhat.de>
    
- fix bugzilla #25986 (initscript not marked as config file)
- fix bugzilla #25962 (iptables-restore)
- mv chkconfig --del from postun to preun
   
  
  - 
    Thu Feb 01 2001 Trond Eivind Glomsrød <teg@redhat.com>
    
- Fix check for ipchains
   
  
  - 
    Mon Jan 29 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- Some fixes to init scripts
   
  
  - 
    Wed Jan 24 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- Add some fixes from CVS, fixes among other things Bug #24732
   
  
  - 
    Wed Jan 17 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- Add missing man pages, fix up init script (Bug #17676)
   
  
  - 
    Mon Jan 15 2001 Bill Nottingham <notting@redhat.com>
    
- add init script
   
  
  - 
    Mon Jan 15 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- 1.2
- fix up ipv6 split
- add init script
- Move the plugins from /usr/lib/iptables to /lib/iptables.
  This needs to work before /usr is mounted...
- Use -O1 on alpha (compiler bug)
   
  
  - 
    Sat Jan 06 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- 1.1.2
- Add IPv6 support (in separate package)
   
  
  - 
    Thu Aug 17 2000 Bill Nottingham <notting@redhat.com>
    
- build everywhere
   
  
  - 
    Tue Jul 25 2000 Bernhard Rosenkraenzer <bero@redhat.com>
    
- 1.1.1
   
  
  - 
    Thu Jul 13 2000 Prospector <bugzilla@redhat.com>
    
- automatic rebuild
   
  
  - 
    Tue Jun 27 2000 Preston Brown <pbrown@redhat.com>
    
- move iptables to /sbin.
- excludearch alpha for now, not building there because of compiler bug(?)
   
  
  - 
    Fri Jun 09 2000 Bill Nottingham <notting@redhat.com>
    
- don't obsolete ipchains either
- update to 1.1.0
   
  
  - 
    Sun Jun 04 2000 Bill Nottingham <notting@redhat.com>
    
- remove explicit kernel requirement
   
  
  - 
    Tue May 02 2000 Bernhard Rosenkränzer <bero@redhat.com>
    
- initial package