- 
    Fri Sep 27 2013 John Haxby <john.haxby@oracle.com> - 1.3.5-9.2.0.2.el5_8 
    
- Make sure that modules are correctly removed when iptables is stopped (John Haxby) [orabug 17479875]
   
  
  - 
    Wed Oct 31 2012 Tianyue Lan <tianyue.lan@oracle.com> 1.3.5-9.2.0.1.el5_8 
    
- Add TOS syntax to support kernel 2.6.32 series
   
  
  - 
    Thu Aug 30 2012 Thomas Woerner <twoerner@redhat.com> 1.3.5-9.2
    
- added dscp match (rhbz#847729)
   
  
  - 
    Tue Nov 22 2011 Thomas Woerner <twoerner@redhat.com> 1.3.5-9.1
    
- added reload to usage output of init script (rhbz#710050)
- only reload if iptables was started before (rhbz#710050)
   
  
  - 
    Thu Oct 27 2011 Thomas Woerner <twoerner@redhat.com> 1.3.5-9
    
- readded ipt_connlimit_data alignment patch (rhbz#520797)
   
  
  - 
    Thu Oct 27 2011 Thomas Woerner <twoerner@redhat.com> 1.3.5-8
    
- added libipt_statistic support (rhbz#471163)
- added patch to load sysctl settings on iptables start (rhbz#552522)
  Thanks to Martin Foster for the patch
- added patch to load ip_tables.ko just before checking revision support in
  kernel. (rhbz#554340)
- added reload action for service script (rhbz#710050)
   
  
  - 
    Thu Sep 23 2010 Thomas Woerner <twoerner@redhat.com> 1.3.5-7
    
- reverting to 1.3.5-5.4
  - dropped SECMARK targets again (rhbz#535074)
  - dropped ipt_connlimit_data alignment patch (rhbz#520797)
   
  
  - 
    Thu Sep 23 2010 Thomas Woerner <twoerner@redhat.com> 1.3.5-6.1
    
- bump release because of test package build
   
  
  - 
    Tue Sep 07 2010 Thomas Woerner <twoerner@redhat.com> 1.3.5-6
    
- enabled SECMARK targets (rhbz#535074)
   
  
  - 
    Tue Oct 20 2009 Thomas Woerner <twoerner@redhat.com> 1.3.5-5.4
    
- fixed ipt_connlimit_data alignment
  Thanks to Jiri Pirko for the patch
  Resolves: rhbz#520797
   
  
  - 
    Wed May 20 2009 Thomas Woerner <twoerner@redhat.com> 1.3.5-5.3
    
- added build requirement for kernel-headers >= 2.6.18-141.el5
  Related: rhbz#480371
   
  
  - 
    Wed May 13 2009 Thomas Woerner <twoerner@redhat.com> 1.3.5-5.2
    
- reverting init script return codes because of bahaviour change, only fixing
  the ipchains test
  Related: rhbz#242457
   
  
  - 
    Tue May 05 2009 Thomas Woerner <twoerner@redhat.com> 1.3.5-5.1
    
- build with -fno-strict-aliasing
   
  
  - 
    Tue May 05 2009 Thomas Woerner <twoerner@redhat.com> 1.3.5-5
    
- fixed init script return codes for LSB conformance
  Resolves: rhbz#242457
- fixed ICMP6 reject types
  Resolves: rhbz#253014
- fixed missing headers in iptables-devel package
  Resolves: rhbz#402281, rhbz#487649
- fixed dist tag in release
  Resolves: rhbz#440622
- added all options to the man page of iptables-restore
  Resolves: rhbz#474847
- added DSCP match target for IPv6
  Resolves: rhbz#480371
- removed unsuppported ipt_ROUTE from documentation
  Resolves: rhbz#485834
   
  
  - 
    Tue Jan 15 2008 Thomas Woerner <twoerner@redhat.com> 1.3.5-4.el5_8
    
- fixed man page for dscp extension max value
  Resolves: rhbz#239383
- fixed missing extension modules, because of build problems
  Resolves: rhbz#244047
   
  
  - 
    Thu Jul 13 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.2.1
    
- rebuild
   
  
  - 
    Sat Feb 11 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.2
    
- bump again for double-long bug on ppc(64)
   
  
  - 
    Wed Feb 08 2006 Jesse Keating <jkeating@redhat.com> - 1.3.5-1.1
    
- rebuilt for new gcc4.1 snapshot and glibc changes
   
  
  - 
    Fri Feb 03 2006 Thomas Woerner <twoerner@redhat.com> 1.3.5-1
    
- new version 1.3.5
- fixed init script to set policy for raw tables, too (#179094)
   
  
  - 
    Wed Jan 25 2006 Thomas Woerner <twoerner@redhat.com> 1.3.4-3
    
- added important iptables header files to devel package
   
  
  - 
    Sat Dec 10 2005 Jesse Keating <jkeating@redhat.com>
    
- rebuilt
   
  
  - 
    Sat Nov 26 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-2
    
- fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
  replace "_init" with "__attribute((constructor)) my_init"
   
  
  - 
    Sat Nov 26 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-1.1
    
- rebuild due to unresolved symbols in shared libraries
   
  
  - 
    Sat Nov 19 2005 Thomas Woerner <twoerner@redhat.com> 1.3.4-1
    
- new version 1.3.4
- dropped free_opts patch (upstream fixed)
- made libipq PIC (#158623)
- additional configuration options for iptables startup script (#172929)
  Thanks to Jan Gruenwald for the patch
- spec file cleanup (dropped linux_header define and usage)
   
  
  - 
    Tue Jul 19 2005 Thomas Woerner <twoerner@redhat.com> 1.3.2-1
    
- new version 1.3.2 with additional patch for the misplaced free_opts call
  from Marcus Sundberg
   
  
  - 
    Thu May 12 2005 Thomas Woerner <twoerner@redhat.com> 1.3.1-1
    
- new version 1.3.1
   
  
  - 
    Sat Mar 19 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-2
    
- Remove unnecessary explicit kernel dep (#146142)
- Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
  for the patch
- Adapted iptables-config to reference to modprobe.conf (#150143)
- Remove misleading message (#140154): Thanks to Ulrich Drepper
  for the patch
   
  
  - 
    Tue Feb 22 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-1
    
- new version 1.3.0
   
  
  - 
    Fri Nov 12 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3.2
    
- fixed autoload problem in iptables and ip6tables (CAN-2004-0986)
   
  
  - 
    Sat Sep 18 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1
    
- changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
- modified config file to match this change and un-commented variables with
  default values
   
  
  - 
    Fri Sep 17 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-3
    
- applied second part of cleanup patch from (#131848): thanks to Steve Grubb
  for the patch
   
  
  - 
    Thu Aug 26 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-2
    
- fixed free bug in iptables (#128322)
   
  
  - 
    Wed Jun 23 2004 Thomas Woerner <twoerner@redhat.com> 1.2.11-1
    
- new version 1.2.11
   
  
  - 
    Fri Jun 18 2004 Thomas Woerner <twoerner@redhat.com> 1.2.10-1
    
- new version 1.2.10
   
  
  - 
    Wed Jun 16 2004 Elliot Lee <sopwith@redhat.com>
    
- rebuilt
   
  
  - 
    Wed Mar 03 2004 Elliot Lee <sopwith@redhat.com>
    
- rebuilt
   
  
  - 
    Fri Feb 27 2004 Thomas Woerner <twoerner@redhat.com> 1.2.9-2.3
    
- fixed iptables-restore -c fault if there are no counters (#116421)
   
  
  - 
    Sat Feb 14 2004 Elliot Lee <sopwith@redhat.com>
    
- rebuilt
   
  
  - 
    Mon Jan 26 2004 Dan Walsh <dwalsh@redhat.com> 1.2.9-1.2
    
- Close File descriptors to prevent SELinux error message
   
  
  - 
    Thu Jan 08 2004 Thomas Woerner <twoerner@redhat.com> 1.2.9-1.1
    
- rebuild
   
  
  - 
    Thu Dec 18 2003 Thomas Woerner <twoerner@redhat.com> 1.2.9-1
    
- vew version 1.2.9
- new config options in ipXtables-config:
  IPTABLES_MODULES_UNLOAD
- more documentation in ipXtables-config
- fix for netlink security issue in libipq (devel package)
- print fix for libipt_icmp (#109546)
   
  
  - 
    Fri Oct 24 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-13
    
- marked all messages in iptables init script for translation (#107462)
- enabled devel package (#105884, #106101)
- bumped build for fedora for libipt_recent.so (#106002)
   
  
  - 
    Wed Sep 24 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1
    
- fixed lost udp port range in ip6tables-save (#104484)
- fixed non numeric multiport port output in ipXtables-savs
   
  
  - 
    Tue Sep 23 2003 Florian La Roche <Florian.LaRoche@redhat.de> 1.2.8-11
    
- do not link against -lnsl
   
  
  - 
    Thu Sep 18 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-10
    
- made variables in rmmod_r local
   
  
  - 
    Wed Jul 23 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-9
    
- fixed permission for init script
   
  
  - 
    Sun Jul 20 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-8
    
- fixed save when iptables file is missing and iptables-config permissions
   
  
  - 
    Wed Jul 09 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-7
    
- fixes for ip6tables: module unloading, setting policy only for existing 
  tables
   
  
  - 
    Fri Jul 04 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-6
    
- IPTABLES_SAVE_COUNTER defaults to no, now
- install config file in /etc/sysconfig
- exchange unload of ip_tables and ip_conntrack
- fixed start function
   
  
  - 
    Thu Jul 03 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-5
    
- new config option IPTABLES_SAVE_ON_RESTART
- init script: new status, save and restart
- fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374
   
  
  - 
    Tue Jul 01 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-4
    
- new config option IPTABLES_STATUS_NUMERIC
- cleared IPTABLES_MODULES in iptables-config
   
  
  - 
    Tue Jul 01 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-3
    
- new init scripts
   
  
  - 
    Sun Jun 29 2003 Florian La Roche <Florian.LaRoche@redhat.de>
    
- remove check for very old kernel versions in init scripts
- sync up both init scripts and remove some further ugly things
- add some docu into rpm
   
  
  - 
    Fri Jun 27 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-2
    
- rebuild
   
  
  - 
    Tue Jun 17 2003 Thomas Woerner <twoerner@redhat.com> 1.2.8-1
    
- update to 1.2.8
   
  
  - 
    Thu Jan 23 2003 Tim Powers <timp@redhat.com>
    
- rebuilt
   
  
  - 
    Tue Jan 14 2003 Bill Nottingham <notting@redhat.com> 1.2.7a-1
    
- update to 1.2.7a
- add a plethora of bugfixes courtesy Michael Schwendt <mschewndt@yahoo.com>
   
  
  - 
    Sat Dec 14 2002 Elliot Lee <sopwith@redhat.com> 1.2.6a-3
    
- Fix multilib
   
  
  - 
    Thu Aug 08 2002 Karsten Hopp <karsten@redhat.de>
    
- fixed iptables and ip6tables initscript output, based on #70511
- check return status of all iptables calls, not just the last one
  in a 'for' loop.
   
  
  - 
    Tue Jul 30 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.6a-1
    
- 1.2.6a (bugfix release, #69747)
   
  
  - 
    Sat Jun 22 2002 Tim Powers <timp@redhat.com>
    
- automated rebuild
   
  
  - 
    Fri May 24 2002 Tim Powers <timp@redhat.com>
    
- automated rebuild
   
  
  - 
    Tue Mar 05 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-3
    
- Add some fixes from CVS, fixing bug #60465
   
  
  - 
    Wed Feb 13 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2
    
- Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
  - Update URL (#59354)
- Use /sbin/chkconfig rather than chkconfig in %postun script
   
  
  - 
    Sat Jan 12 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-1
    
- 1.2.5
   
  
  - 
    Thu Jan 10 2002 Tim Powers <timp@redhat.com>
    
- automated rebuild
   
  
  - 
    Tue Nov 06 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-2
    
- Fix %preun script
   
  
  - 
    Wed Oct 31 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1
    
- Update to 1.2.4 (various fixes, including security fixes; among others:
  - Fix init script (#31133)
   
  
  - 
    Tue Sep 04 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-1
    
- 1.2.3 (5 security fixes, some other fixes)
- Fix updating (#53032)
   
  
  - 
    Tue Aug 28 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-4
    
- Fix #50990
- Add some fixes from current CVS; should fix #52620
   
  
  - 
    Tue Jul 17 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-3
    
- Add some fixes from the current CVS tree; fixes #49154 and some IPv6
  issues
   
  
  - 
    Wed Jun 27 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-2
    
- Fix iptables-save reject-with (#45632), Patch from Michael Schwendt
  <mschwendt@yahoo.com>
   
  
  - 
    Wed May 09 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-1
    
- 1.2.2
   
  
  - 
    Thu Mar 22 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- 1.2.1a, fixes #28412, #31136, #31460, #31133
   
  
  - 
    Fri Mar 02 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- Yet another initscript fix (#30173)
- Fix the fixes; they fixed some issues but broke more important
  stuff :/ (#30176)
   
  
  - 
    Wed Feb 28 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- Fix up initscript (#27962)
- Add fixes from CVS to iptables-{restore,save}, fixing #28412
   
  
  - 
    Sat Feb 10 2001 Karsten Hopp <karsten@redhat.de>
    
- create /etc/sysconfig/iptables mode 600 (same problem as #24245)
   
  
  - 
    Tue Feb 06 2001 Karsten Hopp <karsten@redhat.de>
    
- fix bugzilla #25986 (initscript not marked as config file)
- fix bugzilla #25962 (iptables-restore)
- mv chkconfig --del from postun to preun
   
  
  - 
    Fri Feb 02 2001 Trond Eivind Glomsrød <teg@redhat.com>
    
- Fix check for ipchains
   
  
  - 
    Tue Jan 30 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- Some fixes to init scripts
   
  
  - 
    Thu Jan 25 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- Add some fixes from CVS, fixes among other things Bug #24732
   
  
  - 
    Thu Jan 18 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- Add missing man pages, fix up init script (Bug #17676)
   
  
  - 
    Tue Jan 16 2001 Bill Nottingham <notting@redhat.com>
    
- add init script
   
  
  - 
    Tue Jan 16 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- 1.2
- fix up ipv6 split
- add init script
- Move the plugins from /usr/lib/iptables to /lib/iptables.
  This needs to work before /usr is mounted...
- Use -O1 on alpha (compiler bug)
   
  
  - 
    Sun Jan 07 2001 Bernhard Rosenkraenzer <bero@redhat.com>
    
- 1.1.2
- Add IPv6 support (in separate package)
   
  
  - 
    Fri Aug 18 2000 Bill Nottingham <notting@redhat.com>
    
- build everywhere
   
  
  - 
    Wed Jul 26 2000 Bernhard Rosenkraenzer <bero@redhat.com>
    
- 1.1.1
   
  
  - 
    Fri Jul 14 2000 Prospector <bugzilla@redhat.com>
    
- automatic rebuild
   
  
  - 
    Wed Jun 28 2000 Preston Brown <pbrown@redhat.com>
    
- move iptables to /sbin.
- excludearch alpha for now, not building there because of compiler bug(?)
   
  
  - 
    Sat Jun 10 2000 Bill Nottingham <notting@redhat.com>
    
- don't obsolete ipchains either
- update to 1.1.0
   
  
  - 
    Mon Jun 05 2000 Bill Nottingham <notting@redhat.com>
    
- remove explicit kernel requirement
   
  
  - 
    Wed May 03 2000 Bernhard Rosenkränzer <bero@redhat.com>
    
- initial package